# Vulnerabilities published in 2007


- [CVE-2007-2743](https://insights.sbomify.com/CVE-2007-2743/): Code injection in glossword:glossword (high 7.5)
- [CVE-2007-2742](https://insights.sbomify.com/CVE-2007-2742/): File upload in labs.beffa.org:w2box (high 7.5)
- [CVE-2007-2741](https://insights.sbomify.com/CVE-2007-2741/): Memory corruption in littlecms:lcms (critical 9.3)
- [CVE-2007-2740](https://insights.sbomify.com/CVE-2007-2740/): Other in xajax:xajax (medium 6.8)
- [CVE-2007-2739](https://insights.sbomify.com/CVE-2007-2739/): Cross-site scripting in xajax:xajax (medium 4.3)
- [CVE-2007-2738](https://insights.sbomify.com/CVE-2007-2738/): SQL injection in xoops:xoops glossaire module (high 7.5)
- [CVE-2007-2737](https://insights.sbomify.com/CVE-2007-2737/): SQL injection in xoops:myconference module (high 7.5)
- [CVE-2007-2736](https://insights.sbomify.com/CVE-2007-2736/): Code injection in achievo:achievo (critical 10.0)
- [CVE-2007-2735](https://insights.sbomify.com/CVE-2007-2735/): SQL injection in touteresa:resmanager (high 7.5)
- [CVE-2007-2734](https://insights.sbomify.com/CVE-2007-2734/): Security feature bypass in 3com:3crtpx505-73 (high 7.5)
- [CVE-2007-2733](https://insights.sbomify.com/CVE-2007-2733/): File upload in jetbox:jetbox cms (medium 6.0)
- [CVE-2007-2732](https://insights.sbomify.com/CVE-2007-2732/): Cross-site scripting in jetbox:jetbox cms (medium 6.8)
- [CVE-2007-2731](https://insights.sbomify.com/CVE-2007-2731/): Other in jetbox:jetbox cms (medium 4.0)
- [CVE-2007-2730](https://insights.sbomify.com/CVE-2007-2730/): Security feature bypass in checkpoint:zonealarm (high 7.2)
- [CVE-2007-2729](https://insights.sbomify.com/CVE-2007-2729/): Security feature bypass in comodo:comodo firewall pro (high 7.2)
- [CVE-2007-2728](https://insights.sbomify.com/CVE-2007-2728/): Weak cryptography in canonical:ubuntu linux (medium 5.0)
- [CVE-2007-2727](https://insights.sbomify.com/CVE-2007-2727/): Weak cryptography in php:php (low 2.6)
- [CVE-2007-2726](https://insights.sbomify.com/CVE-2007-2726/): Denial of service in bitscast:bitscast (high 7.8)
- [CVE-2007-2725](https://insights.sbomify.com/CVE-2007-2725/): Other in db soft lab:dewizardx (high 7.5)
- [CVE-2007-2724](https://insights.sbomify.com/CVE-2007-2724/): Cross-site scripting in fotolog:fotolog (medium 4.3)
- [CVE-2007-2723](https://insights.sbomify.com/CVE-2007-2723/): Denial of service in mpc-hc:media player classic (medium 5.5)
- [CVE-2007-2722](https://insights.sbomify.com/CVE-2007-2722/): Denial of service in newzcrawler:newzcrawler (high 7.8)
- [CVE-2007-2721](https://insights.sbomify.com/CVE-2007-2721/): Memory corruption in jasper jpeg-2000:jasper jpeg-2000 (medium 4.3)
- [CVE-2007-2720](https://insights.sbomify.com/CVE-2007-2720/): Missing authorization in group-office:group-office groupware (medium 4.3)
- [CVE-2007-2719](https://insights.sbomify.com/CVE-2007-2719/): Auth bypass in hp:systems insight manager (critical 10.0)
- [CVE-2007-2718](https://insights.sbomify.com/CVE-2007-2718/): Cross-site scripting in microsoft:internet explorer (medium 4.3)
- [CVE-2007-2717](https://insights.sbomify.com/CVE-2007-2717/): SQL injection in igeneric:ig shop (high 7.5)
- [CVE-2007-2716](https://insights.sbomify.com/CVE-2007-2716/): Cross-site scripting in eqdkp:eqdkp (medium 6.8)
- [CVE-2007-2715](https://insights.sbomify.com/CVE-2007-2715/): Missing authorization in snaps gallery:snaps gallery (critical 10.0)
- [CVE-2007-2714](https://insights.sbomify.com/CVE-2007-2714/): Other in matt mullenweg:akismet (critical 10.0)
- [CVE-2007-2713](https://insights.sbomify.com/CVE-2007-2713/): Auth bypass in ifusionservices:ifdate (critical 10.0)
- [CVE-2007-2712](https://insights.sbomify.com/CVE-2007-2712/): Other in mh software:connect daily (critical 10.0)
- [CVE-2007-2711](https://insights.sbomify.com/CVE-2007-2711/): Memory corruption in tinyirc:tinyidentd (critical 10.0)
- [CVE-2007-2710](https://insights.sbomify.com/CVE-2007-2710/): Code injection in nagiosql:nagiosql (high 7.5)
