CVE-2007-0887: axigen 1.2.6 through 2.0.0b1 does not properly parse login credentials, which allows remote attackers to ca...

Security readout for executives and security teams

This is an older Axigen mail server denial-of-service issue. A remote attacker could send malformed login credentials to the IMAP service and crash the mail application. The direct business impact is mail availability disruption, not documented data theft or code execution in the provided sources. Exposure is likely limited to organizations still running very old Axigen versions with IMAP reachable by untrusted networks. Internet-exposed 143/TCP increases availability risk. The affected product metadata is incomplete in the CVE bundle. Prioritize if affected Axigen mail servers are still in production or internet-facing. The issue threatens email uptime, but the provided evidence does not show data compromise, code execution, or active exploitation. Mitigation focus: Identify any Axigen servers running versions 1.2.6 through 2.0.0b1.; Check Axigen vendor guidance for the fixed or supported upgrade path.; Restrict IMAP 143/TCP to trusted networks, VPN, or required client ranges..

Prepared

Jun 29, 2026, 07:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.