# Vulnerabilities published in 2007


- [CVE-2007-2948](https://insights.sbomify.com/CVE-2007-2948/): Memory corruption in mplayer:mplayer (critical 9.3)
- [CVE-2007-2947](https://insights.sbomify.com/CVE-2007-2947/): Code injection in david branco:openbase (high 7.5)
- [CVE-2007-2946](https://insights.sbomify.com/CVE-2007-2946/): Memory corruption in lead technologies:leadtools raster dialog file object (critical 10.0)
- [CVE-2007-2945](https://insights.sbomify.com/CVE-2007-2945/): Information disclosure in rmforum:rmforum (medium 5.0)
- [CVE-2007-2944](https://insights.sbomify.com/CVE-2007-2944/): Information disclosure in wabcms:wabcms (medium 5.0)
- [CVE-2007-2943](https://insights.sbomify.com/CVE-2007-2943/): Code injection in webavis:webavis (medium 6.8)
- [CVE-2007-2942](https://insights.sbomify.com/CVE-2007-2942/): SQL injection in my little homepage:my little forum (high 7.5)
- [CVE-2007-2941](https://insights.sbomify.com/CVE-2007-2941/): Code injection in michael brandon:vbgsitemap (high 7.5)
- [CVE-2007-2940](https://insights.sbomify.com/CVE-2007-2940/): Code injection in flap:flap (medium 6.8)
- [CVE-2007-2939](https://insights.sbomify.com/CVE-2007-2939/): Code injection in mazens php chat:mazens php chat (medium 6.8)
- [CVE-2007-2938](https://insights.sbomify.com/CVE-2007-2938/): Memory corruption in honeywell:ademco atnbaseloader100 module (critical 10.0)
- [CVE-2007-2937](https://insights.sbomify.com/CVE-2007-2937/): Code injection in troforum:troforum (high 7.5)
- [CVE-2007-2936](https://insights.sbomify.com/CVE-2007-2936/): Code injection in frequency clock:frequency clock (high 7.5)
- [CVE-2007-2935](https://insights.sbomify.com/CVE-2007-2935/): Command injection in fundanemt:fundanemt (high 7.5)
- [CVE-2007-2934](https://insights.sbomify.com/CVE-2007-2934/): Path traversal in windy road:vistered little (high 7.8)
- [CVE-2007-2933](https://insights.sbomify.com/CVE-2007-2933/): SQL injection in phil-a-form:phil-a-form (high 7.5)
- [CVE-2007-2932](https://insights.sbomify.com/CVE-2007-2932/): Cross-site scripting in boastmachine:boastmachine (medium 4.3)
- [CVE-2007-2931](https://insights.sbomify.com/CVE-2007-2931/): Memory corruption in microsoft:msn messenger (critical 9.3)
- [CVE-2007-2930](https://insights.sbomify.com/CVE-2007-2930/): Weak cryptography in isc:bind (medium 4.3)
- [CVE-2007-2929](https://insights.sbomify.com/CVE-2007-2929/): Code injection in lenovo:access support (medium 5.8)
- [CVE-2007-2928](https://insights.sbomify.com/CVE-2007-2928/): Memory corruption in lenovo:access support (medium 5.8)
- [CVE-2007-2927](https://insights.sbomify.com/CVE-2007-2927/): Denial of service in microsoft:all windows (medium 5.0)
- [CVE-2007-2926](https://insights.sbomify.com/CVE-2007-2926/): Weak cryptography in isc:bind (medium 4.3)
- [CVE-2007-2925](https://insights.sbomify.com/CVE-2007-2925/): Misconfiguration in isc:bind (medium 5.8)
- [CVE-2007-2924](https://insights.sbomify.com/CVE-2007-2924/): Memory corruption in realnetworks:gamehouse (critical 10.0)
- [CVE-2007-2923](https://insights.sbomify.com/CVE-2007-2923/): Command injection in novell:extend director (critical 9.3)
- [CVE-2007-2921](https://insights.sbomify.com/CVE-2007-2921/): Memory corruption in corel:activecgm browser (critical 9.3)
- [CVE-2007-2920](https://insights.sbomify.com/CVE-2007-2920/): Memory corruption in zoomify:zoomify viewer activex control (critical 9.3)
- [CVE-2007-2919](https://insights.sbomify.com/CVE-2007-2919/): Memory corruption in e-book systems:flipviewer (critical 9.3)
- [CVE-2007-2918](https://insights.sbomify.com/CVE-2007-2918/): Memory corruption in logitech:videocall (medium 6.8)
- [CVE-2007-2917](https://insights.sbomify.com/CVE-2007-2917/): Memory corruption in authentium:command antivirus (critical 9.3)
- [CVE-2007-2916](https://insights.sbomify.com/CVE-2007-2916/): Cross-site scripting in gmtt:music distro (medium 4.3)
- [CVE-2007-2915](https://insights.sbomify.com/CVE-2007-2915/): Cross-site scripting in rm easymail:rm easymail plus (medium 4.3)
- [CVE-2007-2914](https://insights.sbomify.com/CVE-2007-2914/): Cross-site scripting in psychostats:psychostats (medium 4.3)