- [CVE-2007-2709](https://insights.sbomify.com/CVE-2007-2709/): Code injection in nagiosql:nagiosql 2005 (high 7.5)
- [CVE-2007-2708](https://insights.sbomify.com/CVE-2007-2708/): Code injection in feindt computerservice:news-script (high 7.5)
- [CVE-2007-2707](https://insights.sbomify.com/CVE-2007-2707/): Code injection in linksnet:newsfeed (medium 6.8)
- [CVE-2007-2706](https://insights.sbomify.com/CVE-2007-2706/): Code injection in geeklog:media gallery (high 7.5)
- [CVE-2007-2705](https://insights.sbomify.com/CVE-2007-2705/): Path traversal in bea:weblogic integration (high 7.8)
- [CVE-2007-2704](https://insights.sbomify.com/CVE-2007-2704/): Denial of service in bea:weblogic server (medium 5.4)
- [CVE-2007-2703](https://insights.sbomify.com/CVE-2007-2703/): Privilege escalation in oracle:weblogic portal (low 3.6)
- [CVE-2007-2702](https://insights.sbomify.com/CVE-2007-2702/): Cross-site scripting in oracle:weblogic portal (low 3.5)
- [CVE-2007-2701](https://insights.sbomify.com/CVE-2007-2701/): Auth bypass in bea:weblogic server (medium 4.6)
- [CVE-2007-2700](https://insights.sbomify.com/CVE-2007-2700/): Information disclosure in bea:weblogic server (medium 4.0)
- [CVE-2007-2699](https://insights.sbomify.com/CVE-2007-2699/): Security feature bypass in bea:weblogic server (high 7.1)
- [CVE-2007-2698](https://insights.sbomify.com/CVE-2007-2698/): Information disclosure in bea:weblogic server (medium 5.0)
- [CVE-2007-2697](https://insights.sbomify.com/CVE-2007-2697/): Security feature bypass in bea:weblogic server (medium 5.1)
- [CVE-2007-2696](https://insights.sbomify.com/CVE-2007-2696/): Security feature bypass in bea:weblogic server (medium 6.8)
- [CVE-2007-2695](https://insights.sbomify.com/CVE-2007-2695/): Auth bypass in bea:weblogic server (medium 5.1)
- [CVE-2007-2694](https://insights.sbomify.com/CVE-2007-2694/): Cross-site scripting in bea:weblogic server (medium 4.3)
- [CVE-2007-2693](https://insights.sbomify.com/CVE-2007-2693/): Missing authorization in mysql:mysql (low 3.5)
- [CVE-2007-2692](https://insights.sbomify.com/CVE-2007-2692/): Privilege escalation in mysql:mysql (medium 6.0)
- [CVE-2007-2691](https://insights.sbomify.com/CVE-2007-2691/): Missing authorization in canonical:ubuntu linux (medium 4.9)
- [CVE-2007-2690](https://insights.sbomify.com/CVE-2007-2690/): Security feature bypass in iss:proventia a series xpu (high 7.8)
- [CVE-2007-2689](https://insights.sbomify.com/CVE-2007-2689/): Security feature bypass in checkpoint:web intelligence (high 7.8)
- [CVE-2007-2688](https://insights.sbomify.com/CVE-2007-2688/): Security feature bypass in cisco:ios (high 7.8)
- [CVE-2007-2687](https://insights.sbomify.com/CVE-2007-2687/): Memory corruption in microworld technologies:escan (critical 10.0)
- [CVE-2007-2686](https://insights.sbomify.com/CVE-2007-2686/): Cross-site scripting in jetbox:jetbox cms (medium 4.3)
- [CVE-2007-2685](https://insights.sbomify.com/CVE-2007-2685/): SQL injection in jetbox:jetbox cms (high 7.5)
- [CVE-2007-2684](https://insights.sbomify.com/CVE-2007-2684/): Information disclosure in jetbox:jetbox cms (medium 5.0)
- [CVE-2007-2683](https://insights.sbomify.com/CVE-2007-2683/): Memory corruption in mutt:mutt (low 3.5)
- [CVE-2007-2682](https://insights.sbomify.com/CVE-2007-2682/): Misconfiguration in adobe:creative suite (high 7.5)
- [CVE-2007-2681](https://insights.sbomify.com/CVE-2007-2681/): Path traversal in b2evolution:b2evolution (high 7.5)
- [CVE-2007-2680](https://insights.sbomify.com/CVE-2007-2680/): Cross-site scripting in canon:network camera server vb100 (medium 4.3)
- [CVE-2007-2679](https://insights.sbomify.com/CVE-2007-2679/): Code injection in simple php scripts gallery:simple php scripts gallery (medium 6.8)
- [CVE-2007-2678](https://insights.sbomify.com/CVE-2007-2678/): Memory corruption in netsprint:netsprint toolbar (high 7.5)
- [CVE-2007-2677](https://insights.sbomify.com/CVE-2007-2677/): Code injection in phpchess:phpchess (high 7.5)
