Ipswitch Imail Plus vulnerabilities

2 CVEs affecting Ipswitch Imail Plus, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-1637, published 2007-03-23.

More from Ipswitch.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2006-4379, published 2006-09-08. High severity, CVSS 7.5. EPSS: 60.9% chance of exploitation in the next 30 days. Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IMail Secure allows remote attackers to execute arbitrary…
• CVE-2007-1637, published 2007-03-23. High severity, CVSS 9.3. EPSS: 5.6% chance of exploitation in the next 30 days. Multiple buffer overflows in the IMAILAPILib ActiveX control (IMailAPI.dll) in Ipswitch IMail Server before 2006.2 allow remote attackers to execute arbitrary code via the (1) WebConnect and (2)…