CVE-2007-3927 in the critical feed json
Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified…
published 2007-07-21 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-3911
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 21.9%
- EPSS 21.9% chance of exploitation in 30 days, percentile 97%
- public exploits
- 1
- Exploit-DB
Summary
Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow attackers to have an unknown impact via an unspecified vector related to "subscribe."
Patch / fix
Timeline
- Published
- First public exploit (EDB-4228)
Exploit prediction
21.89% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-4228 IPSwitch IMail Server 2006 9.10 - Subscribe Remote Overflow remote, 2007-07-26
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
-
securityfocus.com
/bid/24962
vdb-entry, patch
-
docs.ipswitch.com
/IMail%202006.21/ReleaseNotes/IMail_RelNotes.htm#NewRelease
patch
-
vupen.com
/english/advisories/2007/2574
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/35505
vdb-entry
-
osvdb.org
/45819
vdb-entry
-
osvdb.org
/45818
vdb-entry
-
securitytracker.com
/id?1018421
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/35504
vdb-entry
-
secunia.com
/advisories/26123
third-party-advisory
Sources
- CVE List CVE-2007-3927
- NVD CVE-2007-3927
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.