CVE-2008-1277

no score yetEPSS 8.3%

The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service (crash) via (1) SEARCH and (2) APPEND commands without required arguments, which triggers a NULL pointer dereference.

EPSS: 8.3% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2008-03-10
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mailenable:mailenable_enterprise
mailenable:mailenable_professional

References

http://aluigi.altervista.org/adv/maildisable-adv.txt
http://secunia.com/advisories/29277
http://securityreason.com/securityalert/3724
http://www.securityfocus.com/archive/1/489270/100/0/threaded
http://www.securityfocus.com/bid/28145

Check your stack JSON