{"id":"CVE-2007-3925","aliases":["EUVD-2007-3909","GHSA-346q-mxg8-55g2"],"status":"published","title":"Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before...","description":"Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.","severity":{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.84673,"percentile":0.99708,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2007-07-21T00:00:00Z","modified":"2026-06-16T22:43:04Z","exploits":[{"source":"exploitdb","id":"EDB-16487","title":"Ipswitch IMail Server - IMAP SEARCH Buffer Overflow (Metasploit)","type":"remote","platform":"windows","date":"2010-06-15","verified":true,"url":"https://www.exploit-db.com/exploits/16487"},{"source":"exploitdb","id":"EDB-4223","title":"IPSwitch IMail Server 2006 - SEARCH Remote Stack Overflow","type":"remote","platform":"windows","date":"2007-07-25","verified":true,"url":"https://www.exploit-db.com/exploits/4223"},{"source":"metasploit","id":"exploit/windows/imap/ipswitch_search","title":"Ipswitch IMail IMAP SEARCH Buffer Overflow","type":"exploit","platform":"Windows","date":"2007-07-18","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/windows/imap/ipswitch_search"}],"products":[{"vendor":"ipswitch","product":"imail_server"},{"vendor":"ipswitch","product":"ipswitch_collaboration_suite"}],"references":[{"url":"http://www.vupen.com/english/advisories/2007/2574","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://www.securityfocus.com/bid/24962","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=563","tags":["third-party-advisory","x_refsource_IDEFENSE","x_transferred"]},{"url":"http://www.securitytracker.com/id?1018419","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35496","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/35500","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://docs.ipswitch.com/IMail%202006.21/ReleaseNotes/IMail_RelNotes.htm#NewRelease","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"http://secunia.com/advisories/26123","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-3925"},{"url":"https://github.com/advisories/GHSA-346q-mxg8-55g2"}],"sources":{"cve":[{"id":"CVE-2007-3925","description":"Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.","status":"published","published":"2007-07-21T00:00:00Z","modified":"2024-08-07T14:37:05.326Z","updated_at":"2026-11-02T13:32:45.563938Z"}],"euvd":[{"id":"EUVD-2007-3909","description":"Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.","status":"published","published":"2007-07-21T00:00:00Z","modified":"2024-08-07T14:37:05Z","updated_at":"2026-11-03T01:16:24.023061Z"}],"ghsa":[{"id":"GHSA-346q-mxg8-55g2","title":"Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before...","description":"Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.","status":"published","published":"2022-05-01T18:18:35Z","modified":"2023-01-31T05:04:07Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:48:36.723893Z"}],"nvd":[{"id":"CVE-2007-3925","description":"Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.","status":"published","published":"2007-07-21T00:30:00Z","modified":"2026-06-16T22:43:04.227Z","cvss":[{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:17.964611Z"}]}}