Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to read passwords for e-mail accounts.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Imail | Ipswitch | 5.0 (including) | 5.0 (including) |
| Imail | Ipswitch | 5.0.5 (including) | 5.0.5 (including) |
| Imail | Ipswitch | 5.0.6 (including) | 5.0.6 (including) |
| Imail | Ipswitch | 5.0.7 (including) | 5.0.7 (including) |
| Imail | Ipswitch | 5.0.8 (including) | 5.0.8 (including) |
| Imail | Ipswitch | 6.0 (including) | 6.0 (including) |