# Vulnerabilities published in 2007


- [CVE-2007-2847](https://insights.sbomify.com/CVE-2007-2847/): Cross-site scripting in hlstats:hlstats (critical 9.3)
- [CVE-2007-2846](https://insights.sbomify.com/CVE-2007-2846/): Memory corruption in avas\!t:avast\! antivirus (critical 9.3)
- [CVE-2007-2845](https://insights.sbomify.com/CVE-2007-2845/): Memory corruption in avast:avast antivirus (critical 9.3)
- [CVE-2007-2844](https://insights.sbomify.com/CVE-2007-2844/): Race condition in php:php (critical 9.3)
- [CVE-2007-2843](https://insights.sbomify.com/CVE-2007-2843/): Security feature bypass in apple:safari (critical 10.0)
- [CVE-2007-2839](https://insights.sbomify.com/CVE-2007-2839/): Race condition in debian:gfax (high 7.2)
- [CVE-2007-2838](https://insights.sbomify.com/CVE-2007-2838/): Race condition in gsambad:gsambad (high 7.2)
- [CVE-2007-2837](https://insights.sbomify.com/CVE-2007-2837/): Race condition in fireflier:fireflier (low 3.6)
- [CVE-2007-2836](https://insights.sbomify.com/CVE-2007-2836/): Path traversal in hiki:hiki (medium 6.4)
- [CVE-2007-2835](https://insights.sbomify.com/CVE-2007-2835/): Memory corruption in unicon-imc2:unicon-imc2 (medium 6.8)
- [CVE-2007-2834](https://insights.sbomify.com/CVE-2007-2834/): Integer overflow in apache:openoffice (critical 9.3)
- [CVE-2007-2833](https://insights.sbomify.com/CVE-2007-2833/): Denial of service in debian:debian linux (high 7.8)
- [CVE-2007-2832](https://insights.sbomify.com/CVE-2007-2832/): Cross-site scripting in cisco:call manager (medium 4.3)
- [CVE-2007-2831](https://insights.sbomify.com/CVE-2007-2831/): Memory corruption in madwifi:madwifi (critical 10.0)
- [CVE-2007-2830](https://insights.sbomify.com/CVE-2007-2830/): Denial of service in madwifi:madwifi (medium 5.0)
- [CVE-2007-2829](https://insights.sbomify.com/CVE-2007-2829/): Null dereference in madwifi:madwifi (medium 5.0)
- [CVE-2007-2828](https://insights.sbomify.com/CVE-2007-2828/): Cross-site request forgery in johntp:adsense-deluxe (medium 6.0)
- [CVE-2007-2827](https://insights.sbomify.com/CVE-2007-2827/): Memory corruption in lead technologies:leadtools isis activex control (critical 9.3)
- [CVE-2007-2826](https://insights.sbomify.com/CVE-2007-2826/): Code injection in madirish webmail:madirish webmail (high 7.5)
- [CVE-2007-2825](https://insights.sbomify.com/CVE-2007-2825/): Cross-site scripting in atmail:atmail webmail (medium 4.3)
- [CVE-2007-2824](https://insights.sbomify.com/CVE-2007-2824/): SQL injection in alstrasoft:e-friends (critical 10.0)
- [CVE-2007-2823](https://insights.sbomify.com/CVE-2007-2823/): Memory corruption in ht editor:ht editor (medium 6.8)
- [CVE-2007-2822](https://insights.sbomify.com/CVE-2007-2822/): Auth bypass in wavelink media:tutorialcms (critical 9.3)
- [CVE-2007-2821](https://insights.sbomify.com/CVE-2007-2821/): SQL injection in wordpress:wordpress (high 7.5)
- [CVE-2007-2820](https://insights.sbomify.com/CVE-2007-2820/): Memory corruption in ksign:ksignswat (high 7.5)
- [CVE-2007-2819](https://insights.sbomify.com/CVE-2007-2819/): Cross-site scripting in track\+:track\+ (medium 4.3)
- [CVE-2007-2818](https://insights.sbomify.com/CVE-2007-2818/): Cross-site scripting in cactusoft:parodia (medium 4.3)
- [CVE-2007-2817](https://insights.sbomify.com/CVE-2007-2817/): SQL injection in ol bookmarks:ol bookmarks (high 7.5)
- [CVE-2007-2816](https://insights.sbomify.com/CVE-2007-2816/): Code injection in ol bookmarks:ol bookmarks (high 7.5)
- [CVE-2007-2815](https://insights.sbomify.com/CVE-2007-2815/): Auth bypass in microsoft:internet information services (critical 10.0)
- [CVE-2007-2814](https://insights.sbomify.com/CVE-2007-2814/): Memory corruption in pegasus:imagn activex control (high 7.5)
- [CVE-2007-2813](https://insights.sbomify.com/CVE-2007-2813/): Denial of service in cisco:ios transmission control protocol (high 7.8)
- [CVE-2007-2812](https://insights.sbomify.com/CVE-2007-2812/): Cross-site scripting in hlstats:hlstats (medium 4.3)
