Vulnerabilities > Ipswitch
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2008-02-25 | CVE-2008-0946 | Path Traversal vulnerability in Ipswitch Imserver and Instant Messaging Directory traversal vulnerability in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to create arbitrary empty files via a .. | 4.9 |
| 2008-02-25 | CVE-2008-0945 | USE of Externally-Controlled Format String vulnerability in Ipswitch Imserver and Instant Messaging Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in an IP address field. | 3.5 |
| 2008-02-25 | CVE-2008-0944 | Numeric Errors vulnerability in Ipswitch Instant Messaging 2.0.8.1 Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote attackers to cause a denial of service (NULL dereference and application crash) via a version field containing zero. | 5.0 |
| 2008-02-06 | CVE-2008-0608 | Buffer Errors vulnerability in Ipswitch WS FTP 6.1 The Logging Server (ftplogsrv.exe) 7.9.14.0 and earlier in IPSwitch WS_FTP 6.1 allows remote attackers to cause a denial of service (loss of responsiveness) via a large number of large packets to port 5151/udp, which causes the listening socket to terminate and prevents log commands from being recorded, a different vulnerability than CVE-2007-3823. | 5.0 |
| 2007-10-31 | CVE-2007-4345 | Buffer Errors vulnerability in Ipswitch Imail Client and Imail Server Buffer overflow in IMail Client 9.22, as shipped with IPSwitch IMail Server 2006.22, allows remote attackers to execute arbitrary code via a long boundary parameter in a multipart MIME e-mail message. | 7.5 |
| 2007-09-26 | CVE-2007-5094 | Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Ipswitch Imail Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute arbitrary code via a set of four different e-mail messages with a long boundary parameter in a certain malformed Content-Type header line, the string "MIME" by itself on a line in the header, and a long Content-Transfer-Encoding header line. | 7.5 |
| 2007-08-28 | CVE-2007-4555 | Cross-Site Scripting vulnerability in Ipswitch WS FTP Cross-site scripting (XSS) vulnerability in Ipswitch WS_FTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. | 4.3 |
| 2007-07-24 | CVE-2007-3959 | Remote Denial of Service vulnerability in Ipswitch Imserver and Ipswitch Collaboration Suite The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (daemon crash) via certain data to TCP port 5179 that overwrites a destructor, as reachable by the (1) DoAttachVideoSender, (2) DoAttachVideoReceiver, (3) DoAttachAudioSender, and (4) DoAttachAudioReceiver functions. | 5.0 |
| 2007-07-21 | CVE-2007-3927 | Buffer Overflow vulnerability in Ipswitch Imail Server and Ipswitch Collaboration Suite Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow attackers to have an unknown impact via an unspecified vector related to "subscribe." | 10.0 |
| 2007-07-21 | CVE-2007-3926 | Denial-Of-Service vulnerability in Ipswitch Imail Server 2006.2 Ipswitch IMail Server 2006 before 2006.21 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involving an "overwritten destructor." | 7.8 |