VYPR
← Ipswitch, Inc.

Vendor CVEs

Ipswitch, Inc.

All CVEs

133 total · sorted by risk
  • CVE-2005-1250Jun 22, 2005
    Ipswitch, Inc.
    Whatsup
    risk 0.05cvss —epss 0.21

    SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Professional 2005 SP1 allows remote attackers to execute arbitrary SQL commands via the (1) User Name field (sUserName parameter) or (2) Password (sPassword parameter).

  • CVE-2005-1256May 25, 2005
    Ipswitch, Inc.
    Imail
    risk 0.05cvss —epss 0.59

    Stack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allows remote authenticated users to execute arbitrary code via a STATUS command with a long mailbox name.

  • CVE-2008-5692Dec 19, 2008
    Ipswitch, Inc.
    Ws FTP
    risk 0.04cvss —epss 0.13

    Ipswitch WS_FTP Server Manager before 6.1.1, and possibly other Ipswitch products, allows remote attackers to bypass authentication and read logs via a logLogout action to FTPLogServer/login.asp followed by a request to FTPLogServer/LogViewer.asp with the localhostnull account…

  • CVE-2008-3795Aug 27, 2008
    Ipswitch, Inc.
    Ws FTP Home
    risk 0.04cvss —epss 0.15

    Buffer overflow in Ipswitch WS_FTP Home client allows remote FTP servers to have an unknown impact via a long "message response."

  • CVE-2008-3734Aug 20, 2008
    Ipswitch, Inc.
    WS_FTP Professional
    risk 0.04cvss —epss 0.14

    Format string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0 allows remote FTP servers to cause a denial of service (application crash) or possibly execute arbitrary code via format string specifiers in a connection greeting (response).

  • CVE-2008-0944Feb 25, 2008
    Ipswitch, Inc.
    Instant Messaging
    risk 0.04cvss —epss 0.12

    Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote attackers to cause a denial of service (NULL dereference and application crash) via a version field containing zero.

  • CVE-2006-2531May 22, 2006
    Ipswitch, Inc.
    Whatsup
    risk 0.04cvss —epss 0.07

    Ipswitch WhatsUp Professional 2006 only verifies the user's identity via HTTP headers, which allows remote attackers to spoof being a trusted console and bypass authentication by setting HTTP User-Agent header to "Ipswitch/1.0" and the User-Application header to "NmConsole".

  • CVE-2006-0911Feb 28, 2006
    Ipswitch, Inc.
    Whatsup
    risk 0.04cvss —epss 0.16

    NmService.exe in Ipswitch WhatsUp Professional 2006 allows remote attackers to cause a denial of service (CPU consumption) via crafted requests to Login.asp, possibly involving the (1) "In]" and (2) "b;tnLogIn" parameters, or (3) malformed btnLogIn parameters, possibly involving…

  • CVE-1999-1557May 2, 2005
    Ipswitch, Inc.
    Imail
    risk 0.04cvss —epss 0.08

    Buffer overflow in the login functions in IMAP server (imapd) in Ipswitch IMail 5.0 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via (1) a long user name or (2) a long password.

  • CVE-2002-1076Oct 4, 2002
    Ipswitch, Inc.
    Imail
    risk 0.04cvss —epss 0.14

    Buffer overflow in the Web Messaging daemon for Ipswitch IMail before 7.12 allows remote attackers to execute arbitrary code via a long HTTP GET request for HTTP/1.0.

  • CVE-2002-1077Oct 4, 2002
    Ipswitch, Inc.
    Imail
    risk 0.04cvss —epss 0.11

    IPSwitch IMail Web Calendaring service (iwebcal) allows remote attackers to cause a denial of service (crash) via an HTTP POST request without a Content-Length field.

  • CVE-2001-1287Oct 12, 2001
    Ipswitch, Inc.
    Imail
    risk 0.04cvss —epss 0.10

    Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request.