- [CVE-2007-2811](https://insights.sbomify.com/CVE-2007-2811/): Cross-site scripting in osk:advance-flow (medium 4.3)
- [CVE-2007-2810](https://insights.sbomify.com/CVE-2007-2810/): SQL injection in gazi download portal:gazi download portal (critical 10.0)
- [CVE-2007-2809](https://insights.sbomify.com/CVE-2007-2809/): Memory corruption in opera:opera browser (critical 9.3)
- [CVE-2007-2808](https://insights.sbomify.com/CVE-2007-2808/): Cross-site scripting in gnu:gnats (medium 4.3)
- [CVE-2007-2807](https://insights.sbomify.com/CVE-2007-2807/): Memory corruption in eggheads:eggdrop irc bot (medium 6.8)
- [CVE-2007-2806](https://insights.sbomify.com/CVE-2007-2806/): Cross-site scripting in galix:galix (medium 5.8)
- [CVE-2007-2805](https://insights.sbomify.com/CVE-2007-2805/): Cross-site scripting in clientexec:clientexec (medium 4.3)
- [CVE-2007-2804](https://insights.sbomify.com/CVE-2007-2804/): Cross-site scripting in candypress:candypress store (medium 4.3)
- [CVE-2007-2803](https://insights.sbomify.com/CVE-2007-2803/): SQL injection in vizayn urun:tanitim sitesi (high 7.5)
- [CVE-2007-2802](https://insights.sbomify.com/CVE-2007-2802/): Cross-site scripting in rm:rm easymail plus (medium 4.3)
- [CVE-2007-2801](https://insights.sbomify.com/CVE-2007-2801/): Cross-site scripting in eticket:eticket (medium 4.3)
- [CVE-2007-2800](https://insights.sbomify.com/CVE-2007-2800/): Information disclosure in eticket:eticket (medium 5.0)
- [CVE-2007-2799](https://insights.sbomify.com/CVE-2007-2799/): Integer overflow in file:file (medium 5.1)
- [CVE-2007-2798](https://insights.sbomify.com/CVE-2007-2798/): Memory corruption in canonical:ubuntu linux (critical 9.0)
- [CVE-2007-2797](https://insights.sbomify.com/CVE-2007-2797/): Misconfiguration in xterm:xterm (low 2.1)
- [CVE-2007-2796](https://insights.sbomify.com/CVE-2007-2796/): Denial of service in arris:cadant c3 cmts (high 7.8)
- [CVE-2007-2795](https://insights.sbomify.com/CVE-2007-2795/): Memory corruption in ipswitch:imail (critical 9.0)
- [CVE-2007-2793](https://insights.sbomify.com/CVE-2007-2793/): Code injection in geeklog:geeklog (high 7.5)
- [CVE-2007-2792](https://insights.sbomify.com/CVE-2007-2792/): SQL injection in com yanc:com yanc (high 7.5)
- [CVE-2007-2791](https://insights.sbomify.com/CVE-2007-2791/): Information disclosure in hp:tru64 (critical 10.0)
- [CVE-2007-2790](https://insights.sbomify.com/CVE-2007-2790/): Cross-site scripting in vp-asp:vp-asp shopping cart (medium 6.8)
- [CVE-2007-2789](https://insights.sbomify.com/CVE-2007-2789/): Denial of service in sun:jdk (medium 4.3)
- [CVE-2007-2788](https://insights.sbomify.com/CVE-2007-2788/): Integer overflow in sun:jdk (medium 6.8)
- [CVE-2007-2787](https://insights.sbomify.com/CVE-2007-2787/): Memory corruption in lead technologies:leadtools raster thumbnail object library (high 7.5)
- [CVE-2007-2786](https://insights.sbomify.com/CVE-2007-2786/): Denial of service in ircd-ratbox:ircd-ratbox (medium 5.0)
- [CVE-2007-2785](https://insights.sbomify.com/CVE-2007-2785/): Missing authorization in esyndicat:esyndicat pro (medium 6.8)
- [CVE-2007-2784](https://insights.sbomify.com/CVE-2007-2784/): Denial of service in globus:globus toolkit (high 7.8)
- [CVE-2007-2783](https://insights.sbomify.com/CVE-2007-2783/): Auth bypass in rational software:hidden administrator (critical 10.0)
- [CVE-2007-2782](https://insights.sbomify.com/CVE-2007-2782/): Weak cryptography in packeteer:packetshaper (high 7.5)
- [CVE-2007-2781](https://insights.sbomify.com/CVE-2007-2781/): Cross-site scripting in wikyblog:wikyblog (medium 6.8)
- [CVE-2007-2780](https://insights.sbomify.com/CVE-2007-2780/): Information disclosure in psychostats:psychostats (medium 5.0)
- [CVE-2007-2779](https://insights.sbomify.com/CVE-2007-2779/): Code injection in libstats:libstats (high 7.5)
- [CVE-2007-2778](https://insights.sbomify.com/CVE-2007-2778/): Path traversal in molyx:molyx board (high 7.8)
- [CVE-2007-2777](https://insights.sbomify.com/CVE-2007-2777/): File upload in alstrasoft:template seller (high 7.5)
