CVE-2007-4646: Hexamail Server

High severity, CVSS 10.0. EPSS: 15.5% chance of exploitation in the next 30 days.

Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of service (daemon crash) and probably execute arbitrary code via a long USER command.

Affected products

• Hexamail Hexamail Server: version 3.0.0.001_lite only

Published 2007-08-31. Last modified 2026-06-16.