2007 CVE Vulnerabilities
6,580 CVEs published in 2007.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2007-1901 | — | — | 1.6% | May 14, 2007 | SonicBB 1.0 allows remote attackers to obtain sensitive information via the (1) by[] parameter to search.php, (2) p[] pa... |
| CVE-2007-2444 | — | — | 0.8% | May 14, 2007 | Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to ... |
| CVE-2007-2446 | — | — | 77.8% | May 14, 2007 | Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers ... |
| CVE-2007-2653 | — | — | — | May 14, 2007 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-2438. Reason: This candidate is a duplicate of... |
| CVE-2007-2650 | — | — | 3.2% | May 14, 2007 | The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) v... |
| CVE-2007-2651 | — | — | 2.9% | May 14, 2007 | Multiple off-by-one errors in VooDoo cIRCle before 1.1.beta27 allow remote attackers to cause a denial of service (conne... |
| CVE-2007-2652 | — | — | 2.9% | May 14, 2007 | Multiple unspecified vulnerabilities in Free-SA before 1.2.2 allow remote attackers to execute arbitrary code via unspec... |
| CVE-2007-2654 | — | — | 0.3% | May 14, 2007 | xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or ove... |
| CVE-2007-2655 | — | — | 3.9% | May 14, 2007 | Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vector... |
| CVE-2007-2447 | — | — | 49.8% | May 14, 2007 | The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands ... |
| CVE-2007-2645 | — | — | 13.2% | May 14, 2007 | Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted ... |
| CVE-2007-2646 | — | — | 3.1% | May 14, 2007 | Heap-based buffer overflow in yEnc32 1.0.7.207 allows user-assisted remote attackers to execute arbitrary code via a lon... |
| CVE-2007-2647 | — | — | 2.7% | May 14, 2007 | Static code injection vulnerability in admin/admin_configuration.php in Monalbum 0.8.7 allows remote authenticated users... |
| CVE-2007-2648 | — | — | 7.0% | May 14, 2007 | Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control (comparerax.ocx) allows remote attackers... |
| CVE-2007-2649 | — | — | 1.9% | May 14, 2007 | Deutsche Telekom (T-com) Speedport W 700v uses JavaScript delays for invalid authentication attempts to the CGI script, ... |
| CVE-2007-2644 | — | — | 4.7% | May 13, 2007 | A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrar... |
| CVE-2007-2631 | — | — | 1.4% | May 13, 2007 | Cross-site request forgery (CSRF) vulnerability in SquirrelMail 1.4.8-4.fc6 and earlier allows remote attackers to perfo... |
| CVE-2007-2632 | — | — | 4.0% | May 13, 2007 | Multiple cross-site scripting (XSS) vulnerabilities in PHP Multi User Randomizer (phpMUR) 2006.09.13 allow remote attack... |
| CVE-2007-2633 | — | — | 2.4% | May 13, 2007 | Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, ar... |
| CVE-2007-2634 | — | — | 2.0% | May 13, 2007 | PHP remote file inclusion vulnerability in common/errormsg.php in aForum 1.32 and possibly earlier, when register_global... |
| CVE-2007-2635 | — | — | 2.3% | May 13, 2007 | Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service ... |
| CVE-2007-2636 | — | — | 1.2% | May 13, 2007 | Unspecified vulnerability in phpTodo before 0.8.1 allows remote attackers to have an unknown impact via newlines in regu... |
| CVE-2007-2637 | — | — | 1.5% | May 13, 2007 | MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to rea... |
| CVE-2007-2638 | — | — | 2.6% | May 13, 2007 | eFileCabinet 3.3 allows remote attackers to bypass authentication and access restricted portions of the interface via an... |
| CVE-2007-2639 | — | — | 3.6% | May 13, 2007 | Directory traversal vulnerability in TFTPdWin 0.4.2 allows remote attackers to read or modify arbitrary files outside th... |
Check if your code is affected by 2007 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now