CVE-2001-1211

Ipswitch IMail 7.0.4 and earlier allows attackers with administrator privileges to read and modify user alias and mailing list information for other domains hosted by the same server via the (1) aliasadmin or (2) listadm1 CGI programs, which do not properly verify that an administrator is the administrator for the target domain.

• http://support.ipswitch.com/kb/IM-20011219-DM01.htm
• http://support.ipswitch.com/kb/IM-20020301-DM02.htm
• http://www.iss.net/security_center/static/7752.phpVendor Advisory
• http://www.securityfocus.com/archive/1/247786Vendor Advisory
• http://www.securityfocus.com/bid/3766Vendor Advisory
• http://support.ipswitch.com/kb/IM-20011219-DM01.htm
• http://support.ipswitch.com/kb/IM-20020301-DM02.htm
• http://www.iss.net/security_center/static/7752.phpVendor Advisory
• http://www.securityfocus.com/archive/1/247786Vendor Advisory
• http://www.securityfocus.com/bid/3766Vendor Advisory

Published

Dec 31, 2001

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2001-1205Directory traversal vulnerability in lastlines.cgi for Last …
• CVE-2001-1206Matrix CGI vault Last Lines 2.0 allows remote attackers to e…
• CVE-2001-1207Buffer overflows in DayDream BBS 2.9 through 2.13 allow remo…
• CVE-2001-1208Format string vulnerability in DayDream BBS allows remote at…
• CVE-2001-1209Directory traversal vulnerability in zml.cgi allows remote a…
• CVE-2001-1210Cisco ubr900 series routers that conform to the Data-over-Ca…
• CVE-2001-1212Cross-site scripting vulnerability in catgy.cgi for Aktivate…
• CVE-2001-1213The default configuration of DataWizard FtpXQ 2.0 and 2.1 in…
• CVE-2001-1214manual.php in Marcus S. Xenakis Unix Manual 1.0 allows remot…
• CVE-2001-1215Format string vulnerability in PFinger 0.7.5 through 0.7.7 a…
• CVE-2001-1216Buffer overflow in PL/SQL Apache module in Oracle 9i Applica…
• CVE-2001-1217Directory traversal vulnerability in PL/SQL Apache module in…