2007 CVE Vulnerabilities

6,580 CVEs published in 2007.

CVE IDSeverityCVSSDescription
CVE-2007-3173——Almnzm allows remote attackers to obtain sensitive information via an activateorder request to index.php with an invalid...
CVE-2007-3172——Directory traversal vulnerability in demo/pop3/error.php in Uebimiau Webmail allows remote attackers to determine the ex...
CVE-2007-3171——Uebimiau Webmail allows remote attackers to obtain sensitive information via a request to demo/pop3/error.php with an in...
CVE-2007-3170——Multiple cross-site scripting (XSS) vulnerabilities in Uebimiau Webmail allow remote attackers to inject arbitrary web s...
CVE-2007-3169——Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and ...
CVE-2007-3168——A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions befo...
CVE-2007-3167——Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control (aka MjpegControl) in MjpegDecoder.dll 2.0.0.13 a...
CVE-2007-3166——Buffer overflow in Qualcomm Eudora 7.1.0.9 allows user-assisted, remote IMAP servers to execute arbitrary code via a lon...
CVE-2007-3165——Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might c...
CVE-2007-3164——Microsoft Internet Explorer 7, when prompting for HTTP Basic Authentication for an IDN web site, uses ACE labels for the...
CVE-2007-3163——Incomplete blacklist vulnerability in the filemanager in Frederico Caldeira Knabben FCKeditor 2.4.2 allows remote attack...
CVE-2007-3162——Buffer overflow in the NotSafe function in the idaiehlp ActiveX control in idaiehlp.dll 1.9.1.74 in Internet Download Ac...
CVE-2007-3161——Buffer overflow in Ace-FTP Client 1.24a allows user-assisted, remote FTP servers to execute arbitrary code via a long re...
CVE-2007-3174——Cross-site scripting (XSS) vulnerability in auth.w2b in W2B Online Banking allows remote attackers to inject arbitrary w...
CVE-2007-3159——http.c in MiniWeb Http Server 0.8.x allows remote attackers to cause a denial of service (application crash) via a negat...
CVE-2007-3150——Google Desktop allows user-assisted remote attackers to execute arbitrary programs via a man-in-the-middle attack that i...
CVE-2007-3142——Visual truncation vulnerability in Opera 9.21 allows remote attackers to spoof the address bar and possibly conduct phis...
CVE-2007-3143——Visual truncation vulnerability in Konqueror 3.5.5 allows remote attackers to spoof the address bar and possibly conduct...
CVE-2007-3144——Visual truncation vulnerability in Mozilla 1.7.12 allows remote attackers to spoof the address bar and possibly conduct ...
CVE-2007-3141——PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 allows remote attackers to execute arbi...
CVE-2007-3146——Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote ...
CVE-2007-3147——Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows ...
CVE-2007-3148——Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows ...
CVE-2007-3149——sudo, when linked with MIT Kerberos 5 (krb5), does not properly check whether a user can currently authenticate to Kerbe...
CVE-2007-3145——Visual truncation vulnerability in Galeon 2.0.1 allows remote attackers to spoof the address bar and possibly conduct ph...

Check if your code is affected by 2007 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now