  • CVE-2000-0780Oct 20, 2000
    Ipswitch, Inc.
    Imail
    risk 0.04cvss —epss 0.07

    The web server in IPSWITCH IMail 6.04 and earlier allows remote attackers to read and delete arbitrary files via a .. (dot dot) attack.

  • CVE-1999-1046Mar 1, 1999
    Ipswitch, Inc.
    Imail
    risk 0.04cvss —epss 0.15

    Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long string to port 8181.

  • CVE-2014-3878Jun 5, 2014
    Ipswitch, Inc.
    Imail Server
    risk 0.03cvss —epss 0.03

    Multiple cross-site scripting (XSS) vulnerabilities in the web client interface in Ipswitch IMail Server 12.3 and 12.4, possibly before 12.4.1.15, allow remote attackers to inject arbitrary web script or HTML via (1) the Name field in an add new contact action in the Contacts…

  • CVE-2012-4344Aug 15, 2012
    Progress (organisation)
    Whatsup Gold
    risk 0.03cvss —epss 0.04

    Cross-site scripting (XSS) vulnerability in Ipswitch WhatsUp Gold 15.02 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving the SNMP system name of the attacking host.

  • CVE-2012-2601Aug 15, 2012
    Progress (organisation)
    Whatsup Gold
    risk 0.03cvss —epss 0.03

    SQL injection vulnerability in WrVMwareHostList.asp in Ipswitch WhatsUp Gold 15.02 allows remote attackers to execute arbitrary SQL commands via the sGroupList parameter.

  • CVE-2009-4775Apr 21, 2010
    Ipswitch, Inc.
    WS_FTP Professional
    risk 0.03cvss —epss 0.06

    Format string vulnerability in Ipswitch WS_FTP Professional 12 before 12.2 allows remote attackers to cause a denial of service (crash) via format string specifiers in the status code portion of an HTTP response.

  • CVE-2007-5094Sep 26, 2007
    Ipswitch, Inc.
    Imail
    risk 0.03cvss —epss 0.04

    Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute arbitrary code via a set of four different e-mail messages with a long boundary parameter in a certain malformed Content-Type header line,…

  • CVE-2006-5001Sep 26, 2006
    Ipswitch, Inc.
    Ws FTP Server
    risk 0.03cvss —epss 0.32

    Unspecified vulnerability in the log analyzer in WS_FTP Server 5.05 before Hotfix 1, and possibly other versions down to 5.0, prevents certain sensitive information from being displayed in the (1) Files and (2) Summary tabs. NOTE: in the early publication of this identifier on…

  • CVE-2006-4974Sep 25, 2006
    Ipswitch, Inc.
    WS_FTP Limited Edition
    risk 0.03cvss —epss 0.04

    Buffer overflow in Ipswitch WS_FTP Limited Edition (LE) 5.08 allows remote FTP servers to execute arbitrary code via a long response to a PASV command.

  • CVE-2006-2351May 15, 2006
    Ipswitch, Inc.
    Whatsup Professional
    risk 0.03cvss —epss 0.05

    Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the (1) sDeviceView or (2) nDeviceID parameter to (a) NmConsole/Navigation.asp or (3)…

  • CVE-2004-1883Dec 31, 2004
    Progress (organisation)
    Ws FTP Server
    risk 0.03cvss —epss 0.05

    Multiple buffer overflows in Ipswitch WS_FTP Server 4.0.2 (1) allow remote authenticated users to execute arbitrary code by causing a large error string to be generated by the ALLO handler, or (2) may allow remote FTP administrators to execute arbitrary code by causing a long…

  • CVE-2000-0056Jan 5, 2000
    Ipswitch, Inc.
    Imail
    risk 0.03cvss —epss 0.06

    IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi.

  • CVE-1999-1497Dec 21, 1999
    Ipswitch, Inc.
    Imail
    risk 0.03cvss —epss 0.01

    Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.

  • CVE-1999-1171Feb 2, 1999
    Ipswitch, Inc.
    Imail
    risk 0.03cvss —epss 0.05

    IPswitch WS_FTP allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.

