2007 CVE Vulnerabilities
6,580 CVEs published in 2007.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2007-2384 | — | — | 1.3% | Apr 30, 2007 | The Script.aculo.us framework exchanges data using JavaScript Object Notation (JSON) without an associated protection sc... |
| CVE-2007-2383 | — | — | 2.4% | Apr 30, 2007 | The Prototype (prototypejs) framework before 1.5.1 RC3 exchanges data using JavaScript Object Notation (JSON) without an... |
| CVE-2007-2382 | — | — | 1.6% | Apr 30, 2007 | The Moo.fx framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, whi... |
| CVE-2007-2381 | — | — | 1.6% | Apr 30, 2007 | The MochiKit framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, w... |
| CVE-2007-2380 | — | — | 12.3% | Apr 30, 2007 | The Microsoft Atlas framework exchanges data using JavaScript Object Notation (JSON) without an associated protection sc... |
| CVE-2007-2379 | — | — | 2.8% | Apr 30, 2007 | The jQuery framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, whi... |
| CVE-2007-2378 | — | — | 0.7% | Apr 30, 2007 | The Google Web Toolkit (GWT) framework exchanges data using JavaScript Object Notation (JSON) without an associated prot... |
| CVE-2007-2377 | — | — | 1.9% | Apr 30, 2007 | The Getahead Direct Web Remoting (DWR) framework 1.1.4 exchanges data using JavaScript Object Notation (JSON) without an... |
| CVE-2007-2376 | — | — | 1.6% | Apr 30, 2007 | The Dojo framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which... |
| CVE-2007-2375 | — | — | 5.6% | Apr 30, 2007 | The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405 does not verify the aut... |
| CVE-2007-2374 | — | — | 17.4% | Apr 30, 2007 | Unspecified vulnerability in Microsoft Windows 2000, XP, and Server 2003 allows user-assisted remote attackers to execut... |
| CVE-2007-2373 | — | — | 3.7% | Apr 30, 2007 | SQL injection vulnerability in viewcat.php in the WF-Links (wflinks) 1.03 and earlier module for XOOPS allows remote att... |
| CVE-2007-2372 | — | — | 8.2% | Apr 30, 2007 | admin/send_mod.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier prints a Location header but does not exit... |
| CVE-2007-2371 | — | — | 8.0% | Apr 30, 2007 | admin/index.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier provides access to configuration modification... |
| CVE-2007-2370 | — | — | 2.9% | Apr 30, 2007 | SQL injection vulnerability in index.php in the John Mordo Jobs 2.4 and earlier module for XOOPS allows remote attackers... |
| CVE-2007-2369 | — | — | 8.4% | Apr 30, 2007 | Directory traversal vulnerability in picture.php in WebSPELL 4.01.02 and earlier, when PHP before 4.3.0 is used, allows ... |
| CVE-2007-2368 | — | — | 2.3% | Apr 30, 2007 | picture.php in WebSPELL 4.01.02 and earlier allows remote attackers to read arbitrary files via the file parameter. |
| CVE-2007-2364 | — | — | 8.5% | Apr 30, 2007 | Multiple PHP remote file inclusion vulnerabilities in burnCMS 0.2 and earlier allow remote attackers to execute arbitrar... |
| CVE-2007-2056 | — | — | — | Apr 30, 2007 | Rejected reason: The getlock function in aimage/aimage.cpp in AFFLIB 2.2.8 and earlier allows local users to overwrite a... |
| CVE-2007-2366 | — | — | 33.9% | Apr 30, 2007 | Buffer overflow in Corel Paint Shop Pro 11.20 allows user-assisted remote attackers to execute arbitrary code via a craf... |
| CVE-2007-2355 | — | — | 6.0% | Apr 30, 2007 | The get_url function in DODS_Dispatch.pm for the CGI_server in OPeNDAP 3 allows remote attackers to execute arbitrary co... |
| CVE-2007-2354 | — | — | 2.0% | Apr 30, 2007 | Progress Webspeed Messenger allows remote attackers to obtain sensitive information via a WService parameter containing ... |
| CVE-2007-2353 | — | — | 27.7% | Apr 30, 2007 | Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which re... |
| CVE-2007-2352 | — | — | 5.1% | Apr 30, 2007 | Multiple format string vulnerabilities in AFFLIB 2.2.6 allow remote attackers to execute arbitrary code via certain comm... |
| CVE-2007-2351 | — | — | 0.6% | Apr 30, 2007 | Unspecified vulnerability in the HP Power Manager Remote Agent (RA) 4.0Build10 and earlier in HP-UX B.11.11 and B.11.23 ... |
Check if your code is affected by 2007 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now