# Vulnerabilities published in 2007 - [CVE-2007-6763](https://insights.sbomify.com/CVE-2007-6763/): Auth bypass in n/a (high 8.8) - [CVE-2007-6762](https://insights.sbomify.com/CVE-2007-6762/): Memory corruption in n/a (critical 9.8) - [CVE-2007-6761](https://insights.sbomify.com/CVE-2007-6761/): Information disclosure in n/a (high 7.8) - [CVE-2007-6760](https://insights.sbomify.com/CVE-2007-6760/): Auth bypass in n/a (critical 9.8) - [CVE-2007-6759](https://insights.sbomify.com/CVE-2007-6759/): Auth bypass in n/a (critical 9.8) - [CVE-2007-6758](https://insights.sbomify.com/CVE-2007-6758/): Server-side request forgery in n/a (high 7.5) - [CVE-2007-6757](https://insights.sbomify.com/CVE-2007-6757/): Hardcoded credentials in n/a (critical 10.0) - [CVE-2007-6756](https://insights.sbomify.com/CVE-2007-6756/): Hardcoded credentials in n/a (medium 4.9) - [CVE-2007-6755](https://insights.sbomify.com/CVE-2007-6755/): Weak cryptography in n/a (medium 5.8) - [CVE-2007-6754](https://insights.sbomify.com/CVE-2007-6754/): Integer overflow in n/a (medium 5.0) - [CVE-2007-6753](https://insights.sbomify.com/CVE-2007-6753/): Path traversal in n/a (medium 6.2) - [CVE-2007-6752](https://insights.sbomify.com/CVE-2007-6752/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2007-6751](https://insights.sbomify.com/CVE-2007-6751/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-6750](https://insights.sbomify.com/CVE-2007-6750/): Denial of service in n/a (medium 5.0) - [CVE-2007-6746](https://insights.sbomify.com/CVE-2007-6746/): Security feature bypass in n/a (medium 5.8) - [CVE-2007-6745](https://insights.sbomify.com/CVE-2007-6745/): Denial of service in clamav (critical 9.8) - [CVE-2007-6744](https://insights.sbomify.com/CVE-2007-6744/): Information disclosure in n/a (low 2.1) - [CVE-2007-6743](https://insights.sbomify.com/CVE-2007-6743/): Use after free in n/a (medium 4.0) - [CVE-2007-6742](https://insights.sbomify.com/CVE-2007-6742/): Denial of service in n/a (medium 6.8) - [CVE-2007-6741](https://insights.sbomify.com/CVE-2007-6741/): Improper privilege management in pyftpdlib (medium 6.5) - [CVE-2007-6740](https://insights.sbomify.com/CVE-2007-6740/): pyftpdlib vulnerable to allocation of resources without limits (medium 4.0) - [CVE-2007-6739](https://insights.sbomify.com/CVE-2007-6739/): Improper Input Validation in pyftpdlib (medium 5.0) - [CVE-2007-6738](https://insights.sbomify.com/CVE-2007-6738/): pyftpdlib Use of Insufficiently Random Values of port selection on PASV command (medium 5.0) - [CVE-2007-6737](https://insights.sbomify.com/CVE-2007-6737/): Improper Authentication in pyftpdlib (high 7.5) - [CVE-2007-6736](https://insights.sbomify.com/CVE-2007-6736/): Directory Traversal in pyftpdlib (medium 6.5) - [CVE-2007-6735](https://insights.sbomify.com/CVE-2007-6735/): Auth bypass in n/a (high 7.5) - [CVE-2007-6734](https://insights.sbomify.com/CVE-2007-6734/): Path traversal in n/a (medium 4.0) - [CVE-2007-6733](https://insights.sbomify.com/CVE-2007-6733/): Denial of service in n/a (medium 4.7) - [CVE-2007-6732](https://insights.sbomify.com/CVE-2007-6732/): Memory corruption in n/a (critical 10.0) - [CVE-2007-6731](https://insights.sbomify.com/CVE-2007-6731/): Memory corruption in n/a (critical 10.0) - [CVE-2007-6730](https://insights.sbomify.com/CVE-2007-6730/): Cross-site request forgery in n/a (critical 9.3) - [CVE-2007-6729](https://insights.sbomify.com/CVE-2007-6729/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-6728](https://insights.sbomify.com/CVE-2007-6728/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-6727](https://insights.sbomify.com/CVE-2007-6727/): SQL