2007 CVE Vulnerabilities
6,580 CVEs published in 2007.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2007-6188 | — | — | 4.0% | Nov 30, 2007 | Multiple directory traversal vulnerabilities in TuMusika Evolution 1.7R5 allow remote attackers to include and execute a... |
| CVE-2007-6189 | — | — | 8.1% | Nov 30, 2007 | A certain ActiveX control in (1) OScan8.ocx and (2) Oscan81.ocx in BitDefender Online Anti-Virus Scanner 8.0 allows remo... |
| CVE-2007-6190 | — | — | 1.0% | Nov 30, 2007 | The HTTP daemon in the Cisco Unified IP Phone, when the Extension Mobility feature is enabled, allows remote authenticat... |
| CVE-2007-6191 | — | — | 2.2% | Nov 30, 2007 | Multiple PHP remote file inclusion vulnerabilities in Armin Burger p.mapper 3.2.0 beta3 allow remote attackers to execut... |
| CVE-2007-6192 | — | — | 0.7% | Nov 30, 2007 | The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption (XOR of unpadded data) to store cre... |
| CVE-2007-6193 | — | — | 1.1% | Nov 30, 2007 | The web management interface in Citrix NetScaler 8.0 build 47.8 stores the device's primary IP address in a cookie, whic... |
| CVE-2007-5503 | — | — | 5.5% | Nov 30, 2007 | Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrate... |
| CVE-2007-6174 | — | — | 1.5% | Nov 30, 2007 | PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a crafted request to update a user pro... |
| CVE-2007-6172 | — | — | 1.6% | Nov 30, 2007 | Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the id... |
| CVE-2007-6173 | — | — | 2.3% | Nov 30, 2007 | Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Enterprise Portal 4.3.1 allows remote attackers to... |
| CVE-2007-6175 | — | — | 3.5% | Nov 30, 2007 | Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive,... |
| CVE-2007-6176 | — | — | 4.6% | Nov 30, 2007 | kb_whois.cgi in K+B-Bestellsystem (aka KB-Bestellsystem) allows remote attackers to execute arbitrary commands via shell... |
| CVE-2007-6177 | — | — | 2.7% | Nov 30, 2007 | PHP remote file inclusion vulnerability in Exchange/include.php in PHP_CON 1.3 allows remote attackers to execute arbitr... |
| CVE-2007-6178 | — | — | 2.4% | Nov 30, 2007 | Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu (EHCP) 0.22.8 and earlier al... |
| CVE-2007-6179 | — | — | 7.8% | Nov 30, 2007 | Multiple PHP remote file inclusion vulnerabilities in Charray's CMS 0.9.3 allow remote attackers to execute arbitrary PH... |
| CVE-2007-6180 | — | — | 0.7% | Nov 30, 2007 | Race condition in the Remote Procedure Call kernel module (rpcmod) in Sun Solaris 8 through 10 allows local users to cau... |
| CVE-2007-6181 | — | — | 5.6% | Nov 30, 2007 | Heap-based buffer overflow in cygwin1.dll in Cygwin 1.5.7 and earlier allows context-dependent attackers to execute arbi... |
| CVE-2007-6182 | — | — | 0.9% | Nov 30, 2007 | The responder program in ISPsystem ISPmanager (aka ISPmgr) 4.2.15.1 allows local users to gain privileges via shell meta... |
| CVE-2007-6183 | — | — | 3.4% | Nov 30, 2007 | Format string vulnerability in the mdiag_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/G... |
| CVE-2007-6184 | — | — | 2.5% | Nov 30, 2007 | Directory traversal vulnerability in index.php in Project Alumni 1.0.9 allows remote attackers to include and execute ar... |
| CVE-2007-6185 | — | — | 7.4% | Nov 30, 2007 | Directory traversal vulnerability in users/files.php in Eurologon CMS allows remote attackers to read arbitrary files vi... |
| CVE-2007-6186 | — | — | 1.2% | Nov 30, 2007 | Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor security... |
| CVE-2007-4346 | — | — | 2.6% | Nov 29, 2007 | The Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6... |
| CVE-2007-4347 | — | — | 2.9% | Nov 29, 2007 | Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11... |
| CVE-2007-6166 | — | — | 41.9% | Nov 29, 2007 | Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac... |
Check if your code is affected by 2007 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now