- [CVE-2007-2676](https://insights.sbomify.com/CVE-2007-2676/): Code injection in open translation engine:open translation engine (high 7.5)
- [CVE-2007-2675](https://insights.sbomify.com/CVE-2007-2675/): SQL injection in pre projects:pre classifieds listings (high 7.5)
- [CVE-2007-2674](https://insights.sbomify.com/CVE-2007-2674/): SQL injection in pre projects:pre shopping mall (high 7.5)
- [CVE-2007-2673](https://insights.sbomify.com/CVE-2007-2673/): SQL injection in censura:censura (high 7.5)
- [CVE-2007-2672](https://insights.sbomify.com/CVE-2007-2672/): SQL injection in thinc4orce marketing group:php coupon script (high 7.5)
- [CVE-2007-2671](https://insights.sbomify.com/CVE-2007-2671/): Memory corruption in mozilla:firefox (high 7.1)
- [CVE-2007-2670](https://insights.sbomify.com/CVE-2007-2670/): Information disclosure in globalmegacorp:phpchain (medium 4.3)
- [CVE-2007-2669](https://insights.sbomify.com/CVE-2007-2669/): Cross-site scripting in globalmegacorp:phpchain (medium 4.3)
- [CVE-2007-2668](https://insights.sbomify.com/CVE-2007-2668/): Memory corruption in webdesproxy:webdesproxy (medium 6.8)
- [CVE-2007-2667](https://insights.sbomify.com/CVE-2007-2667/): Memory corruption in db soft lab:vimp x (critical 9.3)
- [CVE-2007-2666](https://insights.sbomify.com/CVE-2007-2666/): Memory corruption in notepad\+\+:notepad\+\+ (high 7.6)
- [CVE-2007-2665](https://insights.sbomify.com/CVE-2007-2665/): Code injection in php firstpost:php firstpost (high 7.5)
- [CVE-2007-2664](https://insights.sbomify.com/CVE-2007-2664/): Code injection in tomasz rekawek:yet another asterisk panel (high 7.5)
- [CVE-2007-2663](https://insights.sbomify.com/CVE-2007-2663/): Code injection in beacon:beacon (high 7.5)
- [CVE-2007-2662](https://insights.sbomify.com/CVE-2007-2662/): SQL injection in efestech haber:efestech haber (high 7.5)
- [CVE-2007-2661](https://insights.sbomify.com/CVE-2007-2661/): SQL injection in drumster:blogme (high 7.5)
- [CVE-2007-2660](https://insights.sbomify.com/CVE-2007-2660/): Code injection in cjg explorer pro:cjg explorer pro (medium 6.8)
- [CVE-2007-2659](https://insights.sbomify.com/CVE-2007-2659/): Path traversal in bugada andrea:php advanced transfer manager (medium 5.0)
- [CVE-2007-2658](https://insights.sbomify.com/CVE-2007-2658/): Denial of service in id automation:linear barcode (high 7.8)
- [CVE-2007-2657](https://insights.sbomify.com/CVE-2007-2657/): Denial of service in precisionid barcode:precisionid barcode (high 7.8)
- [CVE-2007-2656](https://insights.sbomify.com/CVE-2007-2656/): Memory corruption in hp:hpqvwocx.dll (high 7.8)
- [CVE-2007-2655](https://insights.sbomify.com/CVE-2007-2655/): Memory corruption in netwin:surgemail (high 7.5)
- [CVE-2007-2654](https://insights.sbomify.com/CVE-2007-2654/): Race condition in suse:opensuse (medium 4.4)
- [CVE-2007-2652](https://insights.sbomify.com/CVE-2007-2652/): Memory corruption in free-sa:free-sa (high 7.5)
- [CVE-2007-2651](https://insights.sbomify.com/CVE-2007-2651/): Memory corruption in voodoo circle:voodoo circle (high 7.5)
- [CVE-2007-2650](https://insights.sbomify.com/CVE-2007-2650/): Denial of service in clamav:clamav (medium 4.3)
- [CVE-2007-2649](https://insights.sbomify.com/CVE-2007-2649/): Security feature bypass in t-com:speedport w 700v (high 7.8)
- [CVE-2007-2648](https://insights.sbomify.com/CVE-2007-2648/): Memory corruption in clever components:clever database comparer (critical 9.3)
- [CVE-2007-2647](https://insights.sbomify.com/CVE-2007-2647/): Code injection in monalbum:monalbum (medium 6.5)
- [CVE-2007-2646](https://insights.sbomify.com/CVE-2007-2646/): Memory corruption in yenc32:yenc32 (medium 6.8)
- [CVE-2007-2645](https://insights.sbomify.com/CVE-2007-2645/): Integer overflow in libexif:libexif (critical 9.3)
- [CVE-2007-2644](https://insights.sbomify.com/CVE-2007-2644/): Other in morovia:barcode activex control (critical 9.4)
- [CVE-2007-2643](https://insights.sbomify.com/CVE-2007-2643/): Path traversal in pinkcrow designs:designs gallery magazin (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2007/page/39/
