CVE-2007-3925
Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before...
Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.
- Record
CVE-2007-3925- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.
- Record
CVE-2007-3925- Updated
- 2026-11-02
EUVDEUVD-2007-3909 No score
Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.
- Record
EUVD-2007-3909- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-346q-mxg8-55g2 No score
Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before...
Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.
- Record
GHSA-346q-mxg8-55g2- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Ipswitch IMail Server - IMAP SEARCH Buffer Overflow (Metasploit) | 2010-06-15 |
| Exploit-DB | IPSwitch IMail Server 2006 - SEARCH Remote Stack Overflow | 2007-07-25 |
| Metasploit | Ipswitch IMail IMAP SEARCH Buffer Overflow | 2007-07-18 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories, Metasploit | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-3925 is a medium vulnerability (CVSS 6.5) in Ipswitch Imail Server, published July 21, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 84.7%, the 99th percentile. No source names a fixed version.