PatchTheCVE: david harrishttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2007-5018: Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to execute arbitraryhttps://patchthecve.com/cve/CVE-2007-5018.htmlhttps://patchthecve.com/cve/CVE-2007-5018.htmlTue, 16 Jun 2026 22:45:17 +0000MEDIUM 6.0: Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to execute arbitrary code via a long argument in a SEARCH ON command. NOTE: this issue might overlap with CVE-2004-1211.CVE-2005-4411: Buffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute arbitrary code via ahttps://patchthecve.com/cve/CVE-2005-4411.htmlhttps://patchthecve.com/cve/CVE-2005-4411.htmlTue, 16 Jun 2026 22:18:44 +0000HIGH 7.5: Buffer overflow in Mercury Mail Transport System 4.01b allows remote attackers to execute arbitrary code via a long request to TCP port 105.CVE-2004-1211: Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a https://patchthecve.com/cve/CVE-2004-1211.htmlhttps://patchthecve.com/cve/CVE-2004-1211.htmlTue, 16 Jun 2026 22:07:15 +0000HIGH 10.0: Multiple buffer overflows in the IMAP service in Mercury/32 4.01a allow remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via long arguments to the (1) EXAMINE, (2) SUBSCRIBE, (3) STATUS, (4) APPEND, (5) CHECK, (6) CLOSE, (7) EXPUNGE, (8)CVE-2002-1075: Buffer overflow in Pegasus mail client 4.01 and earlier allows remote attackers to cause a denial of service (https://patchthecve.com/cve/CVE-2002-1075.htmlhttps://patchthecve.com/cve/CVE-2002-1075.htmlTue, 16 Jun 2026 21:58:40 +0000HIGH 7.5: Buffer overflow in Pegasus mail client 4.01 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) To or (2) From headers.CVE-2001-0442: Buffer overflow in Mercury MTA POP3 server for NetWare 1.48 and earlier allows remote attackers to cause a denhttps://patchthecve.com/cve/CVE-2001-0442.htmlhttps://patchthecve.com/cve/CVE-2001-0442.htmlTue, 16 Jun 2026 21:54:19 +0000HIGH 7.5: Buffer overflow in Mercury MTA POP3 server for NetWare 1.48 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long APOP command.CVE-2000-0931: Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly executehttps://patchthecve.com/cve/CVE-2000-0931.htmlhttps://patchthecve.com/cve/CVE-2000-0931.htmlFri, 25 Sep 2026 17:10:00 +0000HIGH 7.5: Buffer overflow in Pegasus Mail 3.11 allows remote attackers to cause a denial of service and possibly execute arbitrary commands via a long email message containing binary data.CVE-2000-0930: Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: phttps://patchthecve.com/cve/CVE-2000-0930.htmlhttps://patchthecve.com/cve/CVE-2000-0930.htmlWed, 23 Sep 2026 09:10:01 +0000MEDIUM 5.0: Pegasus Mail 3.12 allows remote attackers to read arbitrary files via an embedded URL that calls the mailto: protocol with a -F switch.CVE-1999-1366: Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, whichttps://patchthecve.com/cve/CVE-1999-1366.htmlhttps://patchthecve.com/cve/CVE-1999-1366.htmlTue, 16 Jun 2026 21:50:17 +0000LOW 3.6: Pegasus e-mail client 3.0 and earlier uses weak encryption to store POP3 passwords in the pmail.ini file, which allows local users to easily decrypt the passwords and read e-mail.