VULNERABILITY INTELLIGENCE

CVE-2007-1713

CVSS score6.4 MEDIUM
EPSS probability1.45%
CISA KEVNot currently listed
Published2007-03-27
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:N

Description

CRLF injection vulnerability in BSMTP.DLL in B21Soft BASP21 2003.0211, and BASP21 Pro 1.0.702.27 and earlier, allows remote attackers to inject arbitrary headers into e-mail messages via CRLF sequences in Subject lines.

Primary references