- [CVE-2007-2913](https://insights.sbomify.com/CVE-2007-2913/): Cross-site scripting in clonuswiki:clonuswiki (medium 4.3)
- [CVE-2007-2912](https://insights.sbomify.com/CVE-2007-2912/): Information disclosure in jelsoft:vbulletin (medium 5.0)
- [CVE-2007-2911](https://insights.sbomify.com/CVE-2007-2911/): SQL injection in jelsoft:vbulletin (high 8.5)
- [CVE-2007-2910](https://insights.sbomify.com/CVE-2007-2910/): Cross-site scripting in jelsoft:vbulletin (medium 4.3)
- [CVE-2007-2909](https://insights.sbomify.com/CVE-2007-2909/): Cross-site scripting in jelsoft:vbulletin (low 3.5)
- [CVE-2007-2908](https://insights.sbomify.com/CVE-2007-2908/): Cross-site scripting in jelsoft:vbulletin (medium 4.3)
- [CVE-2007-2907](https://insights.sbomify.com/CVE-2007-2907/): Cross-site scripting in ssl-explorer:ssl-explorer (medium 4.9)
- [CVE-2007-2906](https://insights.sbomify.com/CVE-2007-2906/): Denial of service in sun:java embedding plugin (medium 5.0)
- [CVE-2007-2905](https://insights.sbomify.com/CVE-2007-2905/): SQL injection in 2z project:2z project (high 7.5)
- [CVE-2007-2904](https://insights.sbomify.com/CVE-2007-2904/): Cross-site scripting in sun:java system messaging server (medium 4.3)
- [CVE-2007-2903](https://insights.sbomify.com/CVE-2007-2903/): Memory corruption in microsoft:office (medium 5.0)
- [CVE-2007-2902](https://insights.sbomify.com/CVE-2007-2902/): SQL injection in dokeos:dokeos (high 7.5)
- [CVE-2007-2901](https://insights.sbomify.com/CVE-2007-2901/): Cross-site scripting in dokeos:dokeos (medium 4.3)
- [CVE-2007-2900](https://insights.sbomify.com/CVE-2007-2900/): Code injection in scallywag.org:scallywag (medium 6.8)
- [CVE-2007-2899](https://insights.sbomify.com/CVE-2007-2899/): Code injection in navboard:navboard (high 7.5)
- [CVE-2007-2898](https://insights.sbomify.com/CVE-2007-2898/): SQL injection in 2z project:2z project (high 7.5)
- [CVE-2007-2897](https://insights.sbomify.com/CVE-2007-2897/): Denial of service in microsoft:internet information server (high 7.5)
- [CVE-2007-2896](https://insights.sbomify.com/CVE-2007-2896/): Race condition in symantec:enterprise security manager (medium 4.3)
- [CVE-2007-2895](https://insights.sbomify.com/CVE-2007-2895/): Memory corruption in lead technologies:leadtools raster dialog file object (high 7.5)
- [CVE-2007-2894](https://insights.sbomify.com/CVE-2007-2894/): Denial of service in bochs project:bochs (low 2.1)
- [CVE-2007-2893](https://insights.sbomify.com/CVE-2007-2893/): Memory corruption in bochs project:bochs (high 7.2)
- [CVE-2007-2892](https://insights.sbomify.com/CVE-2007-2892/): Cross-site scripting in asp-nuke:asp-nuke (medium 4.3)
- [CVE-2007-2891](https://insights.sbomify.com/CVE-2007-2891/): Code injection in firmworx:firmworx (high 7.5)
- [CVE-2007-2890](https://insights.sbomify.com/CVE-2007-2890/): SQL injection in cpcommerce:cpcommerce (high 7.5)
- [CVE-2007-2889](https://insights.sbomify.com/CVE-2007-2889/): SQL injection in dokeos:open source learning and knowledge management tool (high 7.5)
- [CVE-2007-2888](https://insights.sbomify.com/CVE-2007-2888/): Memory corruption in ezb systems:ultraiso (high 7.6)
- [CVE-2007-2887](https://insights.sbomify.com/CVE-2007-2887/): Cross-site scripting in forsnet:web icerik yonetim sistemi (medium 4.3)
- [CVE-2007-2886](https://insights.sbomify.com/CVE-2007-2886/): Denial of service in nortel:communications server (medium 5.0)
- [CVE-2007-2885](https://insights.sbomify.com/CVE-2007-2885/): Denial of service in microsoft:visual database tools database designer (medium 4.3)
- [CVE-2007-2884](https://insights.sbomify.com/CVE-2007-2884/): Memory corruption in microsoft:visual basic (critical 9.3)
- [CVE-2007-2883](https://insights.sbomify.com/CVE-2007-2883/): Information disclosure in credant:credant mobile guardian shield - windows (medium 4.6)
- [CVE-2007-2882](https://insights.sbomify.com/CVE-2007-2882/): Denial of service in sun:solaris (medium 5.0)
- [CVE-2007-2881](https://insights.sbomify.com/CVE-2007-2881/): Memory corruption in sun:java system web proxy server (critical 10.0)
