← Back

Courier Imap

courier-imap

Vendor: Inter7 • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Inter7
1Courier Imap
Apr 16, 2026
Oct 20, 2004
N/A· v4
N/A· v3
7.5 HIGH· v2
Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging (DEBUG_LOGIN) is enabled, allows remote attackers to execute arbitrary code.
3Double Precision Incorporated
GentooInter7
4Courier Imap
Courier MtaLinux+1 more
Apr 16, 2026
Apr 15, 2004
N/A· v4
N/A· v3
7.5 HIGH· v2
Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute arbitrary code "when Unicode character i...Show more
Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute arbitrary code "when Unicode character is out of BMP range."Show less
2Double Precision Incorporated
Inter7
2Courier Imap
Courier Mta
Apr 16, 2026
Feb 19, 2003
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in the PostgreSQL auth module for courier 0.40 and earlier allows remote attackers to execute SQL code via the user name.