# Vulnerabilities published in 2007 - [CVE-2007-4394](https://insights.sbomify.com/CVE-2007-4394/): Other in n/a (low 2.1) - [CVE-2007-4393](https://insights.sbomify.com/CVE-2007-4393/): Privilege escalation in n/a (medium 4.6) - [CVE-2007-4392](https://insights.sbomify.com/CVE-2007-4392/): Denial of service in n/a (medium 4.3) - [CVE-2007-4391](https://insights.sbomify.com/CVE-2007-4391/): Memory corruption in n/a (critical 9.3) - [CVE-2007-4390](https://insights.sbomify.com/CVE-2007-4390/): Command injection in n/a (high 7.2) - [CVE-2007-4389](https://insights.sbomify.com/CVE-2007-4389/): Cross-site request forgery in n/a (high 7.8) - [CVE-2007-4388](https://insights.sbomify.com/CVE-2007-4388/): Hardcoded credentials in n/a (critical 10.0) - [CVE-2007-4387](https://insights.sbomify.com/CVE-2007-4387/): Cross-site request forgery in n/a (medium 4.3) - [CVE-2007-4386](https://insights.sbomify.com/CVE-2007-4386/): SQL injection in n/a (medium 6.0) - [CVE-2007-4385](https://insights.sbomify.com/CVE-2007-4385/): Security feature bypass in n/a (medium 6.8) - [CVE-2007-4384](https://insights.sbomify.com/CVE-2007-4384/): Code injection in n/a (medium 6.8) - [CVE-2007-4383](https://insights.sbomify.com/CVE-2007-4383/): Code injection in n/a (medium 6.8) - [CVE-2007-4382](https://insights.sbomify.com/CVE-2007-4382/): Denial of service in n/a (medium 5.0) - [CVE-2007-4381](https://insights.sbomify.com/CVE-2007-4381/): Privilege escalation in n/a (critical 9.3) - [CVE-2007-4380](https://insights.sbomify.com/CVE-2007-4380/): Privilege escalation in n/a (high 7.2) - [CVE-2007-4379](https://insights.sbomify.com/CVE-2007-4379/): Denial of service in n/a (medium 4.3) - [CVE-2007-4378](https://insights.sbomify.com/CVE-2007-4378/): Other in n/a (medium 6.8) - [CVE-2007-4377](https://insights.sbomify.com/CVE-2007-4377/): Memory corruption in n/a (medium 6.0) - [CVE-2007-4376](https://insights.sbomify.com/CVE-2007-4376/): File upload in n/a (medium 6.8) - [CVE-2007-4375](https://insights.sbomify.com/CVE-2007-4375/): Information disclosure in n/a (medium 5.8) - [CVE-2007-4374](https://insights.sbomify.com/CVE-2007-4374/): Missing authorization in n/a (medium 4.0) - [CVE-2007-4373](https://insights.sbomify.com/CVE-2007-4373/): Auth bypass in n/a (medium 6.8) - [CVE-2007-4372](https://insights.sbomify.com/CVE-2007-4372/): Other in n/a (critical 10.0) - [CVE-2007-4371](https://insights.sbomify.com/CVE-2007-4371/): File upload in n/a (medium 6.8) - [CVE-2007-4370](https://insights.sbomify.com/CVE-2007-4370/): Memory corruption in n/a (high 7.5) - [CVE-2007-4369](https://insights.sbomify.com/CVE-2007-4369/): Path traversal in n/a (medium 5.0) - [CVE-2007-4368](https://insights.sbomify.com/CVE-2007-4368/): SQL injection in n/a (high 7.5) - [CVE-2007-4367](https://insights.sbomify.com/CVE-2007-4367/): Memory corruption in n/a (critical 9.3) - [CVE-2007-4366](https://insights.sbomify.com/CVE-2007-4366/): Denial of service in n/a (medium 5.0) - [CVE-2007-4365](https://insights.sbomify.com/CVE-2007-4365/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-4364](https://insights.sbomify.com/CVE-2007-4364/): Auth bypass in n/a (high 8.5) - [CVE-2007-4363](https://insights.sbomify.com/CVE-2007-4363/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-4362](https://insights.sbomify.com/CVE-2007-4362/): SQL injection in n/a (medium 6.8) - [CVE-2007-4361](https://insights.sbomify.com/CVE-2007-4361/): Hardcoded credentials in n/a (critical 