2007 CVE Vulnerabilities
6,580 CVEs published in 2007.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2007-2751 | — | — | 3.3% | May 17, 2007 | Multiple PHP remote file inclusion vulnerabilities in PHPGlossar 0.8 allow remote attackers to execute arbitrary PHP cod... |
| CVE-2007-2750 | — | — | 1.2% | May 17, 2007 | SQL injection vulnerability in print.php in SimpNews 2.40.01 and earlier allows remote attackers to execute arbitrary SQ... |
| CVE-2007-2749 | — | — | 1.0% | May 17, 2007 | SQL injection vulnerability in question.php in FAQEngine 4.16.03 and earlier allows remote attackers to execute arbitrar... |
| CVE-2007-2748 | — | — | 1.4% | May 17, 2007 | The substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information vi... |
| CVE-2007-2742 | — | — | 1.5% | May 17, 2007 | Unrestricted file upload vulnerability in labs.beffa.org w2box 4.0.0 Beta4 allows remote attackers to upload arbitrary P... |
| CVE-2007-2743 | — | — | 3.1% | May 17, 2007 | PHP remote file inclusion vulnerability in custom_vars.php in GlossWord 1.8.1 allows remote attackers to execute arbitra... |
| CVE-2007-2744 | — | — | 5.5% | May 17, 2007 | Stack-based buffer overflow in the PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode.dll allows remote atta... |
| CVE-2007-2735 | — | — | 1.2% | May 17, 2007 | SQL injection vulnerability in edit_day.php in the ResManager 1.2.1 and earlier module for Xoops allows remote attackers... |
| CVE-2007-2737 | — | — | 0.9% | May 17, 2007 | SQL injection vulnerability in index.php in the MyConference 1.0 module for Xoops allows remote attackers to execute arb... |
| CVE-2007-2736 | — | — | 4.3% | May 17, 2007 | PHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to execute arbitrary PHP c... |
| CVE-2007-2738 | — | — | 1.1% | May 17, 2007 | SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attacke... |
| CVE-2007-2739 | — | — | 1.3% | May 17, 2007 | Cross-site scripting (XSS) vulnerability in xajax before 0.2.5 allows remote attackers to inject arbitrary web script or... |
| CVE-2007-2740 | — | — | 1.0% | May 17, 2007 | Unspecified vulnerability in xajax before 0.2.5 has unknown impact and attack vectors, not related to XSS. |
| CVE-2007-2741 | — | — | 7.9% | May 17, 2007 | Stack-based buffer overflow in Little CMS (lcms) before 1.15 allows remote attackers to execute arbitrary code or cause ... |
| CVE-2007-2734 | — | — | 2.1% | May 16, 2007 | The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HTT... |
| CVE-2007-2723 | MEDIUM | 5.5 | 1.5% | May 16, 2007 | Media Player Classic 6.4.9.0 allows user-assisted remote attackers to cause a denial of service (web browser crash) via ... |
| CVE-2007-2445 | — | — | 5.1% | May 16, 2007 | The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to ca... |
| CVE-2007-1898 | — | — | 2.9% | May 16, 2007 | formmail.php in Jetbox CMS 2.1 allows remote attackers to send arbitrary e-mails (spam) via modified recipient, _SETTING... |
| CVE-2007-1173 | — | — | 7.8% | May 16, 2007 | Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery 2... |
| CVE-2007-2568 | — | — | 6.3% | May 16, 2007 | Multiple stack-based buffer overflows in VCDGear 3.55 allow user-assisted remote attackers to execute arbitrary code via... |
| CVE-2007-2732 | — | — | 4.1% | May 16, 2007 | Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script ... |
| CVE-2007-2731 | — | — | 1.6% | May 16, 2007 | CRLF injection vulnerability in formmail.php in Jetbox CMS 2.1 might allow remote attackers to inject arbitrary e-mail h... |
| CVE-2007-2730 | — | — | 0.3% | May 16, 2007 | Check Point ZoneAlarm Pro before 6.5.737.000 does not properly test for equivalence of process identifiers for certain M... |
| CVE-2007-2729 | — | — | 0.3% | May 16, 2007 | Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do no... |
| CVE-2007-2728 | — | — | 2.4% | May 16, 2007 | The soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown impact and attack vect... |
Check if your code is affected by 2007 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now