2007 CVE Vulnerabilities
6,580 CVEs published in 2007.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2007-5308 | — | — | 1.1% | Oct 9, 2007 | SQL injection vulnerability in galerie.php in PHP Homepage M (phpHPm) 1.0, when magic_quotes_gpc is disabled, allows rem... |
| CVE-2007-5285 | — | — | — | Oct 9, 2007 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-5280. Reason: This candidate is a duplicate of... |
| CVE-2007-5284 | — | — | — | Oct 9, 2007 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-5279. Reason: This candidate is a duplicate of... |
| CVE-2007-5286 | — | — | — | Oct 9, 2007 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-5281. Reason: This candidate is a duplicate of... |
| CVE-2007-5287 | — | — | — | Oct 9, 2007 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-5282. Reason: This candidate is a duplicate of... |
| CVE-2007-5282 | — | — | 1.2% | Oct 9, 2007 | Hitachi Cosminexus Agent 03-00 through 03-05, and Cosminexus Library Standard and Web Edition 04-00 and 04-01, might all... |
| CVE-2007-5283 | — | — | 1.2% | Oct 9, 2007 | The TSC Domain Manager in Hitachi TPBroker Object Transaction Monitor and Cosminexus TPBroker Object Transaction Monitor... |
| CVE-2007-5279 | — | — | 4.8% | Oct 9, 2007 | Heap-based buffer overflow in ConeXware PowerArchiver before 10.20.21 might allow remote attackers to execute arbitrary ... |
| CVE-2007-5281 | — | — | 2.2% | Oct 9, 2007 | The Java Secure Socket Extension (JSSE) in the Hitachi Cosminexus Developer's Kit for Java in various Hitachi Cosminexus... |
| CVE-2007-5280 | — | — | 1.1% | Oct 9, 2007 | Multiple cross-site scripting (XSS) vulnerabilities in messages.jsp in AppFuse before 2.0 Final allow remote attackers t... |
| CVE-2007-5288 | — | — | — | Oct 9, 2007 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-5283. Reason: This candidate is a duplicate of... |
| CVE-2007-5270 | — | — | 1.3% | Oct 8, 2007 | Unspecified vulnerability in the Boost module before 4.7.x-1.0, and 5.x before 5.x-1.0, for Drupal allows remote attacke... |
| CVE-2007-5272 | — | — | 1.0% | Oct 8, 2007 | SQL injection vulnerability in kategori.asp in Furkan Tastan Blog allows remote attackers to execute arbitrary SQL comma... |
| CVE-2007-5271 | — | — | 28.7% | Oct 8, 2007 | Multiple PHP remote file inclusion vulnerabilities in Trionic Cite CMS 1.2 rev9 and earlier allow remote attackers to ex... |
| CVE-2007-5276 | — | — | 1.4% | Oct 8, 2007 | Opera 9 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier for remote attackers t... |
| CVE-2007-5273 | — | — | 2.7% | Oct 8, 2007 | Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and... |
| CVE-2007-5274 | — | — | 2.7% | Oct 8, 2007 | Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and... |
| CVE-2007-5275 | — | — | 6.2% | Oct 8, 2007 | The Adobe Macromedia Flash 9 plug-in allows remote attackers to cause a victim machine to establish TCP sessions with ar... |
| CVE-2007-5277 | — | — | 9.7% | Oct 8, 2007 | Microsoft Internet Explorer 6 drops DNS pins based on failed connections to irrelevant TCP ports, which makes it easier ... |
| CVE-2007-5278 | — | — | 2.0% | Oct 8, 2007 | Zomplog 3.8.1 and earlier stores potentially sensitive information under the web root with insufficient access control, ... |
| CVE-2007-4924 | — | — | 10.7% | Oct 8, 2007 | The Open Phone Abstraction Library (opal), as used by (1) Ekiga before 2.0.10 and (2) OpenH323 before 2.2.4, allows remo... |
| CVE-2007-5268 | — | — | 3.1% | Oct 8, 2007 | pngrtran.c in libpng before 1.0.29 and 1.2.x before 1.2.21 use (1) logical instead of bitwise operations and (2) incorre... |
| CVE-2007-5262 | — | — | 3.5% | Oct 8, 2007 | Multiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbit... |
| CVE-2007-5264 | — | — | 3.1% | Oct 8, 2007 | Battlefront Dropteam 1.3.3 and earlier sends the client's online account name and password to the game server, which all... |
| CVE-2007-5263 | — | — | 4.2% | Oct 8, 2007 | Multiple buffer overflows in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via... |
Check if your code is affected by 2007 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now