10.0) - [CVE-2007-4360](https://insights.sbomify.com/CVE-2007-4360/): Denial of service in n/a (medium 4.3) - [CVE-2007-4359](https://insights.sbomify.com/CVE-2007-4359/): SQL injection in n/a (medium 6.8) - [CVE-2007-4358](https://insights.sbomify.com/CVE-2007-4358/): Denial of service in n/a (medium 4.3) - [CVE-2007-4357](https://insights.sbomify.com/CVE-2007-4357/): Other in n/a (medium 5.0) - [CVE-2007-4356](https://insights.sbomify.com/CVE-2007-4356/): Information disclosure in n/a (critical 9.3) - [CVE-2007-4355](https://insights.sbomify.com/CVE-2007-4355/): Memory corruption in n/a (high 7.2) - [CVE-2007-4354](https://insights.sbomify.com/CVE-2007-4354/): Memory corruption in n/a (high 7.2) - [CVE-2007-4353](https://insights.sbomify.com/CVE-2007-4353/): Memory corruption in n/a (medium 6.9) - [CVE-2007-4352](https://insights.sbomify.com/CVE-2007-4352/): Memory corruption in n/a (high 7.6) - [CVE-2007-4351](https://insights.sbomify.com/CVE-2007-4351/): Memory corruption in n/a (critical 10.0) - [CVE-2007-4350](https://insights.sbomify.com/CVE-2007-4350/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-4349](https://insights.sbomify.com/CVE-2007-4349/): Memory corruption in n/a (medium 4.3) - [CVE-2007-4348](https://insights.sbomify.com/CVE-2007-4348/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-4347](https://insights.sbomify.com/CVE-2007-4347/): Integer overflow in n/a (high 7.8) - [CVE-2007-4346](https://insights.sbomify.com/CVE-2007-4346/): Null dereference in n/a (medium 5.0) - [CVE-2007-4345](https://insights.sbomify.com/CVE-2007-4345/): Memory corruption in n/a (high 7.5) - [CVE-2007-4344](https://insights.sbomify.com/CVE-2007-4344/): Memory corruption in n/a (critical 9.3) - [CVE-2007-4343](https://insights.sbomify.com/CVE-2007-4343/): Memory corruption in n/a (medium 5.1) - [CVE-2007-4342](https://insights.sbomify.com/CVE-2007-4342/): Code injection in n/a (high 7.5) - [CVE-2007-4341](https://insights.sbomify.com/CVE-2007-4341/): Code injection in n/a (high 7.5) - [CVE-2007-4340](https://insights.sbomify.com/CVE-2007-4340/): File upload in n/a (high 7.5) - [CVE-2007-4339](https://insights.sbomify.com/CVE-2007-4339/): Code injection in n/a (high 7.5) - [CVE-2007-4338](https://insights.sbomify.com/CVE-2007-4338/): Auth bypass in n/a (critical 10.0) - [CVE-2007-4337](https://insights.sbomify.com/CVE-2007-4337/): Multiple buffer overflows in the httplib_parse_sc_header function in lib/http.c in Streamripper before 1.62.2 allow remote attackers to exec (medium 5.8) - [CVE-2007-4336](https://insights.sbomify.com/CVE-2007-4336/): Memory corruption in n/a (medium 4.3) - [CVE-2007-4335](https://insights.sbomify.com/CVE-2007-4335/): Denial of service in n/a (medium 5.0) - [CVE-2007-4334](https://insights.sbomify.com/CVE-2007-4334/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-4333](https://insights.sbomify.com/CVE-2007-4333/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-4332](https://insights.sbomify.com/CVE-2007-4332/): SQL injection in n/a (high 7.5) - [CVE-2007-4331](https://insights.sbomify.com/CVE-2007-4331/): Code injection in n/a (medium 4.3) - [CVE-2007-4330](https://insights.sbomify.com/CVE-2007-4330/): Code injection in n/a (medium 6.8) - [CVE-2007-4329](https://insights.sbomify.com/CVE-2007-4329/): Multiple PHP remote file inclusion vulnerabilities in Web News 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the con (medium 6.8) - [CVE-2007-4328](https://insights.sbomify.com/CVE-2007-4328/): Code