CVE-2007-1498

Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control (SiteManager.dll) in the ePO management console in McAfee ePolicy Orchestrator (ePO) before 3.6.1 Patch 1 and ProtectionPilot (PRP) before 1.5.0 HotFix allow remote attackers to execute arbitrary code via a long argument to the (1) ExportSiteList and (2) VerifyPackageCatalog functions, and (3) unspecified vectors involving a swprintf function call.

• http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/052960.htmlPatch
• http://secunia.com/advisories/24466Patch, Vendor Advisory
• http://securityreason.com/securityalert/2444
• http://www.kb.cert.org/vuls/id/714593US Government Resource
• http://www.securityfocus.com/bid/22952Patch
• http://www.securitytracker.com/id?1017757
• http://www.vupen.com/english/advisories/2007/0931
• https://knowledge.mcafee.com/article/25/612495_f.SAL_Public.htmlPatch
• https://knowledge.mcafee.com/article/26/612496_f.SAL_Public.htmlPatch
• http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/052960.htmlPatch
• http://secunia.com/advisories/24466Patch, Vendor Advisory
• http://securityreason.com/securityalert/2444
• http://www.kb.cert.org/vuls/id/714593US Government Resource
• http://www.securityfocus.com/bid/22952Patch
• http://www.securitytracker.com/id?1017757
• http://www.vupen.com/english/advisories/2007/0931
• https://knowledge.mcafee.com/article/25/612495_f.SAL_Public.htmlPatch
• https://knowledge.mcafee.com/article/26/612496_f.SAL_Public.htmlPatch

Published

Mar 16, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-1492winmm.dll in Microsoft Windows XP allows user-assisted remot…
• CVE-2007-1493nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a p…
• CVE-2007-1494Cross-site scripting (XSS) vulnerability in NukeSentinel bef…
• CVE-2007-1495The \Device\SymEvent driver in Symantec Norton Personal Fire…
• CVE-2007-1496nfnetlink_log in netfilter in the Linux kernel before 2.6.20…
• CVE-2007-1497nf_conntrack in netfilter in the Linux kernel before 2.6.20.…
• CVE-2007-1499Microsoft Internet Explorer 7.0 on Windows XP and Vista allo…
• CVE-2007-1500The Linux Security Auditing Tool (LSAT) allows local users t…
• CVE-2007-1501Stack-based buffer overflow in Avant Browser 11.0 build 26 a…
• CVE-2007-1502Multiple buffer overflows in Rhapsody IRC 0.28b allow remote…
• CVE-2007-1503Multiple format string vulnerabilities in comm.c in Rhapsody…
• CVE-2007-1504Cross-site scripting (XSS) vulnerability in the Servlet Serv…