CVE-2006-6751: Dxmsoft Xm Easy Personal FTP Server

Medium severity, CVSS 5.0. EPSS: 3.4% chance of exploitation in the next 30 days.

Format string vulnerability in XM Easy Personal FTP Server 5.2.1 allows remote attackers to cause a denial of service (application crash) via format string specifiers in the USER command or certain other available or nonexistent commands. NOTE: It was later reported that 5.3.0 is also vulnerable.

Affected products

• Dxmsoft Xm Easy Personal FTP Server: version 5.2.1 only; version 5.3 only

Published 2006-12-27. Last modified 2026-06-16.