2007 CVE Vulnerabilities
6,580 CVEs published in 2007.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2007-3217 | — | — | 10.1% | Jun 14, 2007 | Multiple PHP remote file inclusion vulnerabilities in Prototype of an PHP application 0.1 allow remote attackers to exec... |
| CVE-2007-3215 | — | — | 2.4% | Jun 14, 2007 | PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell me... |
| CVE-2007-3214 | — | — | 1.1% | Jun 14, 2007 | SQL injection vulnerability in style.php in e-Vision CMS 2.02 and earlier, when magic_quotes_gpc is disabled, allows rem... |
| CVE-2007-3213 | — | — | 1.2% | Jun 14, 2007 | Multiple cross-site scripting (XSS) vulnerabilities in comments.cgi in Sporum Forum 3.0.9 and earlier allow remote attac... |
| CVE-2007-3212 | — | — | 1.8% | Jun 14, 2007 | Multiple cross-site scripting (XSS) vulnerabilities in links.php in Beehive Forum 0.7.1 allow remote attackers to inject... |
| CVE-2007-3209 | — | — | 1.5% | Jun 14, 2007 | Mail Notification 4.0, when WITH_SSL is set to 0 at compile time, uses unencrypted connections for accounts configured w... |
| CVE-2007-3208 | — | — | 5.9% | Jun 14, 2007 | CRLF injection vulnerability in Yet another Bulletin Board (YaBB) 2.1 allows remote attackers to obtain administrative a... |
| CVE-2007-3099 | — | — | 0.8% | Jun 14, 2007 | usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's UID on the listening A... |
| CVE-2007-3100 | — | — | 0.4% | Jun 14, 2007 | usr/log.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 uses a semaphore with insecure permissions (wor... |
| CVE-2007-3211 | — | — | 1.0% | Jun 14, 2007 | Cross-site scripting (XSS) vulnerability in 404.php in Domain Technologie Control (DTC) before 0.25.9 allows remote atta... |
| CVE-2007-3210 | — | — | 4.0% | Jun 14, 2007 | Stack-based buffer overflow in nptoken.mox in the Cellosoft Tokens Object 2.0.0.6 extension for Vitalize! allows remote ... |
| CVE-2007-2391 | — | — | 1.3% | Jun 14, 2007 | Cross-site scripting (XSS) vulnerability in Apple Safari Beta 3.0.1 for Windows allows remote attackers to inject arbitr... |
| CVE-2007-3205 | — | — | 2.1% | Jun 13, 2007 | The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might allo... |
| CVE-2007-3197 | — | — | 1.0% | Jun 12, 2007 | SQL injection vulnerability in vBSupport.php in vBSupport 1.1 before 1.1a allows remote attackers to execute arbitrary S... |
| CVE-2007-3181 | — | — | 13.2% | Jun 12, 2007 | Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a l... |
| CVE-2007-3188 | — | — | 1.2% | Jun 12, 2007 | SQL injection vulnerability in down_indir.asp in Fullaspsite GeometriX Download Portal allows remote attackers to execut... |
| CVE-2007-3189 | — | — | 4.0% | Jun 12, 2007 | Cross-site scripting (XSS) vulnerability in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.3 allows rem... |
| CVE-2007-3190 | — | — | 1.4% | Jun 12, 2007 | Multiple SQL injection vulnerabilities in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.3, when magic_... |
| CVE-2007-3191 | — | — | 8.4% | Jun 12, 2007 | Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to obtain configuration information via a ... |
| CVE-2007-3192 | — | — | 3.6% | Jun 12, 2007 | admin/setup.php in Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to read and modify conf... |
| CVE-2007-3193 | — | — | 3.5% | Jun 12, 2007 | lib/WikiUser/LDAP.php in PhpWiki before 1.3.13p1, when the configuration lacks a nonzero PASSWORD_LENGTH_MINIMUM, might ... |
| CVE-2007-3195 | — | — | 1.0% | Jun 12, 2007 | Cross-site scripting (XSS) vulnerability in index.php in ERFAN WIKI 1.00 allows remote attackers to inject arbitrary web... |
| CVE-2007-3196 | — | — | 1.2% | Jun 12, 2007 | SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows remote attackers to execu... |
| CVE-2007-3198 | — | — | 2.5% | Jun 12, 2007 | Cross-site scripting (XSS) vulnerability in comments.php in Maran PHP Blog (Maran Blog), possibly only versions before 2... |
| CVE-2007-3199 | — | — | 3.0% | Jun 12, 2007 | Unrestricted file upload vulnerability in Link Request Contact Form 3.4 allows remote attackers to execute arbitrary PHP... |
Check if your code is affected by 2007 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now