CVE-2007-1373: Pmail Mercury Mail Transport System

High severity, CVSS 10.0. EPSS: 60.2% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier allows remote attackers to execute arbitrary code via a long LOGIN command. NOTE: this might be the same issue as CVE-2006-5961.

Affected products

• Pmail Mercury Mail Transport System: up to and including 4.01b

Published 2007-03-10. Last modified 2026-06-16.