- [CVE-2007-2880](https://insights.sbomify.com/CVE-2007-2880/): Cross-site scripting in digiappz:digirez (medium 4.3)
- [CVE-2007-2879](https://insights.sbomify.com/CVE-2007-2879/): Cross-site scripting in gnuturk:gnuturk portal system (medium 4.3)
- [CVE-2007-2878](https://insights.sbomify.com/CVE-2007-2878/): Memory corruption in linux:linux kernel (medium 4.9)
- [CVE-2007-2877](https://insights.sbomify.com/CVE-2007-2877/): Memory corruption in tcl tk:tcl tk (high 7.2)
- [CVE-2007-2876](https://insights.sbomify.com/CVE-2007-2876/): Null dereference in linux:linux kernel (medium 6.1)
- [CVE-2007-2875](https://insights.sbomify.com/CVE-2007-2875/): Integer overflow in canonical:ubuntu linux (low 2.1)
- [CVE-2007-2874](https://insights.sbomify.com/CVE-2007-2874/): Memory corruption in redhat:fedora core (medium 5.8)
- [CVE-2007-2873](https://insights.sbomify.com/CVE-2007-2873/): Race condition in spamassassin:spamassassin (low 1.9)
- [CVE-2007-2872](https://insights.sbomify.com/CVE-2007-2872/): Integer overflow in php:php (medium 6.8)
- [CVE-2007-2871](https://insights.sbomify.com/CVE-2007-2871/): Security feature bypass in mozilla:firefox (medium 4.3)
- [CVE-2007-2870](https://insights.sbomify.com/CVE-2007-2870/): Security feature bypass in mozilla:firefox (medium 4.3)
- [CVE-2007-2869](https://insights.sbomify.com/CVE-2007-2869/): Denial of service in mozilla:firefox (medium 4.3)
- [CVE-2007-2868](https://insights.sbomify.com/CVE-2007-2868/): Memory corruption in mozilla:firefox (critical 9.3)
- [CVE-2007-2867](https://insights.sbomify.com/CVE-2007-2867/): Memory corruption in mozilla:firefox (critical 9.3)
- [CVE-2007-2866](https://insights.sbomify.com/CVE-2007-2866/): SQL injection in phpecho cms:phpecho cms (high 7.5)
- [CVE-2007-2865](https://insights.sbomify.com/CVE-2007-2865/): Cross-site scripting in phppgadmin:phppgadmin (critical 9.3)
- [CVE-2007-2864](https://insights.sbomify.com/CVE-2007-2864/): Memory corruption in broadcom:anti-virus for the enterprise (critical 9.3)
- [CVE-2007-2863](https://insights.sbomify.com/CVE-2007-2863/): Memory corruption in broadcom:anti-virus for the enterprise (critical 10.0)
- [CVE-2007-2862](https://insights.sbomify.com/CVE-2007-2862/): SQL injection in devellion:cubecart (high 7.5)
- [CVE-2007-2861](https://insights.sbomify.com/CVE-2007-2861/): Code injection in saxon:saxon (high 7.5)
- [CVE-2007-2860](https://insights.sbomify.com/CVE-2007-2860/): Privilege escalation in boastmachine:boastmachine (medium 6.5)
- [CVE-2007-2859](https://insights.sbomify.com/CVE-2007-2859/): Code injection in simpgb:simpgb (high 7.5)
- [CVE-2007-2858](https://insights.sbomify.com/CVE-2007-2858/): SQL injection in phpbb:ip-tracking (medium 6.5)
- [CVE-2007-2857](https://insights.sbomify.com/CVE-2007-2857/): Code injection in zakkis technology corporation:php excel parser (high 7.5)
- [CVE-2007-2856](https://insights.sbomify.com/CVE-2007-2856/): Memory corruption in dart:powertcp zip compression (critical 9.3)
- [CVE-2007-2855](https://insights.sbomify.com/CVE-2007-2855/): Memory corruption in dart:dart ziplite compression (critical 9.3)
- [CVE-2007-2854](https://insights.sbomify.com/CVE-2007-2854/): SQL injection in bti-tracker:bti-tracker (high 7.5)
- [CVE-2007-2853](https://insights.sbomify.com/CVE-2007-2853/): Command injection in h\+h:vcdapilibapi activex control (critical 10.0)
- [CVE-2007-2852](https://insights.sbomify.com/CVE-2007-2852/): Memory corruption in eset software:nod32 antivirus (critical 9.3)
- [CVE-2007-2851](https://insights.sbomify.com/CVE-2007-2851/): Other in lead technologies:leadtools raster variant object library (high 7.5)
- [CVE-2007-2850](https://insights.sbomify.com/CVE-2007-2850/): Security feature bypass in citrix:access essentials (critical 10.0)
- [CVE-2007-2849](https://insights.sbomify.com/CVE-2007-2849/): Auth bypass in knowledgetree document management:knowledgetree document management (critical 10.0)
- [CVE-2007-2848](https://insights.sbomify.com/CVE-2007-2848/): Memory corruption in sky software:shcombobox activex control (critical 10.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2007/page/37/