2007 CVE Vulnerabilities

6,580 CVEs published in 2007.

CVE IDSeverityCVSSDescription
CVE-2007-0134Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the...
CVE-2007-0133Multiple SQL injection vulnerabilities in display_review.php in iGeneric iG Shop 1.4 and earlier allow remote attackers ...
CVE-2007-0132SQL injection vulnerability in compare_product.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary ...
CVE-2007-0131JAMWiki before 0.5.0 does not properly check permissions during moves of "read-only or admin-only topics," which allows ...
CVE-2007-0130SQL injection vulnerability in user.php in iGeneric iG Calendar 1.0 allows remote attackers to execute arbitrary SQL com...
CVE-2007-0129SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows remote attackers to execute arbitra...
CVE-2007-0128SQL injection vulnerability in info_book.asp in Digirez 3.4 and earlier allows remote attackers to execute arbitrary SQL...
CVE-2007-0138formbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with (1) AbfrageForm or (2) EingabeForm, allows ...
CVE-2007-0126Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an inval...
CVE-2007-0127The Javascript SVG support in Opera before 9.10 does not properly validate object types in a createSVGTransformFromMatri...
CVE-2007-0125Kaspersky Labs Antivirus Engine 6.0 for Windows and 5.5-10 for Linux before 20070102 enter an infinite loop upon encount...
CVE-2007-0124Unspecified vulnerability in Drupal before 4.6.11, and 4.7 before 4.7.5, when MySQL is used, allows remote authenticated...
CVE-2007-0123Unrestricted file upload vulnerability in Uber Uploader 4.2 allows remote attackers to upload and execute arbitrary PHP ...
CVE-2007-0122Multiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow remote authenticated adminis...
CVE-2007-0121Cross-site scripting (XSS) vulnerability in search.asp in RI Blog 1.3 allows remote attackers to inject arbitrary web sc...
CVE-2007-0120Acunetix Web Vulnerability Scanner (WVS) 4.0 Build 20060717 and earlier allows remote attackers to cause a denial of ser...
CVE-2007-0119Multiple cross-site scripting (XSS) vulnerabilities in EditTag 1.2 allow remote attackers to inject arbitrary web script...
CVE-2007-0118Multiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read arbitrary files via an ab...
CVE-2007-0117DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly validate Bill of Materials...
CVE-2007-0116Digger Solutions Intranet Open Source (IOS) stores sensitive information under the web root with insufficient access con...
CVE-2007-0115Static code injection vulnerability in Coppermine Photo Gallery 1.4.10 and earlier allows remote authenticated administr...
CVE-2007-0114Sun Java System Content Delivery Server 5.0 and 5.0 PU1 allows remote attackers to obtain sensitive information regardin...
CVE-2007-0113Buffer overflow in Packeteer PacketShaper PacketWise 8.x allows remote authenticated users to cause a denial of service ...
CVE-2007-0112SQL injection vulnerability in cats.asp in createauction allows remote attackers to execute arbitrary SQL commands via t...
CVE-2007-0111Buffer overflow in Resco Photo Viewer for PocketPC 4.11 and 6.01, as used in mobile devices running Windows Mobile 5.0, ...

Check if your code is affected by 2007 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now