CVE-2007-6101: Code-Crafters Ability Mail Server

Medium severity, CVSS 4.0. EPSS: 1.4% chance of exploitation in the next 30 days.

Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service (daemon crash) via (1) malformed number list ranges in unspecified IMAP commands, and possibly (2) a blank string in unspecified messages.

Affected products

• Code-Crafters Ability Mail Server: version 1.18 only; version 2.01b only; version 2.02b only; version 2.03b only; version 2.04b only; version 2.05b only; …

Published 2007-11-23. Last modified 2026-06-16.