2007 CVE Vulnerabilities
6,580 CVEs published in 2007.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2007-3267 | — | — | 1.9% | Jun 19, 2007 | Cross-site scripting (XSS) vulnerability in low.php in Fuzzylime Forum 1.01b and earlier allows remote attackers to inje... |
| CVE-2007-3262 | — | — | 2.9% | Jun 19, 2007 | Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earli... |
| CVE-2007-3260 | — | — | 3.8% | Jun 19, 2007 | HP System Management Homepage (SMH) before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory mem... |
| CVE-2007-3127 | — | — | 3.0% | Jun 19, 2007 | content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers to obtain sensitive information ... |
| CVE-2007-3128 | — | — | 1.2% | Jun 19, 2007 | SQL injection vulnerability in content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers t... |
| CVE-2007-3257 | — | — | 3.1% | Jun 19, 2007 | Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execute... |
| CVE-2007-3101 | — | — | 44.5% | Jun 18, 2007 | Multiple cross-site scripting (XSS) vulnerabilities in certain JSF applications in Apache MyFaces Tomahawk before 1.1.6 ... |
| CVE-2007-3253 | — | — | 2.9% | Jun 18, 2007 | Multiple unspecified vulnerabilities in Astaro Security Gateway (ASG) before 7.005 allow remote attackers to cause a den... |
| CVE-2007-3252 | — | — | 1.4% | Jun 18, 2007 | PortalApp stores sensitive information under the web root with insufficient access control, which allows remote attacker... |
| CVE-2007-3251 | — | — | 4.0% | Jun 18, 2007 | Multiple directory traversal vulnerabilities in e-Vision CMS 2.02 and earlier allow remote attackers to (1) include and ... |
| CVE-2007-3250 | — | — | 1.3% | Jun 18, 2007 | SQL injection vulnerability in mod_banners.php in Elxis CMS before 2006.4 20070613 allows remote attackers to execute ar... |
| CVE-2007-3249 | — | — | 1.9% | Jun 18, 2007 | Cross-site scripting (XSS) vulnerability in mod_lettermansubscribe.php in the Letterman Subscriber (mod_letterman) befor... |
| CVE-2007-3248 | — | — | 3.0% | Jun 18, 2007 | Unspecified vulnerability in Sun Solaris 10 before 20070614, when IPv6 interfaces are present but not configured for IPs... |
| CVE-2007-3247 | — | — | 1.2% | Jun 18, 2007 | SQL injection vulnerability in VirtueMart before 1.0.11 allows remote attackers to execute arbitrary SQL commands via un... |
| CVE-2007-3207 | — | — | 2.2% | Jun 18, 2007 | Buffer overflow in the NFS mount daemon (XNFS.NLM) in Novell NetWare 6.5 SP6, and probably earlier, allows remote attack... |
| CVE-2007-2923 | — | — | 6.0% | Jun 18, 2007 | The launch method in the LocalExec ActiveX control (LocalExec.ocx) in Novell exteNd Director 4.1 and Portal Services all... |
| CVE-2007-3237 | — | — | 67.7% | Jun 15, 2007 | PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the TinyContent 1.5 module for XOOPS all... |
| CVE-2007-3236 | — | — | 77.0% | Jun 15, 2007 | PHP remote file inclusion vulnerability in footer.php in the Horoscope 1.0 module for XOOPS allows remote attackers to e... |
| CVE-2007-3235 | — | — | 0.9% | Jun 15, 2007 | Cross-site scripting (XSS) vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to inject arbitrary w... |
| CVE-2007-3233 | — | — | 6.0% | Jun 15, 2007 | The TEC-IT TBarCode OCX ActiveX control (TBarCode7.ocx) 7.0.2.3524 allows remote attackers to overwrite arbitrary files ... |
| CVE-2007-3234 | — | — | 1.0% | Jun 15, 2007 | SQL injection vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to execute arbitrary SQL commands ... |
| CVE-2007-3232 | — | — | 3.3% | Jun 15, 2007 | The IBM TotalStorage DS400 with firmware 4.15 uses a blank password for the (1) root, (2) user, (3) manager, (4) adminis... |
| CVE-2007-3246 | — | — | 1.9% | Jun 15, 2007 | The do_set_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privilege... |
| CVE-2007-3245 | — | — | 1.7% | Jun 15, 2007 | IRC Services before 5.0.62, and 5.1 before 5.1pre3, allows remote attackers to disconnect users with guest nicknames by ... |
| CVE-2007-3244 | — | — | 1.3% | Jun 15, 2007 | SQL injection vulnerability in bb-includes/formatting-functions.php in bbPress before 0.8.1 might allow remote attackers... |
Check if your code is affected by 2007 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now