CVE-2007-4335: Qbik Wingate

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

Format string vulnerability in the SMTP server component in Qbik WinGate 5.x and 6.x before 6.2.2 allows remote attackers to cause a denial of service (service crash) via format string specifiers in certain unexpected commands, which trigger a crash during error logging.

Affected products

• Qbik Wingate: up to and including 6.2.1; version 5.0 only; version 6.0 only

Published 2007-08-14. Last modified 2026-06-16.