2007 CVE Vulnerabilities

6,580 CVEs published in 2007.

CVE IDSeverityCVSSDescription
CVE-2007-1704SQL injection vulnerability in index.php in the Car Manager (com_resman) 1.1 and earlier component for Joomla! allows re...
CVE-2007-1703SQL injection vulnerability in index.php in the RWCards (com_rwcards) 2.4.3 and earlier component for Joomla! allows rem...
CVE-2007-1702PHP remote file inclusion vulnerability in mod_flatmenu.php in the Flatmenu 1.07 and earlier Mambo module allows remote ...
CVE-2007-1698download.php in Philex 0.2.3 and earlier allows remote attackers to read arbitrary files and source code, and obtain sen...
CVE-2007-1697PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execute...
CVE-2007-1696SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execut...
CVE-2007-1695PHP remote file inclusion vulnerability in includes/usercp_register.php in phpBB 2.0.19 allows remote attackers to execu...
CVE-2007-1706SQL injection vulnerability in eWebQuiz.asp in eWebQuiz 8 allows remote attackers to execute arbitrary SQL commands via ...
CVE-2007-1701PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to exec...
CVE-2007-1700The session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count for the session vari...
CVE-2007-1709Buffer overflow in the confirm_phpdoc_compiled function in the phpDOC extension (PECL phpDOC) in PHP 5.2.1 allows contex...
CVE-2007-1699Multiple PHP remote file inclusion vulnerabilities in the SWmenu (com_swmenupro and com_swmenufree) 4.0 component for Ma...
CVE-2007-1679MEDIUM5.4Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware Webmail 1.0 allow remote authenticated users to i...
CVE-2007-1678Cross-site scripting (XSS) vulnerability in the Fizzle 0.5 extension for Firefox allows remote attackers to inject arbit...
CVE-2007-1692The default configuration of Microsoft Windows uses the Web Proxy Autodiscovery Protocol (WPAD) without static WPAD entr...
CVE-2007-1667Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage fu...
CVE-2007-1666The processor_request function in the debugger server for DataRescue IDA Pro 5.0 and 5.1 does not verify that authentica...
CVE-2007-1465Stack-based buffer overflow in dproxy.c for dproxy 0.1 through 0.5 allows remote attackers to execute arbitrary code via...
CVE-2007-1658Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a lin...
CVE-2007-1657Stack-based buffer overflow in the file_compress function in minigzip (Modules/zlib) in Python 2.5 allows context-depend...
CVE-2007-1642Unspecified vulnerability in ManageEngine Firewall Analyzer allows remote authenticated users to "access any common file...
CVE-2007-1656Multiple SQL injection vulnerabilities in index.php in Katalog Plyt Audio 1.0 and earlier allow remote attackers to exec...
CVE-2007-1655Buffer overflow in the fun_ladd function in funmath.cpp in TinyMUX before 20070126 might allow remote attackers to cause...
CVE-2007-1654Buffer overflow in the Ne7sshSftp::addOpenHandle function in ne7ssh_sftp.cpp in NetSieben SSH Library (ne7ssh) before 1....
CVE-2007-1653GlowWorm FW before 1.5.3b4 allows remote attackers to cause a denial of service (kernel panic) via certain DNS responses...

Check if your code is affected by 2007 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now