ipswitch imail

Name: ipswitch imail
Brand: ipswitch

productUS

cpe:2.3:a:ipswitch:imail:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical17high20medium1low

updated 2026-10-28

vulnerabilities (38)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2004-1520US	medium4.6	88.5% (100th)	Exploit	no fix	2004-12-31	= 8.13
CVE-1999-1551US	medium5.0	71.8% (99th)	Exploit	no fix	1999-03-02	2 versions
CVE-2004-0297US	high10.0	68.1% (99th)	Exploit	no fix	2004-11-23	2 versions
CVE-2005-1255US	high10.0	42.8% (99th)	Exploit	no fix	2005-05-25	2 versions
CVE-2007-2795US	high9.0	24.5% (98th)	Exploit	no fix	2009-01-27	2 versions
CVE-1999-1046US	high10.0	14.8% (97th)	Exploit	no fix	1999-03-01	= 5.0
CVE-2002-1076US	high7.5	13.8% (97th)	Exploit	no fix	2002-10-04	12 versions
CVE-2002-1077US	medium5.0	10.7% (96th)	Exploit	no fix	2002-10-04	12 versions
CVE-2001-1287US	high7.5	9.91% (96th)	Exploit	no fix	2001-10-12	3 versions
CVE-1999-1557US	medium5.0	8.44% (95th)	Exploit	no fix	2005-05-02	≤ 5.0
CVE-2000-0780US	medium6.4	6.91% (94th)	Exploit	no fix	2000-10-20	6 versions
CVE-2000-0056US	medium5.0	6.05% (93rd)	Exploit	no fix	2000-01-05	3 versions
CVE-1999-1171US	medium4.6	4.89% (92nd)	Exploit	no fix	1999-02-02	= 5.0
CVE-2007-5094US	high7.5	4.36% (91st)	Exploit	no fix	2007-09-26	5 versions
CVE-1999-1170US	medium4.6	3.68% (90th)	Exploit	no fix	1999-01-02	= 5.0
CVE-1999-1497US	high7.2OT elevated	1.40% (72nd)	Exploit	no fix	1999-12-21	6 versions
CVE-2005-1256US	high10.0	58.9% (99th)	—	no fix	2005-05-25	= 8.13
CVE-2005-1252US	medium5.0	12.5% (96th)	—	no fix	2005-05-25	= 8.13
CVE-2002-0777US	high10.0	10.3% (96th)	—	no fix	2002-08-12	24 versions
CVE-2004-2422US	medium5.0	7.09% (94th)	—	no fix	2004-12-31	28 versions
CVE-2000-0825US	medium5.0	6.67% (94th)	—	no fix	2000-11-14	= 6.00
CVE-2007-1637US	high9.3	5.64% (93rd)	—	no fix	2007-03-23	= 2006
CVE-2005-1254US	medium5.0	5.07% (92nd)	—	no fix	2005-05-25	3 versions
CVE-2004-2423US	medium5.0	4.89% (92nd)	—	no fix	2004-12-31	28 versions
CVE-2001-0494US	high7.5	4.31% (91st)	—	no fix	2001-06-27	≤ 6.06
CVE-2001-1283US	high7.5	4.13% (91st)	—	no fix	2001-10-12	3 versions
CVE-2000-0301US	medium5.0	3.96% (90th)	—	no fix	2000-04-06	8 versions
CVE-2001-1286US	high7.5	3.50% (89th)	—	no fix	2001-10-12	3 versions
CVE-2011-1430US	medium6.8	3.21% (88th)	—	no fix	2011-03-16	47 versions
CVE-2001-1211US	high7.5	3.00% (87th)	—	no fix	2001-12-31	8 versions
CVE-2001-1285US	medium5.0	2.66% (86th)	—	no fix	2001-10-12	3 versions
CVE-2001-0039US	medium5.0	2.42% (84th)	—	no fix	2001-02-16	= 6.0.5
CVE-2001-1281US	medium5.0	2.38% (84th)	—	no fix	2001-10-12	3 versions
CVE-2001-1284US	high7.5	2.24% (83rd)	—	no fix	2001-10-12	3 versions
CVE-2001-1280US	medium5.0	2.19% (82nd)	—	no fix	2001-10-12	3 versions
CVE-2001-1282US	medium5.0	2.19% (82nd)	—	no fix	2001-10-12	3 versions
CVE-2005-2160US	high7.5OT elevated	1.96% (80th)	—	no fix	2005-07-06	= 2006
CVE-2000-0019US	low2.1	0.22% (13th)	—	no fix	1999-03-04	= 2006

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer12 CVEs
CWE-20Improper Input Validation10 CVEs
CWE-400Uncontrolled Resource Consumption7 CVEs
CWE-284Improper Access Control5 CVEs
CWE-121Stack-based Buffer Overflow4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')3 CVEs
CWE-264CWE-2642 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE38 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan