2007 CVE Vulnerabilities
6,580 CVEs published in 2007.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2007-2821 | — | — | 5.2% | May 22, 2007 | SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbitr... |
| CVE-2007-2822 | — | — | 4.4% | May 22, 2007 | TutorialCMS 1.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication via the... |
| CVE-2007-2823 | — | — | 2.9% | May 22, 2007 | Multiple buffer overflows in HT Editor before 2.0.6 might allow remote attackers to execute arbitrary code via unspecifi... |
| CVE-2007-2824 | — | — | 1.8% | May 22, 2007 | SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute ar... |
| CVE-2007-2827 | — | — | 6.4% | May 22, 2007 | Heap-based buffer overflow in LEAD Technologies LEADTOOLS ISIS ActiveX Control (ltisi14E.ocx) 14.5.0.44 and earlier allo... |
| CVE-2007-2826 | — | — | 3.3% | May 22, 2007 | PHP remote file inclusion vulnerability in lib/addressbook.php in Madirish Webmail 2.0 allows remote attackers to execut... |
| CVE-2007-2825 | — | — | 1.2% | May 22, 2007 | Multiple cross-site scripting (XSS) vulnerabilities in ReadMsg.php in @Mail 5.02 and earlier allow remote attackers to i... |
| CVE-2007-2816 | — | — | 10.1% | May 22, 2007 | Multiple PHP remote file inclusion vulnerabilities in ol'bookmarks 0.7.4 allow remote attackers to execute arbitrary PHP... |
| CVE-2007-2828 | — | — | 1.5% | May 22, 2007 | Cross-site request forgery (CSRF) vulnerability in adsense-deluxe.php in the AdSense-Deluxe 0.x plugin for WordPress all... |
| CVE-2007-2808 | — | — | 1.3% | May 22, 2007 | Cross-site scripting (XSS) vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote attackers to inj... |
| CVE-2007-2807 | — | — | 10.0% | May 22, 2007 | Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted, ... |
| CVE-2007-2806 | — | — | 1.6% | May 22, 2007 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in GaliX 2.0 allow remote attackers to inject arbitrary... |
| CVE-2007-2805 | — | — | 1.5% | May 22, 2007 | Multiple cross-site scripting (XSS) vulnerabilities in index.php in ClientExec (CE) 3.0 beta2, and possibly other versio... |
| CVE-2007-2804 | — | — | 1.2% | May 22, 2007 | Multiple cross-site scripting (XSS) vulnerabilities in scripts/prodList.asp in CandyPress Store 3.5.2.14 and earlier all... |
| CVE-2007-2803 | — | — | 1.2% | May 22, 2007 | SQL injection vulnerability in default.asp in Vizayn Urun Tanitim Sitesi 0.2 allows remote attackers to execute arbitrar... |
| CVE-2007-2802 | — | — | 1.1% | May 22, 2007 | Cross-site scripting (XSS) vulnerability in cp/ps/Main/login/Login in RM EasyMail Plus allows remote attackers to inject... |
| CVE-2007-2809 | — | — | 6.3% | May 22, 2007 | Buffer overflow in the transfer manager in Opera before 9.21 for Windows allows user-assisted remote attackers to execut... |
| CVE-2007-2810 | — | — | 1.5% | May 22, 2007 | SQL injection vulnerability in down_indir.asp in Gazi Download Portal allows remote attackers to execute arbitrary SQL c... |
| CVE-2007-2811 | — | — | 1.3% | May 22, 2007 | Cross-site scripting (XSS) vulnerability in OSK Advance-Flow 4.41 and earlier allows remote attackers to inject arbitrar... |
| CVE-2007-2812 | — | — | 2.7% | May 22, 2007 | Cross-site scripting (XSS) vulnerability in hlstats.php in HLstats 1.35, and possibly earlier, allows remote attackers t... |
| CVE-2007-2813 | — | — | 3.4% | May 22, 2007 | Cisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows remote attackers to cause ... |
| CVE-2007-2814 | — | — | 5.5% | May 22, 2007 | Multiple stack-based buffer overflows in the Pegasus ImagN' ActiveX control (IMW32O40.OCX) 4.00.041 allow remote attacke... |
| CVE-2007-2815 | — | — | 73.4% | May 22, 2007 | The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only... |
| CVE-2007-2686 | — | — | 1.8% | May 22, 2007 | Cross-site scripting (XSS) vulnerability in index.php in Jetbox CMS 2.1 allows remote attackers to inject arbitrary web ... |
| CVE-2007-2519 | — | — | 7.3% | May 22, 2007 | Directory traversal vulnerability in the installer in PEAR 1.0 through 1.5.3 allows user-assisted remote attackers to ov... |
Check if your code is affected by 2007 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now