CVSS: 7.5EPSS: 0%CPEs: 8EXPL: 0CVE-2001-1211
https://notcve.org/view.php?id=CVE-2001-1211
Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the (1) aliasadmin or (2) listadm1 CGI programs, which do not properly verify that an administrator is the administrator for the target domain. Ipswitch IMail 7.0.4 y versiones anteriores permiten a atacantes con privilegios de administrador, leer y modificar los alias de los usuarios y la información de las listas de correo de otros dominios albergados en el mismo servidor mediante:(1) aliasadmin o(2) programas CGI listadm1, los cuales no verifica adecuadamente que un administrador realmente lo es en ese dominio. • http://support.ipswitch.com/kb/IM-20011219-DM01.htm http://support.ipswitch.com/kb/IM-20020301-DM02.htm http://www.iss.net/security_center/static/7752.php http://www.securityfocus.com/archive/1/247786 http://www.securityfocus.com/bid/3766 •
CVSS: 5.0EPSS: 0%CPEs: 3EXPL: 0CVE-2001-1281
https://notcve.org/view.php?id=CVE-2001-1281
Web Messaging Server for Ipswitch IMail 7.04 and earlier allows remote authenticated users to change information for other users by modifying the olduser parameter in the "Change User Information" web form. • http://archives.neohapsis.com/archives/bugtraq/2001-10/0076.html http://www.ipswitch.com/Support/IMail/news.html http://www.securityfocus.com/bid/3429 •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 1CVE-2001-1287 – Linux Kernel 2.2.x/2.4.x - I/O System Call File Existence
https://notcve.org/view.php?id=CVE-2001-1287
Buffer overflow in Web Calendar in Ipswitch IMail 7.04 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request. • https://www.exploit-db.com/exploits/22458 http://archives.neohapsis.com/archives/bugtraq/2001-10/0083.html http://www.ipswitch.com/Support/IMail/news.html http://www.securityfocus.com/bid/3431 •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2001-1284
https://notcve.org/view.php?id=CVE-2001-1284
Ipswitch IMail 7.04 and earlier uses predictable session IDs for authentication, which allows remote attackers to hijack sessions of other users. • http://archives.neohapsis.com/archives/bugtraq/2001-10/0082.html http://www.ipswitch.com/Support/IMail/news.html http://www.securityfocus.com/bid/3428 •
CVSS: 5.0EPSS: 0%CPEs: 3EXPL: 0CVE-2001-1280
https://notcve.org/view.php?id=CVE-2001-1280
POP3 Server for Ipswitch IMail 7.04 and earlier generates different responses to valid and invalid user names, which allows remote attackers to determine users on the system. • http://archives.neohapsis.com/archives/bugtraq/2001-10/0076.html http://www.ipswitch.com/Support/IMail/news.html http://www.securityfocus.com/bid/3424 •