CVE-2007-1578: Atrium Software Mercur Imapd

High severity, CVSS 10.0. EPSS: 16.3% chance of exploitation in the next 30 days.

Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD (mcrimap4.exe) 5.00.14, with SP4, allow remote attackers to execute arbitrary code via a long NTLMSSP argument that triggers a stack-based buffer overflow.

Affected products

• Atrium Software Mercur Imapd: version 5.00.14 only

Published 2007-03-21. Last modified 2026-06-16.