Stack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch Collaboration Suite (ICS) and other versions before IMail Server 8.2 Hotfix 2 allows remote authenticated users to execute arbitrary code via a STATUS command with a long mailbox name.