2007 CVE Vulnerabilities

6,580 CVEs published in 2007.

CVE IDSeverityCVSSDescription
CVE-2007-5983——Cross-site scripting (XSS) vulnerability in index.php in Justin Hagstrom AutoIndex PHP Script before 2.2.3 allows remote...
CVE-2007-5984——classes/Url.php in Justin Hagstrom AutoIndex PHP Script before 2.2.4 allows remote attackers to cause a denial of servic...
CVE-2007-5985——Multiple cross-site scripting (XSS) vulnerabilities in BtiTracker before 1.4.5 allow remote attackers to inject arbitrar...
CVE-2007-5986——SQL injection vulnerability in include/functions.php in BtiTracker before 1.4.5 allows remote attackers to execute arbit...
CVE-2007-5987——details.php in BtiTracker before 1.4.5, when torrent viewing is disabled for guests, allows remote attackers to bypass p...
CVE-2007-5988——blocks/shoutbox_block.php in BtiTracker 1.4.4 does not verify user accounts, which allows remote attackers to post shout...
CVE-2007-4698——Apple Safari 3 before Beta Update 3.0.4 on Windows, and Mac OS X 10.4 through 10.4.10, allows remote attackers to conduc...
CVE-2007-3694——Cross-site scripting (XSS) vulnerability in login.php in Miro Project Broadcast Machine 0.9.9.9 allows remote attackers ...
CVE-2007-5956——Directory traversal vulnerability in IBM Informix Dynamic Server (IDS) before 10.00.xC7W1 allows local users to gain pri...
CVE-2007-5957——Unspecified vulnerability in IBM Informix Dynamic Server (IDS) 10.00.TC3TL and 11.10.TB4TL on Windows allows attackers t...
CVE-2007-5955——Cross-site scripting (XSS) vulnerability in updir.php in UPDIR.NET before 2.04 allows remote attackers to inject arbitra...
CVE-2007-3880——Format string vulnerability in srsexec in Sun Remote Services (SRS) Net Connect 3.2.3 and 3.2.4, as distributed in the S...
CVE-2007-5756——Multiple array index errors in the bpf_filter_init function in NPF.SYS in WinPcap before 4.0.2, when run in monitor mode...
CVE-2007-5947——The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardles...
CVE-2007-3898——The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when ...
CVE-2007-5755——Multiple stack-based buffer overflows in the AOL AmpX ActiveX control in AmpX.dll 2.6.1.11 in AOL Radio allow remote att...
CVE-2007-5954MEDIUM6.1Cross-site scripting (XSS) vulnerability in buscador.php in JLMForo System allows remote attackers to inject arbitrary w...
CVE-2007-5770——The (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries in Ruby 1.8.5 and 1.8.6 ...
CVE-2007-5942——Bandersnatch 0.4 allows remote attackers to obtain sensitive information via a malformed request for index.php with (1) ...
CVE-2007-5941——Stack-based buffer overflow in the SWCtl.SWCtl ActiveX control in Adobe Shockwave allows remote attackers to cause a den...
CVE-2007-5946——Unspecified vulnerability in the Aries PA-RISC emulator on HP-UX B.11.23 and B.11.31 on the IA-64 platform allows local ...
CVE-2007-5943——Simple Machines Forum (SMF) 1.1.4 allows remote attackers to read a message in private forums by using the advanced sear...
CVE-2007-5944——Cross-site scripting (XSS) vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server (WAS) 5.1...
CVE-2007-5945——USVN before 0.6.5 allows remote attackers to obtain a list of repository contents via unspecified vectors.
CVE-2007-5953——Unspecified vulnerability in Really Simple CalDAV Store (RSCDS) before 0.9.0 allows attackers to obtain sensitive inform...

Check if your code is affected by 2007 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now