  • CVE-1999-1170Jan 2, 1999
    Ipswitch, Inc.
    Imail
    risk 0.03cvss —epss 0.04

    IPswitch IMail allows local users to gain additional privileges and modify or add mail accounts by setting the "flags" registry key to 1920.

  • CVE-2007-3823Jul 17, 2007
    Ipswitch, Inc.
    Ws FTP
    risk 0.02cvss —epss 0.25

    The Logging Server (Logsrv.exe) in IPSwitch WS_FTP 7.5.29.0 allows remote attackers to cause a denial of service (daemon crash) by sending a crafted packet containing a long string to port 5151/udp.

  • CVE-2008-0945Feb 25, 2008
    Ipswitch, Inc.
    Imserver
    risk 0.01cvss —epss 0.07

    Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via…

  • CVE-2007-3959Jul 24, 2007
    Ipswitch, Inc.
    Ipswitch Collaboration Suite
    risk 0.01cvss —epss 0.06

    The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (daemon crash) via certain data to TCP port 5179 that overwrites a…

  • CVE-2005-3526Dec 31, 2005
    Ipswitch, Inc.
    Ipswitch Collaboration Suite
    risk 0.01cvss —epss 0.07

    Buffer overflow in the IMAP daemon in Ipswitch Collaboration Suite 2006.02 and earlier allows remote authenticated users to execute arbitrary code via a long FETCH command.

  • CVE-2005-2923Dec 7, 2005
    Ipswitch, Inc.
    Ipswitch Collaboration Suite
    risk 0.01cvss —epss 0.11

    The IMAP server in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to cause a denial of service (crash) via a long argument to the LIST command, which causes IMail Server to reference invalid memory.

  • CVE-2005-1252May 25, 2005
    Ipswitch, Inc.
    Imail
    risk 0.01cvss —epss 0.13

    Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows remote attackers to read arbitrary files via "..\" (dot dot backslash) sequences in the query string argument in a GET request to a…

  • CVE-2004-2422Dec 31, 2004
    Ipswitch, Inc.
    Imail
    risk 0.01cvss —epss 0.07

    Multiple features in Ipswitch IMail Server before 8.13 allow remote attackers to cause a denial of service (crash) via (1) a long sender field to the Queue Manager or (2) a long To field to the Web Messaging component.

  • CVE-2004-1848Dec 31, 2004
    Ipswitch, Inc.
    Ws FTP Server
    risk 0.01cvss —epss 0.08

    Ipswitch WS_FTP Server 4.0.2 allows remote attackers to cause a denial of service (disk consumption) and bypass file size restrictions via a REST command with a large size argument, followed by a STOR of a smaller file.

  • CVE-2002-0777Aug 12, 2002
    Ipswitch, Inc.
    Imail
    risk 0.01cvss —epss 0.10

    Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a long "bind DN" parameter.

  • CVE-2000-0825Nov 14, 2000
    Ipswitch, Inc.
    Imail
    risk 0.01cvss —epss 0.07

    Ipswitch Imail 6.0 allows remote attackers to cause a denial of service via a large number of connections in which a long Host: header is sent, which causes a thread to crash.

  • CVE-2011-1430Mar 16, 2011
    Ipswitch, Inc.
    Imail
    risk 0.00cvss —epss 0.03

    The STARTTLS implementation in the server in Ipswitch IMail 11.03 and earlier does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in…

  • CVE-2008-5693Dec 19, 2008
    Ipswitch, Inc.
    Ws FTP
    risk 0.00cvss —epss 0.05

    Ipswitch WS_FTP Server Manager 6.1.0.0 and earlier, and possibly other Ipswitch products, might allow remote attackers to read the contents of custom ASP files in WSFTPSVR/ via a request with an appended dot character.

