CVE-2007-4211: Dovecot

Medium severity, CVSS 6.0. EPSS: 1.4% chance of exploitation in the next 30 days.

The ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to save certain flags via a (1) COPY or (2) APPEND command.

Affected products

• Dovecot Dovecot: up to and including 1.0.2

Published 2007-08-08. Last modified 2026-06-16.