Ipswitch Collaboration Suite

Vendor:

First CVE: May 2, 2005 · Active for 21 years

13

Total CVEs

More Total CVEs than 91% of tracked products

4.3

Avg CVEs / Year

Higher CVE frequency than 86% of tracked products

7.3

Avg CVSS

Higher Avg CVSS than 46% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Ipswitch Collaboration Suite over time

Volume of CVEsAvg CVSS Base Score

First CVE

May 2, 2005

21 years ago

Most Recent CVE

Jul 24, 2007

6,941 days ago

CVE Severity & Scoring

Ipswitch Collaboration Suite13 CVEs

46%

54%

All CVEs352,427 CVEs

45%

40%

11%

MediumHigh

Attack Vector

Local0 (0.0%)

Network0 (0.0%)

Unknown13 (100.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low0 (0.0%)

High0 (0.0%)

Unknown13 (100.0%)

User Interaction

None0 (0.0%)

Unknown13 (100.0%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None0 (0.0%)

Unknown13 (100.0%)

Top CVEs

Signals from CVEs in this product scope (13 CVEs).

13 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2007-3925MEDIUM Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Sear	Jul 21, 2007	6.5	78	NO	YES
CVE-2006-4379HIGH Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IMail Secure allows remote attackers to ex	Sep 8, 2006	7.5	69	NO	YES
CVE-2005-1255HIGH Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allow re	May 25, 2005	10.0	59	NO	YES
CVE-2005-1256HIGH Stack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allows remote	May 25, 2005	10.0	56	NO	NO
CVE-2007-3927HIGH Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow attack	Jul 21, 2007	10.0	46	NO	YES
CVE-2007-1637HIGH Multiple buffer overflows in the IMAILAPILib ActiveX control (IMailAPI.dll) in Ipswitch IMail Server before 2006.2 allow remote attackers to execute arbitrary code via the (1) WebC	Mar 23, 2007	9.3	25	NO	NO
CVE-2005-2931HIGH Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to execute arbitrary code via format	Dec 7, 2005	7.5	21	NO	NO
CVE-2005-3526MEDIUM Buffer overflow in the IMAP daemon in Ipswitch Collaboration Suite 2006.02 and earlier allows remote authenticated users to execute arbitrary code via a long FETCH command.	Dec 31, 2005	6.5	20	NO	NO
CVE-2005-1249MEDIUM The IMAP daemon (IMAPD32.EXE) in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (CPU consumption) via an LSUB command with a large number o	May 25, 2005	5.0	20	NO	NO
CVE-2006-3552MEDIUM Premium Anti-Spam in Ipswitch IMail Secure Server 2006 and Collaboration Suite 2006 Premium, when using a certain .dat file in the StarEngine /data directory from 20060630 or earli	Jul 13, 2006	6.4	19	NO	NO

View all 13 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (13 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

1 CVE

7.7% of CVEs· 97th percentile

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

4 CVEs

30.8% of CVEs· 90th percentile

Social Chatter

Signals from CVEs in this product scope (13 CVEs).

Media Mentions

Signals from CVEs in this product scope (13 CVEs).

Top CNAs Publishing CVEs For Ipswitch Collaboration Suite

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
2.01	2	5.8	7.8%	0
2006_standard	2	8.4	32.8%	1
2006_premium	2	7.0	31.2%	1
2006.02_standard	1	6.5	7.2%	0
2006.02_premium	1	6.5	7.2%	0
2.0	2	5.8	7.8%	0