2007 CVE Vulnerabilities
6,580 CVEs published in 2007.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2007-2640 | — | — | 1.4% | May 13, 2007 | LibTMCG before 1.1.1 does not perform a range check to avoid "trivial group generators," which allows attackers to obtai... |
| CVE-2007-2641 | — | — | 2.0% | May 13, 2007 | SQL injection vulnerability in W1L3D4_bolum.asp in W1L3D4 Philboard 0.2 allows remote attackers to execute arbitrary SQL... |
| CVE-2007-2642 | — | — | 3.7% | May 13, 2007 | Directory traversal vulnerability in galeria.php in R2K Gallery 1.7 allows remote attackers to read arbitrary files via ... |
| CVE-2007-2643 | — | — | 3.7% | May 13, 2007 | Directory traversal vulnerability in phpThumb.php in PinkCrow Designs Gallery or maGAZIn 2.0 allows remote attackers to ... |
| CVE-2007-0749 | — | — | 6.5% | May 13, 2007 | Multiple stack-based buffer overflows in the is_command function in proxy.c in Apple Darwin Streaming Proxy, when using ... |
| CVE-2007-0748 | — | — | 6.5% | May 13, 2007 | Heap-based buffer overflow in Apple Darwin Streaming Proxy, when using Darwin Streaming Server before 5.5.5, allows remo... |
| CVE-2007-2625 | — | — | 1.1% | May 11, 2007 | Cross-site scripting (XSS) vulnerability in shared/code/cp_authorization.php in All In One Control Panel (AIOCP) before ... |
| CVE-2007-2627 | — | — | 2.3% | May 11, 2007 | Cross-site scripting (XSS) vulnerability in sidebar.php in WordPress, when custom 404 pages that call get_sidebar are us... |
| CVE-2007-2626 | — | — | 1.1% | May 11, 2007 | SQL injection vulnerability in admin.php in SchoolBoard allows remote attackers to execute arbitrary SQL commands via th... |
| CVE-2007-2628 | — | — | 2.6% | May 11, 2007 | PHP remote file inclusion vulnerability in include/logout.php in Justin Koivisto SecurityAdmin for PHP (aka PHPSecurityA... |
| CVE-2007-2630 | — | — | 1.3% | May 11, 2007 | Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as ... |
| CVE-2007-2629 | — | — | 1.7% | May 11, 2007 | Bradford CampusManager Network Control Application Server 3.1(6) allows remote attackers to obtain sensitive information... |
| CVE-2007-2624 | — | — | 1.4% | May 11, 2007 | Dynamic variable evaluation vulnerability in shared/config/cp_config.php in All In One Control Panel (AIOCP) before 1.3.... |
| CVE-2007-2618 | — | — | 1.2% | May 11, 2007 | CRLF injection vulnerability in index.php in Drake CMS 0.4.0 allows remote attackers to inject arbitrary HTTP headers an... |
| CVE-2007-2620 | — | — | 3.3% | May 11, 2007 | PHP remote file inclusion vulnerability in inc/config.inc.php in Jakub Steiner (aka jimmac) original 0.11 allows remote ... |
| CVE-2007-2616 | — | — | 6.0% | May 11, 2007 | Stack-based buffer overflow in the SSL version of the NMDMC.EXE service in Novell NetMail 3.52e FTF2 and probably earlie... |
| CVE-2007-2617 | — | — | 3.8% | May 11, 2007 | srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file per... |
| CVE-2007-2621 | — | — | 2.5% | May 11, 2007 | SQL injection vulnerability in event_view.php in Thyme Calendar 1.3 allows remote attackers to execute arbitrary SQL com... |
| CVE-2007-2619 | — | — | 0.3% | May 11, 2007 | Symantec pcAnywhere 11.5.x and 12.0.x retains unencrypted login credentials for the most recent login within process mem... |
| CVE-2007-2622 | — | — | 1.3% | May 11, 2007 | Multiple SQL injection vulnerabilities in TaskDriver 1.2 and earlier allow remote attackers to execute arbitrary SQL com... |
| CVE-2007-2623 | — | — | 4.3% | May 11, 2007 | Multiple buffer overflows in RControl.dll in Remote Display Dev kit 1.2.1.0 allow remote attackers to cause a denial of ... |
| CVE-2007-2598 | — | — | 1.9% | May 11, 2007 | SQL injection vulnerability in print.php in SimpleNews 1.0.0 FINAL allows remote attackers to execute arbitrary SQL comm... |
| CVE-2007-2597 | — | — | 10.1% | May 11, 2007 | Multiple PHP remote file inclusion vulnerabilities in telltarget CMS 1.3.3 allow remote attackers to execute arbitrary P... |
| CVE-2007-2596 | — | — | 3.3% | May 11, 2007 | PHP remote file inclusion vulnerability in common/func.php in aForum 1.32 and earlier allows remote attackers to execute... |
| CVE-2007-2595 | — | — | 1.1% | May 11, 2007 | RSAuction 2.73.1.3 allows remote authenticated users to move their own account status from Suspended to Active via a dir... |
Check if your code is affected by 2007 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now