Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execute arbitrary code via a long first argument to the LIST command.
- https://www.exploit-db.com/exploits/5259
No PoCs found on GitHub currently.