CVE-2007-6506

The HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4.000.005.007 and earlier, including 3.0.8.4, allows remote attackers to (1) overwrite and corrupt arbitrary files via arguments to the SaveToFile method, and possibly (2) access arbitrary files via the LoadDataFromFile method.

• http://blogs.zdnet.com/security/?p=768
• http://computerworld.com/action/article.do?command=viewArticleBasic&articleId=9053818
• http://it.slashdot.org/it/07/12/20/2327242.shtml
• http://secunia.com/advisories/28177Vendor Advisory
• http://www.anspi.pl/~porkythepig/hp-issue/wyfukanyszynszyl.txt
• http://www.securityfocus.com/archive/1/485451/100/0/threaded
• http://www.securityfocus.com/archive/1/485734/100/0/threaded
• http://www.securityfocus.com/bid/26950Exploit
• http://www.securitytracker.com/id?1019133
• http://www.vupen.com/english/advisories/2007/4271Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39153
• https://www.exploit-db.com/exploits/4757
• http://blogs.zdnet.com/security/?p=768
• http://computerworld.com/action/article.do?command=viewArticleBasic&articleId=9053818
• http://it.slashdot.org/it/07/12/20/2327242.shtml
• http://secunia.com/advisories/28177Vendor Advisory
• http://www.anspi.pl/~porkythepig/hp-issue/wyfukanyszynszyl.txt
• http://www.securityfocus.com/archive/1/485451/100/0/threaded
• http://www.securityfocus.com/archive/1/485734/100/0/threaded
• http://www.securityfocus.com/bid/26950Exploit
• http://www.securitytracker.com/id?1019133
• http://www.vupen.com/english/advisories/2007/4271Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39153
• https://www.exploit-db.com/exploits/4757

Published

Dec 20, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-6500Unspecified vulnerability in Hosting Controller 6.1 Hot fix …
• CVE-2007-6501Unspecified vulnerability in Hosting Controller 6.1 Hot fix …
• CVE-2007-6502Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote…
• CVE-2007-6503Multiple unspecified vulnerabilities in Hosting Controller 6…
• CVE-2007-6504Unspecified vulnerability in IIS/iibind.asp in Hosting Contr…
• CVE-2007-6505Solaris 9, with Solaris Auditing enabled and certain patches…
• CVE-2007-6507SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Win…
• CVE-2007-6508Directory traversal vulnerability in view.php in xeCMS 1.0 a…
• CVE-2007-6509Unspecified vulnerability in Appian Enterprise Business Proc…
• CVE-2007-6510Multiple stack-based buffer overflows in ProWizard 4 PC (pro…
• CVE-2007-6511Websense Enterprise 6.3.1 allows remote attackers to bypass …
• CVE-2007-6512PHP MySQL Banner Exchange 2.2.1 stores sensitive information…