2007 CVE Vulnerabilities

6,580 CVEs published in 2007.

CVE IDSeverityCVSSDescription
CVE-2007-5983——Cross-site scripting (XSS) vulnerability in index.php in Justin Hagstrom AutoIndex PHP Script before 2.2.3 allows remote...
CVE-2007-5984——classes/Url.php in Justin Hagstrom AutoIndex PHP Script before 2.2.4 allows remote attackers to cause a denial of servic...
CVE-2007-5985——Multiple cross-site scripting (XSS) vulnerabilities in BtiTracker before 1.4.5 allow remote attackers to inject arbitrar...
CVE-2007-5986——SQL injection vulnerability in include/functions.php in BtiTracker before 1.4.5 allows remote attackers to execute arbit...
CVE-2007-5987——details.php in BtiTracker before 1.4.5, when torrent viewing is disabled for guests, allows remote attackers to bypass p...
CVE-2007-5988——blocks/shoutbox_block.php in BtiTracker 1.4.4 does not verify user accounts, which allows remote attackers to post shout...
CVE-2007-4698——Apple Safari 3 before Beta Update 3.0.4 on Windows, and Mac OS X 10.4 through 10.4.10, allows remote attackers to conduc...
CVE-2007-3694——Cross-site scripting (XSS) vulnerability in login.php in Miro Project Broadcast Machine 0.9.9.9 allows remote attackers ...
CVE-2007-5956——Directory traversal vulnerability in IBM Informix Dynamic Server (IDS) before 10.00.xC7W1 allows local users to gain pri...
CVE-2007-5957——Unspecified vulnerability in IBM Informix Dynamic Server (IDS) 10.00.TC3TL and 11.10.TB4TL on Windows allows attackers t...
CVE-2007-5955——Cross-site scripting (XSS) vulnerability in updir.php in UPDIR.NET before 2.04 allows remote attackers to inject arbitra...
CVE-2007-5667——NWFILTER.SYS in Novell Client 4.91 SP 1 through SP 4 for Windows 2000, XP, and Server 2003 makes the \.\nwfilter device ...
CVE-2007-5756——Multiple array index errors in the bpf_filter_init function in NPF.SYS in WinPcap before 4.0.2, when run in monitor mode...
CVE-2007-5954MEDIUM6.1Cross-site scripting (XSS) vulnerability in buscador.php in JLMForo System allows remote attackers to inject arbitrary w...
CVE-2007-5755——Multiple stack-based buffer overflows in the AOL AmpX ActiveX control in AmpX.dll 2.6.1.11 in AOL Radio allow remote att...
CVE-2007-3880——Format string vulnerability in srsexec in Sun Remote Services (SRS) Net Connect 3.2.3 and 3.2.4, as distributed in the S...
CVE-2007-5947——The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardles...
CVE-2007-5770——The (1) Net::ftptls, (2) Net::telnets, (3) Net::imap, (4) Net::pop, and (5) Net::smtp libraries in Ruby 1.8.5 and 1.8.6 ...
CVE-2007-3898——The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when ...
CVE-2007-5942——Bandersnatch 0.4 allows remote attackers to obtain sensitive information via a malformed request for index.php with (1) ...
CVE-2007-5941——Stack-based buffer overflow in the SWCtl.SWCtl ActiveX control in Adobe Shockwave allows remote attackers to cause a den...
CVE-2007-5946——Unspecified vulnerability in the Aries PA-RISC emulator on HP-UX B.11.23 and B.11.31 on the IA-64 platform allows local ...
CVE-2007-5943——Simple Machines Forum (SMF) 1.1.4 allows remote attackers to read a message in private forums by using the advanced sear...
CVE-2007-5944——Cross-site scripting (XSS) vulnerability in Servlet Engine / Web Container in IBM WebSphere Application Server (WAS) 5.1...
CVE-2007-5945——USVN before 0.6.5 allows remote attackers to obtain a list of repository contents via unspecified vectors.

Check if your code is affected by 2007 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now