- [CVE-2007-2776](https://insights.sbomify.com/CVE-2007-2776/): Auth bypass in alstrasoft:template seller (critical 10.0)
- [CVE-2007-2775](https://insights.sbomify.com/CVE-2007-2775/): Auth bypass in alstrasoft:live support (critical 10.0)
- [CVE-2007-2774](https://insights.sbomify.com/CVE-2007-2774/): Code injection in sunlight-cms:sunlight cms (high 7.5)
- [CVE-2007-2773](https://insights.sbomify.com/CVE-2007-2773/): SQL injection in zomplog:zomplog (high 7.5)
- [CVE-2007-2772](https://insights.sbomify.com/CVE-2007-2772/): Null dereference in ca:brightstor arcserve backup (high 7.8)
- [CVE-2007-2771](https://insights.sbomify.com/CVE-2007-2771/): Memory corruption in lead technologies:leadtools jpeg 2000 (critical 9.3)
- [CVE-2007-2770](https://insights.sbomify.com/CVE-2007-2770/): Memory corruption in qualcomm:eudora (critical 9.3)
- [CVE-2007-2769](https://insights.sbomify.com/CVE-2007-2769/): File upload in opendap:bes (high 7.5)
- [CVE-2007-2768](https://insights.sbomify.com/CVE-2007-2768/): Information disclosure in netapp:hci management node (medium 4.3)
- [CVE-2007-2767](https://insights.sbomify.com/CVE-2007-2767/): Information disclosure in opendap:bes (high 7.8)
- [CVE-2007-2766](https://insights.sbomify.com/CVE-2007-2766/): Information disclosure in backup manager:backup manager (high 7.2)
- [CVE-2007-2765](https://insights.sbomify.com/CVE-2007-2765/): Denial of service in ac zoom:blockhosts (medium 6.8)
- [CVE-2007-2764](https://insights.sbomify.com/CVE-2007-2764/): Denial of service in linux:linux kernel (high 7.8)
- [CVE-2007-2763](https://insights.sbomify.com/CVE-2007-2763/): Memory corruption in sienzo:digital music mentor (critical 10.0)
- [CVE-2007-2762](https://insights.sbomify.com/CVE-2007-2762/): Code injection in build it fast:build it fast (high 7.5)
- [CVE-2007-2761](https://insights.sbomify.com/CVE-2007-2761/): Memory corruption in magiciso:magiciso (high 7.5)
- [CVE-2007-2760](https://insights.sbomify.com/CVE-2007-2760/): Privilege escalation in adempiere:adempiere (critical 9.0)
- [CVE-2007-2759](https://insights.sbomify.com/CVE-2007-2759/): SQL injection in adempiere:adempiere (high 7.5)
- [CVE-2007-2758](https://insights.sbomify.com/CVE-2007-2758/): Memory corruption in winimage:winimage (critical 9.3)
- [CVE-2007-2757](https://insights.sbomify.com/CVE-2007-2757/): Cross-site scripting in dean j robinson:redoable (medium 6.8)
- [CVE-2007-2756](https://insights.sbomify.com/CVE-2007-2756/): Denial of service in libgd:libgd (medium 4.3)
- [CVE-2007-2755](https://insights.sbomify.com/CVE-2007-2755/): Other in precisionid barcode:precisionid barcode (critical 10.0)
- [CVE-2007-2754](https://insights.sbomify.com/CVE-2007-2754/): Integer overflow in freetype:freetype (medium 6.8)
- [CVE-2007-2753](https://insights.sbomify.com/CVE-2007-2753/): Information disclosure in runawaysoft:haber portal (medium 5.0)
- [CVE-2007-2752](https://insights.sbomify.com/CVE-2007-2752/): SQL injection in runawaysoft:haber portal (medium 6.4)
- [CVE-2007-2751](https://insights.sbomify.com/CVE-2007-2751/): Code injection in phpglossar:phpglossar (high 7.5)
- [CVE-2007-2750](https://insights.sbomify.com/CVE-2007-2750/): SQL injection in simpnews:simpnews (high 7.5)
- [CVE-2007-2749](https://insights.sbomify.com/CVE-2007-2749/): SQL injection in faqengine:faqengine (medium 5.0)
- [CVE-2007-2748](https://insights.sbomify.com/CVE-2007-2748/): Information disclosure in php:php (medium 4.3)
- [CVE-2007-2747](https://insights.sbomify.com/CVE-2007-2747/): Path traversal in rdiffweb:rdiffweb (medium 5.0)
- [CVE-2007-2746](https://insights.sbomify.com/CVE-2007-2746/): Missing authorization in plain black:webgui (low 3.5)
- [CVE-2007-2745](https://insights.sbomify.com/CVE-2007-2745/): Cross-site scripting in vdesk:webmail (medium 4.3)
- [CVE-2007-2744](https://insights.sbomify.com/CVE-2007-2744/): Memory corruption in precisionid barcode:precisionid barcode (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2007/page/38/