2007 CVE Vulnerabilities

6,580 CVEs published in 2007.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2007-2758——Multiple buffer overflows in WinImage 8.0.8000 allow user-assisted remote attackers to execute arbitrary code via a FAT ...
CVE-2007-2759——Multiple SQL injection vulnerabilities in the insert function in the ValuePreference class (grid/ed/ValuePreference.java...
CVE-2007-2762——Multiple PHP remote file inclusion vulnerabilities in Build it Fast (bif3) 0.4.1 allow remote attackers to execute arbit...
CVE-2007-2760——The canUpdate function in model/MRole.java in Adempiere before 3.1.6 does not properly validate user roles, which allows...
CVE-2007-2766——lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, w...
CVE-2007-2765——blockhosts.py in BlockHosts before 2.0.3 does not properly parse daemon log files, which allows remote attackers to add ...
CVE-2007-2764——The embedded Linux kernel in certain Sun-Brocade SilkWorm switches before 20070516 does not properly handle a situation ...
CVE-2007-2763——Buffer overflow in the UnlockSupport function in the LockModules subsystem in a certain ActiveX control in ltmm15.dll in...
CVE-2007-2682——The installer for Adobe Version Cue CS3 Server on Apple Mac OS X, as used in Adobe Creative Suite 3 (CS3), does not re-e...
CVE-2007-2756——The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption)...
CVE-2007-2755——The PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode.dll, when Internet Explorer 6 is used, allows remote ...
CVE-2007-2754——Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute arb...
CVE-2007-2746——The viewList function in lib/WebGUI/Asset/Wobject/DataForm.pm in Plain Black WebGUI before 7.3.14 does not properly use ...
CVE-2007-2745——Cross-site scripting (XSS) vulnerability in printcal.pl in vDesk Webmail 4.03 allows remote attackers to inject arbitrar...
CVE-2007-1693——The SIP channel module in Yet Another Telephony Engine (Yate) before 1.2.0 sets the caller_info_uri parameter using an i...
CVE-2007-2748——The substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information vi...
CVE-2007-2753——RunawaySoft Haber portal 1.0 stores sensitive information under the web root with insufficient access control, which all...
CVE-2007-2752——SQL injection vulnerability in devami.asp in RunawaySoft Haber portal 1.0 allows remote attackers to execute arbitrary S...
CVE-2007-2751——Multiple PHP remote file inclusion vulnerabilities in PHPGlossar 0.8 allow remote attackers to execute arbitrary PHP cod...
CVE-2007-2750——SQL injection vulnerability in print.php in SimpNews 2.40.01 and earlier allows remote attackers to execute arbitrary SQ...
CVE-2007-2747——Directory traversal vulnerability in rdw_helpers.py in rdiffWeb before 0.3.5.1 allows remote attackers to read arbitrary...
CVE-2007-2749——SQL injection vulnerability in question.php in FAQEngine 4.16.03 and earlier allows remote attackers to execute arbitrar...
CVE-2007-2743——PHP remote file inclusion vulnerability in custom_vars.php in GlossWord 1.8.1 allows remote attackers to execute arbitra...
CVE-2007-2744——Stack-based buffer overflow in the PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode.dll allows remote atta...
CVE-2007-2742——Unrestricted file upload vulnerability in labs.beffa.org w2box 4.0.0 Beta4 allows remote attackers to upload arbitrary P...

Check if your code is affected by 2007 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now