CVE-2005-1252: Ipswitch Imail

Medium severity, CVSS 5.0. EPSS: 12.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote attackers to read arbitrary files via "..\" (dot dot backslash) sequences in the query string argument in a GET request to a non-existent .jsp file.

Affected products

• Ipswitch Imail: version 8.13 only
• Ipswitch Imail Server: up to and including 8.2_hotfix_2

Published 2005-05-25. Last modified 2026-06-16.