injection in n/a (medium 6.8) - [CVE-2007-4327](https://insights.sbomify.com/CVE-2007-4327/): Code injection in n/a (medium 6.8) - [CVE-2007-4326](https://insights.sbomify.com/CVE-2007-4326/): Code injection in n/a (medium 6.8) - [CVE-2007-4325](https://insights.sbomify.com/CVE-2007-4325/): Code injection in n/a (medium 6.8) - [CVE-2007-4324](https://insights.sbomify.com/CVE-2007-4324/): Information disclosure in n/a (medium 5.0) - [CVE-2007-4323](https://insights.sbomify.com/CVE-2007-4323/): Denial of service in n/a (medium 6.8) - [CVE-2007-4322](https://insights.sbomify.com/CVE-2007-4322/): Denial of service in n/a (medium 6.8) - [CVE-2007-4321](https://insights.sbomify.com/CVE-2007-4321/): Denial of service in n/a (medium 6.8) - [CVE-2007-4320](https://insights.sbomify.com/CVE-2007-4320/): Code injection in n/a (high 7.5) - [CVE-2007-4319](https://insights.sbomify.com/CVE-2007-4319/): Denial of service in n/a (medium 4.0) - [CVE-2007-4318](https://insights.sbomify.com/CVE-2007-4318/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-4317](https://insights.sbomify.com/CVE-2007-4317/): Cross-site request forgery in n/a (medium 4.3) - [CVE-2007-4316](https://insights.sbomify.com/CVE-2007-4316/): Hardcoded credentials in n/a (medium 4.3) - [CVE-2007-4315](https://insights.sbomify.com/CVE-2007-4315/): Privilege escalation in n/a (medium 6.9) - [CVE-2007-4314](https://insights.sbomify.com/CVE-2007-4314/): Server-side request forgery in n/a (medium 6.8) - [CVE-2007-4313](https://insights.sbomify.com/CVE-2007-4313/): Code injection in n/a (medium 6.8) - [CVE-2007-4312](https://insights.sbomify.com/CVE-2007-4312/): SQL injection in n/a (high 7.5) - [CVE-2007-4311](https://insights.sbomify.com/CVE-2007-4311/): Weak cryptography in n/a (medium 6.8) - [CVE-2007-4310](https://insights.sbomify.com/CVE-2007-4310/): Information disclosure in n/a (medium 4.3) - [CVE-2007-4309](https://insights.sbomify.com/CVE-2007-4309/): Information disclosure in n/a (low 3.5) - [CVE-2007-4308](https://insights.sbomify.com/CVE-2007-4308/): Missing authorization in n/a (low 1.9) - [CVE-2007-4307](https://insights.sbomify.com/CVE-2007-4307/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-4306](https://insights.sbomify.com/CVE-2007-4306/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-4305](https://insights.sbomify.com/CVE-2007-4305/): Race condition in n/a (medium 6.2) - [CVE-2007-4304](https://insights.sbomify.com/CVE-2007-4304/): Race condition in n/a (medium 6.2) - [CVE-2007-4303](https://insights.sbomify.com/CVE-2007-4303/): Race condition in n/a (medium 6.2) - [CVE-2007-4302](https://insights.sbomify.com/CVE-2007-4302/): Race condition in n/a (medium 6.2) - [CVE-2007-4301](https://insights.sbomify.com/CVE-2007-4301/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-4297](https://insights.sbomify.com/CVE-2007-4297/): Cross-site scripting in n/a (medium 4.3) - [CVE-2007-4296](https://insights.sbomify.com/CVE-2007-4296/): Other in n/a (high 7.5) - [CVE-2007-4295](https://insights.sbomify.com/CVE-2007-4295/): Code injection in n/a (medium 6.8) - [CVE-2007-4294](https://insights.sbomify.com/CVE-2007-4294/): Code injection in n/a (medium 6.8) - [CVE-2007-4293](https://insights.sbomify.com/CVE-2007-4293/): Denial of service in n/a (high 7.1) - [CVE-2007-4292](https://insights.sbomify.com/CVE-2007-4292/): Memory corruption in n/a (critical 9.3) --- From sbomify Insights: https://insights.sbomify.com/years/2007/page/23/