CyberSec.Space Logo
Back to CVE Browser

CVE-2007-2655

HIGH
7.5
CVSS Severity Score
EPSS Score0.1810%
EPSS Percentile22.98th
PublishedMay 14, 2007
Last ModifiedApr 23, 2026

Vulnerability Description

Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vectors, possibly a format string vulnerability that allows remote code execution.

Affected Platforms (CPE)

📦
Netwin

Surgemail

= 3.8f3
📦
Netwin

Surgemail

= 3.8i
📦
Netwin

Surgemail

= 3.8i2
📦
Netwin

Webmail

= 3.1s1
📦
Netwin

Webmail

= 3.1s13

References & Advisories

🔗 http://osvdb.org/35891
🔗 http://secunia.com/advisories/25207
🔗 http://www.netwinsite.com/surgemail/help/updates.htm
🔗 http://www.securityfocus.com/bid/23908
🔗 http://www.vupen.com/english/advisories/2007/1755
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/34217
🔗 http://osvdb.org/35891
🔗 http://secunia.com/advisories/25207

Related Vulnerabilities

CVE-2004-253710.0

Unspecified vulnerability in SurgeMail before 2.2c10 has unknown impact and attack vectors, related to a "Webmail security bug."

CVE-2007-437210.0

Unspecified vulnerability in NetWin SurgeMail 38k on Windows Server 2003 has unknown impact and remote attack vectors. NOTE: this...

CVE-2008-14979.0

Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execut...

CVE-2008-14989.0

Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execu...