CVE-2007-1713: b21soft BASP21

Medium severity, CVSS 6.4. EPSS: 1.4% chance of exploitation in the next 30 days.

CRLF injection vulnerability in BSMTP.DLL in B21Soft BASP21 2003.0211, and BASP21 Pro 1.0.702.27 and earlier, allows remote attackers to inject arbitrary headers into e-mail messages via CRLF sequences in Subject lines.

Affected products

• b21soft BASP21: up to and including 1.0.702.27; version 2003.0211 only

Published 2007-03-27. Last modified 2026-06-16.