2007 CVE Vulnerabilities
6,580 CVEs published in 2007.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2007-3324 | — | — | 1.8% | Jun 21, 2007 | Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arbitrary web... |
| CVE-2007-2398 | — | — | 2.6% | Jun 21, 2007 | Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while ... |
| CVE-2007-3311 | — | — | 1.0% | Jun 21, 2007 | SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to ex... |
| CVE-2007-3308 | — | — | 1.4% | Jun 21, 2007 | Simple Machines Forum (SMF) 1.1.2 uses a concatenation method with insufficient randomization when creating a WAV file C... |
| CVE-2007-3309 | — | — | 1.4% | Jun 21, 2007 | Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.2 allows remote attackers to execute arbitrary PHP code dur... |
| CVE-2007-3306 | — | — | 64.4% | Jun 21, 2007 | PHP remote file inclusion vulnerability in crontab/run_billing.php in MiniBill 1.2.5 allows remote attackers to execute ... |
| CVE-2007-3305 | — | — | 7.7% | Jun 21, 2007 | Heap-based buffer overflow in Cerulean Studios Trillian 3.x before 3.1.6.0 allows remote attackers to execute arbitrary ... |
| CVE-2007-3307 | — | — | 1.0% | Jun 21, 2007 | SQL injection vulnerability in game_listing.php in Solar Empire 2.9.1.1 and earlier allows remote attackers to execute a... |
| CVE-2007-3310 | — | — | 3.2% | Jun 21, 2007 | Cross-site scripting (XSS) vulnerability in arama.asp in TDizin allows remote attackers to inject arbitrary web script o... |
| CVE-2007-4168 | — | — | — | Jun 20, 2007 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-4168. Reason: This candidate is a duplicate of... |
| CVE-2007-3300 | — | — | 3.7% | Jun 20, 2007 | Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow remote attackers to bypass s... |
| CVE-2007-3298 | — | — | 1.1% | Jun 20, 2007 | SQL injection vulnerability in Spey before 0.4.1 allows remote attackers to execute arbitrary SQL commands via unspecifi... |
| CVE-2007-3304 | — | — | 3.3% | Jun 20, 2007 | Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by m... |
| CVE-2007-3299 | — | — | 1.6% | Jun 20, 2007 | Cross-site scripting (XSS) vulnerability in AWFFull before 3.7.4, when AllSearchStr (aka the All Search Terms report) is... |
| CVE-2007-3303 | — | — | 0.9% | Jun 20, 2007 | Apache httpd 2.0.59 and 2.2.4, with the Prefork MPM module, allows local users to cause a denial of service via certain ... |
| CVE-2007-3301 | — | — | 1.0% | Jun 20, 2007 | SQL injection vulnerability in forum/include/error/autherror.cfm in FuseTalk allows remote attackers to execute arbitrar... |
| CVE-2007-3289 | — | — | 12.2% | Jun 20, 2007 | PHP remote file inclusion vulnerability in spaw/spaw_control.class.php in the WiwiMod 0.4 module for XOOPS allows remote... |
| CVE-2007-3297 | — | — | 9.0% | Jun 20, 2007 | Multiple PHP remote file inclusion vulnerabilities in Musoo 0.21 allow remote attackers to execute arbitrary PHP code vi... |
| CVE-2007-3296 | — | — | 1.8% | Jun 20, 2007 | The ThunderServer.webThunder.1 ActiveX control in xunlei Web Thunderbolt 1.7.3.109 allows remote attackers to download a... |
| CVE-2007-3295 | — | — | 1.4% | Jun 20, 2007 | Directory traversal vulnerability in Yet another Bulletin Board (YaBB) 2.1 and earlier allows remote authenticated users... |
| CVE-2007-3294 | — | — | 9.4% | Jun 20, 2007 | Multiple buffer overflows in libtidy, as used in the Tidy extension for PHP 5.2.3 and possibly other products, allow con... |
| CVE-2007-3293 | — | — | 1.3% | Jun 20, 2007 | SQL injection vulnerability in categoria.php in LiveCMS 3.4 and earlier allows remote attackers to execute arbitrary SQL... |
| CVE-2007-3292 | — | — | 2.4% | Jun 20, 2007 | Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrar... |
| CVE-2007-3291 | — | — | 1.6% | Jun 20, 2007 | Cross-site scripting (XSS) vulnerability in LiveCMS 3.4 and earlier allows remote attackers to inject arbitrary web scri... |
| CVE-2007-3290 | — | — | 3.1% | Jun 20, 2007 | categoria.php in LiveCMS 3.4 and earlier allows remote attackers to obtain sensitive information via a ' (quote) charact... |
Check if your code is affected by 2007 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now