injection in n/a (high 7.5) - [CVE-2007-6726](https://insights.sbomify.com/CVE-2007-6726/): Apache Struts Dojo Plugin XSS Vulnerability (medium 4.3) - [CVE-2007-6725](https://insights.sbomify.com/CVE-2007-6725/): Memory corruption in n/a (high 7.5) - [CVE-2007-6724](https://insights.sbomify.com/CVE-2007-6724/): Misconfiguration in n/a (medium 5.0) - [CVE-2007-6723](https://insights.sbomify.com/CVE-2007-6723/): Misconfiguration in n/a (medium 4.3) - [CVE-2007-6722](https://insights.sbomify.com/CVE-2007-6722/): Misconfiguration in n/a (medium 5.0) - [CVE-2007-6721](https://insights.sbomify.com/CVE-2007-6721/): Legion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle Vulnerability (critical 10.0) - [CVE-2007-6720](https://insights.sbomify.com/CVE-2007-6720/): Denial of service in n/a (medium 4.3) - [CVE-2007-6719](https://insights.sbomify.com/CVE-2007-6719/): SQL injection in n/a (high 7.5) - [CVE-2007-6718](https://insights.sbomify.com/CVE-2007-6718/): Denial of service in n/a (medium 4.3) - [CVE-2007-6717](https://insights.sbomify.com/CVE-2007-6717/): Memory corruption in n/a (high 7.2) - [CVE-2007-6716](https://insights.sbomify.com/CVE-2007-6716/): Denial of service in n/a (medium 5.5) - [CVE-2007-6715](https://insights.sbomify.com/CVE-2007-6715/): Denial of service in n/a (medium 4.3) - [CVE-2007-6714](https://insights.sbomify.com/CVE-2007-6714/): Auth bypass in n/a (medium 6.8) - [CVE-2007-6713](https://insights.sbomify.com/CVE-2007-6713/): Other in n/a (critical 9.3) - [CVE-2007-6712](https://insights.sbomify.com/CVE-2007-6712/): Integer overflow in n/a (medium 4.9) - [CVE-2007-6711](https://insights.sbomify.com/CVE-2007-6711/): Privilege escalation in n/a (critical 10.0) - [CVE-2007-6709](https://insights.sbomify.com/CVE-2007-6709/): Hardcoded credentials in n/a (high 7.5) - [CVE-2007-6708](https://insights.sbomify.com/CVE-2007-6708/): Cross-site request forgery in n/a (medium 4.3) - [CVE-2007-6707](https://insights.sbomify.com/CVE-2007-6707/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-6706](https://insights.sbomify.com/CVE-2007-6706/): Code injection in n/a (critical 9.3) - [CVE-2007-6705](https://insights.sbomify.com/CVE-2007-6705/): Privilege escalation in n/a (low 3.3) - [CVE-2007-6704](https://insights.sbomify.com/CVE-2007-6704/): Cross-site scripting in n/a (low 2.6) - [CVE-2007-6703](https://insights.sbomify.com/CVE-2007-6703/): Denial of service in n/a (critical 10.0) - [CVE-2007-6702](https://insights.sbomify.com/CVE-2007-6702/): Information disclosure in n/a (medium 5.0) - [CVE-2007-6701](https://insights.sbomify.com/CVE-2007-6701/): Memory corruption in n/a (critical 10.0) - [CVE-2007-6700](https://insights.sbomify.com/CVE-2007-6700/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-6699](https://insights.sbomify.com/CVE-2007-6699/): Memory corruption in n/a (medium 4.3) - [CVE-2007-6698](https://insights.sbomify.com/CVE-2007-6698/): Use after free in n/a (medium 4.0) - [CVE-2007-6697](https://insights.sbomify.com/CVE-2007-6697/): Memory corruption in n/a (high 7.5) - [CVE-2007-6696](https://insights.sbomify.com/CVE-2007-6696/): Cross-site scripting in n/a (low 2.1) - [CVE-2007-6695](https://insights.sbomify.com/CVE-2007-6695/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-6694](https://insights.sbomify.com/CVE-2007-6694/): Null dereference in n/a (high 7.8) - [CVE-2007-6693](https://insights.sbomify.com/CVE-2007-6693/): Other in n/a (critical 10.0) - [CVE-2007-6692](https://insights.sbomify.com/CVE-2007-6692/): Open redirect in n/a (medium 6.4) - [CVE-2007-6691](https://insights.sbomify.com/CVE-2007-6691/): Multiple