  • CVE-2008-0946Feb 25, 2008
    Ipswitch, Inc.
    Imserver
    risk 0.00cvss —epss 0.04

    Directory traversal vulnerability in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to create arbitrary empty files via a .. (dot dot) in the recipient field.

  • CVE-2008-0608Feb 6, 2008
    Ipswitch, Inc.
    Ws FTP
    risk 0.00cvss —epss 0.06

    The Logging Server (ftplogsrv.exe) 7.9.14.0 and earlier in IPSwitch WS_FTP 6.1 allows remote attackers to cause a denial of service (loss of responsiveness) via a large number of large packets to port 5151/udp, which causes the listening socket to terminate and prevents log…

  • CVE-2007-4345Oct 31, 2007
    Ipswitch, Inc.
    Imail Server
    risk 0.00cvss —epss 0.03

    Buffer overflow in IMail Client 9.22, as shipped with IPSwitch IMail Server 2006.22, allows remote attackers to execute arbitrary code via a long boundary parameter in a multipart MIME e-mail message.

  • CVE-2007-4555Aug 28, 2007
    Ipswitch, Inc.
    Ws FTP
    risk 0.00cvss —epss 0.02

    Cross-site scripting (XSS) vulnerability in Ipswitch WS_FTP allows remote attackers to inject arbitrary web script or HTML via arguments to a valid command, which is not properly handled when it is displayed by the view log option in the administration interface. NOTE: this can…

  • CVE-2007-3926Jul 21, 2007
    Ipswitch, Inc.
    Imail Server
    risk 0.00cvss —epss 0.03

    Ipswitch IMail Server 2006 before 2006.21 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involving an "overwritten destructor."

  • CVE-2007-2602May 11, 2007
    Progress (organisation)
    Whatsup Gold
    risk 0.00cvss —epss 0.03

    Buffer overflow in MIBEXTRA.EXE in Ipswitch WhatsUp Gold 11 allows attackers to cause a denial of service (application crash) or execute arbitrary code via a long MIB filename argument. NOTE: If there is not a common scenario under which MIBEXTRA.EXE is called with…

  • CVE-2007-2213Apr 24, 2007
    WS FTP
    WS_FTP Home and Professional 2007
    risk 0.00cvss —epss 0.05

    Unspecified vulnerability in the Initialize function in NetscapeFTPHandler in WS_FTP Home and Professional 2007 allows remote attackers to cause a denial of service (NULL dereference and application crash) via unspecified vectors related to "improper arguments."

  • CVE-2007-1637Mar 23, 2007
    Ipswitch, Inc.
    Imail
    risk 0.00cvss —epss 0.06

    Multiple buffer overflows in the IMAILAPILib ActiveX control (IMailAPI.dll) in Ipswitch IMail Server before 2006.2 allow remote attackers to execute arbitrary code via the (1) WebConnect and (2) Connect members in the (a) IMailServer control; (3) Sync3 and (4) Init3 members in…

  • CVE-2007-0666Feb 2, 2007
    Ipswitch, Inc.
    Ws FTP Server
    risk 0.00cvss —epss 0.02

    Ipswitch WS_FTP Server 5.04 allows FTP site administrators to execute arbitrary code on the system via a long input string to the (1) iFTPAddU or (2) iFTPAddH file, or to a (3) edition module.

  • CVE-2007-0665Feb 2, 2007
    Ipswitch, Inc.
    Ws FTP
    risk 0.00cvss —epss 0.03

    Format string vulnerability in the SCP module in Ipswitch WS_FTP 2007 Professional might allow remote attackers to execute arbitrary commands via format string specifiers in the filename, related to the SHELL WS_FTP script command.

  • CVE-2007-0330Jan 18, 2007
    Ipswitch, Inc.
    Ws FTP
    risk 0.00cvss —epss 0.03

    Buffer overflow in wsbho2k0.dll, as used by wsftpurl.exe, in Ipswitch WS_FTP 2007 Professional allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long ftp:// URL in an HTML document, and possibly other vectors.

Page 2 of 3