2007 CVE Vulnerabilities
6,580 CVEs published in 2007.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2007-4383 | — | — | 1.3% | Aug 17, 2007 | PHP remote file inclusion vulnerability in tracking.php in Trackeur 1 allows remote attackers to execute arbitrary PHP c... |
| CVE-2007-4382 | — | — | 3.1% | Aug 17, 2007 | CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service (device crash) ... |
| CVE-2007-4384 | — | — | 2.1% | Aug 17, 2007 | Multiple PHP remote file inclusion vulnerabilities in depouilg.php3 in Stephane Pineau VOTE 1c allow remote attackers to... |
| CVE-2007-4385 | — | — | 3.1% | Aug 17, 2007 | OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using multipart encoded requests... |
| CVE-2007-4381 | — | — | 5.4% | Aug 17, 2007 | Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JR... |
| CVE-2007-4380 | — | — | 0.4% | Aug 16, 2007 | Aclient in Symantec Altiris Deployment Solution 6 before 6.8 SP2 (6.8.378) allows local users to gain local System privi... |
| CVE-2007-4379 | — | — | 1.6% | Aug 16, 2007 | Babo Violent 2 2.08.00 and earlier allows remote attackers to cause a denial of service (application crash) via (1) a va... |
| CVE-2007-4372 | — | — | 1.2% | Aug 16, 2007 | Unspecified vulnerability in NetWin SurgeMail 38k on Windows Server 2003 has unknown impact and remote attack vectors. ... |
| CVE-2007-4373 | — | — | 1.3% | Aug 16, 2007 | The server in Babo Violent 2 2.08.00 and earlier does not properly implement password protection, which might allow remo... |
| CVE-2007-4374 | — | — | 1.0% | Aug 16, 2007 | Babo Violent 2 2.08.00 does not validate the sender field of a chat message composed by a client, which allows remote au... |
| CVE-2007-4375 | — | — | 3.4% | Aug 16, 2007 | The administrative interface (aka DkService.exe) in Diskeeper 9 Professional, 2007 Pro Premier, and probably other versi... |
| CVE-2007-4376 | — | — | 1.2% | Aug 16, 2007 | Unrestricted file upload vulnerability in banner-upload.php in Szymon Kosok Best Top List allows remote attackers to upl... |
| CVE-2007-4377 | — | — | 5.0% | Aug 16, 2007 | Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary ... |
| CVE-2007-4378 | — | — | 3.1% | Aug 16, 2007 | Multiple format string vulnerabilities in Babo Violent 2 2.08.00 and earlier allow remote attackers to execute arbitrary... |
| CVE-2007-4091 | — | — | 3.3% | Aug 16, 2007 | Multiple off-by-one errors in the sender.c in rsync 2.6.9 might allow remote attackers to execute arbitrary code via dir... |
| CVE-2007-4371 | — | — | 1.2% | Aug 15, 2007 | Unrestricted file upload vulnerability in admin/pages/blog-add.php in Neuron Blog 1.1 allows remote attackers to upload ... |
| CVE-2007-4367 | — | — | 8.2% | Aug 15, 2007 | Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual func... |
| CVE-2007-4368 | — | — | 3.3% | Aug 15, 2007 | SQL injection vulnerability in /main in IBM Rational ClearQuest (CQ) Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote attack... |
| CVE-2007-4369 | — | — | 3.5% | Aug 15, 2007 | Directory traversal vulnerability in go/_files in SOTEeSKLEP before 4.0 allows remote attackers to read arbitrary files ... |
| CVE-2007-4370 | — | — | 59.2% | Aug 15, 2007 | Multiple buffer overflows in the (1) client and (2) server in Racer 0.5.3 beta 5 allow remote attackers to execute arbit... |
| CVE-2007-4278 | — | — | 4.7% | Aug 15, 2007 | Stack-based buffer overflow in the giomgr process in ESRI ArcSDE service 9.2, as used with ArcGIS, allows remote attacke... |
| CVE-2007-4358 | — | — | 2.8% | Aug 15, 2007 | Zoidcom 0.6.7 and earlier allows remote attackers to cause a denial of service (application crash) via a JOIN packet (ak... |
| CVE-2007-4365 | — | — | 1.1% | Aug 15, 2007 | Cross-site scripting (XSS) vulnerability in eXV2 CMS 2.0.5 and earlier allows remote attackers to inject arbitrary web s... |
| CVE-2007-4366 | — | — | 3.4% | Aug 15, 2007 | WengoPhone 2.1 allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a Co... |
| CVE-2007-4359 | — | — | 1.1% | Aug 15, 2007 | Multiple SQL injection vulnerabilities in SkilMatch Staffing Systems JobLister3 allow remote attackers to execute arbitr... |
Check if your code is affected by 2007 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now