CVE-2007-3803: Clavister Coreplus

High severity, CVSS 10.0. EPSS: 2.3% chance of exploitation in the next 30 days.

The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properly parse SMTP commands in certain circumstances, which allows remote attackers to bypass address blacklists.

Affected products

• Clavister Clavister Coreplus: up to and including 8.80.03; up to and including 8.81.00

Published 2007-07-16. Last modified 2026-06-16.