2007 CVE Vulnerabilities
6,580 CVEs published in 2007.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2007-3182 | — | — | 4.3% | Jun 26, 2007 | Multiple cross-site scripting (XSS) vulnerabilities in Calendarix 0.7.20070307, when register_globals is enabled, allow ... |
| CVE-2007-3183 | — | — | 4.5% | Jun 26, 2007 | Multiple SQL injection vulnerabilities in Calendarix 0.7.20070307, when magic_quotes_gpc is disabled, allow remote attac... |
| CVE-2007-2520 | — | — | 1.1% | Jun 26, 2007 | SQL injection vulnerability in admin.php in MyNews 0.10, when magic_quotes_gpc is disabled, allows remote attackers to e... |
| CVE-2007-3391 | — | — | 2.3% | Jun 26, 2007 | Wireshark 0.99.5 allows remote attackers to cause a denial of service (memory consumption) via a malformed DCP ETSI pack... |
| CVE-2007-3389 | — | — | 16.3% | Jun 26, 2007 | Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in a... |
| CVE-2007-3390 | — | — | 2.0% | Jun 26, 2007 | Wireshark 0.99.5 and 0.10.x up to 0.10.14, when running on certain systems, allows remote attackers to cause a denial of... |
| CVE-2007-3393 | — | — | 2.0% | Jun 26, 2007 | Off-by-one error in the DHCP/BOOTP dissector in Wireshark before 0.99.6 allows remote attackers to cause a denial of ser... |
| CVE-2007-3392 | — | — | 2.9% | Jun 26, 2007 | Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed (1) SSL or (2) MMS packets th... |
| CVE-2007-3377 | — | — | 2.0% | Jun 25, 2007 | Header.pm in Net::DNS before 0.60, a Perl module, (1) generates predictable sequence IDs with a fixed increment and (2) ... |
| CVE-2007-3374 | — | — | 0.5% | Jun 25, 2007 | Buffer overflow in cluster/cman/daemon/daemon.c in cman (redhat-cluster-suite) before 20070622 allows local users to cau... |
| CVE-2007-3375 | — | — | 4.7% | Jun 25, 2007 | Stack-based buffer overflow in Lhaca File Archiver before 1.21 allows user-assisted remote attackers to execute arbitrar... |
| CVE-2007-3376 | — | — | 5.5% | Jun 25, 2007 | Buffer overflow in Apple Safari 3.0.2 on Windows XP SP2 allows user-assisted remote attackers to cause a denial of servi... |
| CVE-2007-2401 | — | — | 7.1% | Jun 25, 2007 | CRLF injection vulnerability in WebCore in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1, allows remo... |
| CVE-2007-2400 | — | — | 2.6% | Jun 25, 2007 | Race condition in Apple Safari 3 Beta before 3.0.2 on Mac OS X, Windows XP, Windows Vista, and iPhone before 1.0.1, allo... |
| CVE-2007-2399 | — | — | 7.3% | Jun 25, 2007 | WebKit in Apple Mac OS X 10.3.9, 10.4.9 and later, and iPhone before 1.0.1 performs an "invalid type conversion", which ... |
| CVE-2007-3373 | — | — | 1.0% | Jun 25, 2007 | daemon.c in cman (redhat-cluster-suite) before 20070622 does not clear a buffer for reading requests, which might allow ... |
| CVE-2007-3372 | — | — | 0.4% | Jun 22, 2007 | The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service (exit) via empty TXT data over D-B... |
| CVE-2007-3371 | — | — | 71.2% | Jun 22, 2007 | PHP remote file inclusion vulnerability in plugins/widgets/htmledit/htmledit.php in Powl 0.94 allows remote attackers to... |
| CVE-2007-3360 | — | — | 7.5% | Jun 22, 2007 | hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data cont... |
| CVE-2007-3359 | — | — | 1.3% | Jun 22, 2007 | Multiple PHP remote file inclusion vulnerabilities in SerWeb 0.9.6 and earlier allow remote attackers to execute arbitra... |
| CVE-2007-3358 | — | — | 68.0% | Jun 22, 2007 | PHP remote file inclusion vulnerability in html/load_lang.php in SerWeb 0.9.6 and earlier allows remote attackers to exe... |
| CVE-2007-3357 | — | — | 1.1% | Jun 22, 2007 | NetClassifieds Premium Edition does not use encryption for (1) stored passwords or (2) sensitive data, which might allow... |
| CVE-2007-3356 | — | — | 1.8% | Jun 22, 2007 | NetClassifieds Premium Edition allows remote attackers to obtain sensitive information via certain requests that reveal ... |
| CVE-2007-3355 | — | — | 1.1% | Jun 22, 2007 | Multiple cross-site scripting (XSS) vulnerabilities in NetClassifieds Premium Edition allow remote attackers to inject a... |
| CVE-2007-3354 | — | — | 2.1% | Jun 22, 2007 | Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition allow remote attackers to execute arbitrary SQL... |
Check if your code is affected by 2007 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now