Every CVE Search/ Get API key

CVE-2007-3927

Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers...

10.0 HighPublic exploit

Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow attackers to have an unknown impact via an unspecified vector related to "subscribe."

Exploit likelihood

21.9%Down 18.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 10.0

Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow attackers to have an unknown impact via an unspecified vector related to "subscribe."

Record
CVE-2007-3927
CVSS 2.0
10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated
2026-11-02
CVE List No score

Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow attackers to have an unknown impact via an unspecified vector related to "subscribe."

Record
CVE-2007-3927
Updated
2026-11-02
EUVDEUVD-2007-3911 No score

Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow attackers to have an unknown impact via an unspecified vector related to "subscribe."

Record
EUVD-2007-3911
Updated
2026-11-03
GitHub AdvisoriesGHSA-rgw4-fq4j-g37q No score

Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers...

Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow attackers to have an unknown impact via an unspecified vector related to "subscribe."

Record
GHSA-rgw4-fq4j-g37q
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBIPSwitch IMail Server 2006 9.10 - Subscribe Remote Overflow2007-07-26

History

History
RecordedChangedSources
aliasesEUVD
aliases, exploits, facts, references, titleExploit-DB, GitHub Advisories
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-3927 is a high vulnerability (CVSS 10.0) in Ipswitch Imail Server, published July 21, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 21.9%, the 97th percentile. No source names a fixed version.

References

Show 5 moreShow less
MoveEnter Open