unspecified vulnerabilities in Menalto Gallery before 2.2.4 have unknown impact, related to (1) "hotlink protection" in the URL rew (critical 10.0) - [CVE-2007-6690](https://insights.sbomify.com/CVE-2007-6690/): Missing authorization in n/a (critical 10.0) - [CVE-2007-6689](https://insights.sbomify.com/CVE-2007-6689/): File upload in n/a (high 7.5) - [CVE-2007-6688](https://insights.sbomify.com/CVE-2007-6688/): Unspecified vulnerability in the Installation application in Menalto Gallery before 2.2.4 has unknown impact and attack vectors related to " (critical 10.0) - [CVE-2007-6687](https://insights.sbomify.com/CVE-2007-6687/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-6686](https://insights.sbomify.com/CVE-2007-6686/): Path traversal in n/a (critical 10.0) - [CVE-2007-6685](https://insights.sbomify.com/CVE-2007-6685/): Missing authorization in n/a (critical 10.0) - [CVE-2007-6684](https://insights.sbomify.com/CVE-2007-6684/): Null dereference in n/a (medium 5.0) - [CVE-2007-6683](https://insights.sbomify.com/CVE-2007-6683/): Path traversal in n/a (medium 5.0) - [CVE-2007-6682](https://insights.sbomify.com/CVE-2007-6682/): Code injection in n/a (high 7.5) - [CVE-2007-6681](https://insights.sbomify.com/CVE-2007-6681/): Memory corruption in n/a (high 7.5) - [CVE-2007-6680](https://insights.sbomify.com/CVE-2007-6680/): Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the trustchk_block_write function, which might allow local (low 2.1) - [CVE-2007-6679](https://insights.sbomify.com/CVE-2007-6679/): Missing authorization in n/a (critical 10.0) - [CVE-2007-6677](https://insights.sbomify.com/CVE-2007-6677/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-6676](https://insights.sbomify.com/CVE-2007-6676/): File upload in n/a (medium 5.0) - [CVE-2007-6675](https://insights.sbomify.com/CVE-2007-6675/): Missing authorization in n/a (medium 5.0) - [CVE-2007-6674](https://insights.sbomify.com/CVE-2007-6674/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-6673](https://insights.sbomify.com/CVE-2007-6673/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-6672](https://insights.sbomify.com/CVE-2007-6672/): Mortbay Jetty Double Slash URI Information Disclosure Vulnerability (medium 5.0) - [CVE-2007-6671](https://insights.sbomify.com/CVE-2007-6671/): SQL injection in n/a (high 7.5) - [CVE-2007-6670](https://insights.sbomify.com/CVE-2007-6670/): SQL injection in n/a (high 7.5) - [CVE-2007-6669](https://insights.sbomify.com/CVE-2007-6669/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-6668](https://insights.sbomify.com/CVE-2007-6668/): File upload in n/a (high 7.5) - [CVE-2007-6667](https://insights.sbomify.com/CVE-2007-6667/): SQL injection in n/a (medium 6.8) - [CVE-2007-6666](https://insights.sbomify.com/CVE-2007-6666/): SQL injection in n/a (high 7.5) - [CVE-2007-6665](https://insights.sbomify.com/CVE-2007-6665/): SQL injection in n/a (high 7.5) - [CVE-2007-6664](https://insights.sbomify.com/CVE-2007-6664/): SQL injection in n/a (high 7.5) - [CVE-2007-6663](https://insights.sbomify.com/CVE-2007-6663/): SQL injection in n/a (high 7.5) - [CVE-2007-6662](https://insights.sbomify.com/CVE-2007-6662/): Path traversal in n/a (medium 5.8) - [CVE-2007-6661](https://insights.sbomify.com/CVE-2007-6661/): Business logic in n/a (medium 6.4) - [CVE-2007-6660](https://insights.sbomify.com/CVE-2007-6660/): Information disclosure in n/a (medium 5.0) - [CVE-2007-6659](https://insights.sbomify.com/CVE-2007-6659/): Cross-site scripting in n/a (medium 4.3) --- From sbomify Insights: https://insights.sbomify.com/years/2007/