2007 CVE Vulnerabilities
6,580 CVEs published in 2007.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2007-3338 | — | — | 6.7% | Jun 22, 2007 | Multiple stack-based buffer overflows in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Co... |
| CVE-2007-3371 | — | — | 71.2% | Jun 22, 2007 | PHP remote file inclusion vulnerability in plugins/widgets/htmledit/htmledit.php in Powl 0.94 allows remote attackers to... |
| CVE-2007-3337 | — | — | 0.4% | Jun 22, 2007 | wakeup in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, al... |
| CVE-2007-3341 | — | — | 10.9% | Jun 21, 2007 | Unspecified vulnerability in the FTP implementation in Microsoft Internet Explorer allows remote attackers to "see a val... |
| CVE-2007-3342 | — | — | 1.0% | Jun 21, 2007 | Multiple cross-site scripting (XSS) vulnerabilities in Movable Type (MT) before 3.34 allow remote attackers to inject ar... |
| CVE-2007-3334 | — | — | 10.3% | Jun 21, 2007 | Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe)... |
| CVE-2007-3340 | — | — | 4.1% | Jun 21, 2007 | BugHunter HTTP SERVER (httpsv.exe) 1.6.2 allows remote attackers to cause a denial of service (application crash) via a ... |
| CVE-2007-3339 | — | — | 4.1% | Jun 21, 2007 | Multiple cross-site scripting (XSS) vulnerabilities in forum/include/error/autherror.cfm in FuseTalk Basic, Standard, En... |
| CVE-2007-2833 | — | — | 2.0% | Jun 21, 2007 | Emacs 21 allows user-assisted attackers to cause a denial of service (crash) via certain crafted images, as demonstrated... |
| CVE-2007-3332 | — | — | 2.7% | Jun 21, 2007 | Directory traversal vulnerability in Satellite.php in Satel Lite for PhpNuke allows remote attackers to read arbitrary f... |
| CVE-2007-3335 | — | — | 1.1% | Jun 21, 2007 | Multiple SQL injection vulnerabilities in the admin panel in PHPEcho CMS before 1.6 allow remote attackers to execute ar... |
| CVE-2007-3321 | — | — | 1.4% | Jun 21, 2007 | The Avaya 4602 SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware allows remote attackers to cause a denia... |
| CVE-2007-3331 | — | — | 1.2% | Jun 21, 2007 | Cross-site request forgery (CSRF) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to change the admin pa... |
| CVE-2007-3330 | — | — | 1.1% | Jun 21, 2007 | Cross-site scripting (XSS) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to inject arbitrary web scrip... |
| CVE-2007-3329 | — | — | 3.2% | Jun 21, 2007 | Multiple array index errors in the (1) get_intra_block, (2) get_inter_block_h263, and (3) get_inter_block_mpeg functions... |
| CVE-2007-3328 | — | — | 2.3% | Jun 21, 2007 | Multiple cross-site scripting (XSS) vulnerabilities in Interact 2.4 beta 1 allow remote attackers to inject arbitrary we... |
| CVE-2007-3327 | — | — | 2.6% | Jun 21, 2007 | httpsv.exe in HTTP Server 1.6.2 allows remote attackers to obtain sensitive information (script source code) via a URI w... |
| CVE-2007-3326 | — | — | 1.2% | Jun 21, 2007 | Multiple directory traversal vulnerabilities in vBulletin 3.x.x allow remote attackers to redirect visitors to arbitrary... |
| CVE-2007-3325 | — | — | 64.4% | Jun 21, 2007 | PHP remote file inclusion vulnerability in lib/language.php in LAN Management System (LMS) 1.9.6 and earlier allows remo... |
| CVE-2007-3324 | — | — | 1.8% | Jun 21, 2007 | Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arbitrary web... |
| CVE-2007-3323 | — | — | 1.0% | Jun 21, 2007 | SQL injection vulnerability in comersus_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows remote attackers to exec... |
| CVE-2007-3322 | — | — | 1.4% | Jun 21, 2007 | The Avaya 4602 SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware uses a constant media port number for ca... |
| CVE-2007-3320 | — | — | 1.4% | Jun 21, 2007 | The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware accepts SIP INVITE requests from arbitrar... |
| CVE-2007-3319 | — | — | 1.6% | Jun 21, 2007 | The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware does not use the cnonce parameter in the ... |
| CVE-2007-3318 | — | — | 1.9% | Jun 21, 2007 | Buffer overflow in the Session Initiation Protocol (SIP) User Access Client (UAC) message parsing module in Avaya one-X ... |
Check if your code is affected by 2007 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now