# Vulnerabilities published in 2007


- [CVE-2007-2642](https://insights.sbomify.com/CVE-2007-2642/): Path traversal in r2k:r2k gallery (high 7.8)
- [CVE-2007-2641](https://insights.sbomify.com/CVE-2007-2641/): SQL injection in w1l3d4:philboard (high 7.5)
- [CVE-2007-2640](https://insights.sbomify.com/CVE-2007-2640/): Weak cryptography in heiko stamer:libtmcg (high 7.8)
- [CVE-2007-2639](https://insights.sbomify.com/CVE-2007-2639/): Path traversal in prosysinfo:tftp server tftpdwin (critical 10.0)
- [CVE-2007-2638](https://insights.sbomify.com/CVE-2007-2638/): Auth bypass in efilecabinet:efilecabinet (critical 10.0)
- [CVE-2007-2637](https://insights.sbomify.com/CVE-2007-2637/): MoinMoin Improper ACL handling for calendars and includes (medium 5.0)
- [CVE-2007-2636](https://insights.sbomify.com/CVE-2007-2636/): Other in jason frisvold:phptodo (medium 6.8)
- [CVE-2007-2635](https://insights.sbomify.com/CVE-2007-2635/): Denial of service in interchange development group:interchange (high 7.8)
- [CVE-2007-2634](https://insights.sbomify.com/CVE-2007-2634/): Code injection in agner fog:aforum (medium 6.8)
- [CVE-2007-2633](https://insights.sbomify.com/CVE-2007-2633/): Path traversal in positive software:sitestudio (critical 10.0)
- [CVE-2007-2632](https://insights.sbomify.com/CVE-2007-2632/): Cross-site scripting in php multi user randomizer:php multi user randomizer (medium 6.8)
- [CVE-2007-2631](https://insights.sbomify.com/CVE-2007-2631/): Cross-site request forgery in squirrelmail:squirrelmail (high 7.5)
- [CVE-2007-2630](https://insights.sbomify.com/CVE-2007-2630/): File upload in activecampaign:1-2-all broadcast email (medium 6.5)
- [CVE-2007-2629](https://insights.sbomify.com/CVE-2007-2629/): Information disclosure in bradford networks:campusmanager network control application server (high 7.8)
- [CVE-2007-2628](https://insights.sbomify.com/CVE-2007-2628/): Code injection in justin koivisto:phpsecurityadmin (high 7.5)
- [CVE-2007-2627](https://insights.sbomify.com/CVE-2007-2627/): Cross-site scripting in wordpress:wordpress (medium 6.8)
- [CVE-2007-2626](https://insights.sbomify.com/CVE-2007-2626/): SQL injection in free php scripts:schoolboard (high 7.5)
- [CVE-2007-2625](https://insights.sbomify.com/CVE-2007-2625/): Cross-site scripting in aiocp:aiocp (medium 6.8)
- [CVE-2007-2624](https://insights.sbomify.com/CVE-2007-2624/): Cross-site scripting in aiocp:aiocp (medium 6.8)
- [CVE-2007-2623](https://insights.sbomify.com/CVE-2007-2623/): Memory corruption in fruit2004:remote display development kit (high 7.8)
- [CVE-2007-2622](https://insights.sbomify.com/CVE-2007-2622/): SQL injection in taskdriver:taskdriver (high 7.5)
- [CVE-2007-2621](https://insights.sbomify.com/CVE-2007-2621/): SQL injection in extrovert software:thyme calndar (high 7.5)
- [CVE-2007-2620](https://insights.sbomify.com/CVE-2007-2620/): Code injection in jakub steiner:original (high 7.5)
- [CVE-2007-2619](https://insights.sbomify.com/CVE-2007-2619/): Information disclosure in symantec:pcanywhere (medium 4.6)
- [CVE-2007-2618](https://insights.sbomify.com/CVE-2007-2618/): Other in drake team:drake cms (medium 5.1)
- [CVE-2007-2617](https://insights.sbomify.com/CVE-2007-2617/): Information disclosure in sun:net connect software (low 2.1)
- [CVE-2007-2616](https://insights.sbomify.com/CVE-2007-2616/): Memory corruption in novell:netmail (critical 10.0)
- [CVE-2007-2615](https://insights.sbomify.com/CVE-2007-2615/): Code injection in crie sue:phplojafacil (high 7.5)
- [CVE-2007-2614](https://insights.sbomify.com/CVE-2007-2614/): Code injection in phphtmllib:phphtmllib (high 7.5)
- [CVE-2007-2613](https://insights.sbomify.com/CVE-2007-2613/): Code injection in wikkawiki:wikkawiki (high 8.3)
- [CVE-2007-2612](https://insights.sbomify.com/CVE-2007-2612/): SQL injection in wikkawiki:wikkawiki (high 7.5)
- [CVE-2007-2611](https://insights.sbomify.com/CVE-2007-2611/): Code injection in cgx:cgx (medium 6.8)
- [CVE-2007-2610](https://insights.sbomify.com/CVE-2007-2610/): Cross-site scripting in openld:openld (medium 4.3)
- [CVE-2007-2609](https://insights.sbomify.com/CVE-2007-2609/): Code injection in gnuedu:gnu edu (high 7.5)
- [CVE-2007-2608](https://insights.sbomify.com/CVE-2007-2608/): Code injection in miplex2:miplex2 (high 7.5)
- [CVE-2007-2607](https://insights.sbomify.com/CVE-2007-2607/): Code injection in lavague:lavague (high 7.5)
- [CVE-2007-2606](https://insights.sbomify.com/CVE-2007-2606/): Memory corruption in firebirdsql:firebird (high 7.8)
- [CVE-2007-2605](https://insights.sbomify.com/CVE-2007-2605/): Null dereference in brujula toolbar:brujula toolbar (high 7.1)
- [CVE-2007-2604](https://insights.sbomify.com/CVE-2007-2604/): Denial of service in brew city software:flexlabel ocx (high 7.8)
- [CVE-2007-2603](https://insights.sbomify.com/CVE-2007-2603/): Null dereference in audio cd tools:audio cd ripper ocx (high 7.8)
- [CVE-2007-2602](https://insights.sbomify.com/CVE-2007-2602/): Memory corruption in progress:whatsup gold (high 7.8)
- [CVE-2007-2601](https://insights.sbomify.com/CVE-2007-2601/): Memory corruption in divx city:gdivx zenith player (critical 9.3)
- [CVE-2007-2600](https://insights.sbomify.com/CVE-2007-2600/): Cross-site scripting in wavelink media:tutorialcms (medium 6.8)
- [CVE-2007-2599](https://insights.sbomify.com/CVE-2007-2599/): SQL injection in wavelink media:tutorialcms (high 7.5)
- [CVE-2007-2598](https://insights.sbomify.com/CVE-2007-2598/): SQL injection in simplenews:simplenews (critical 10.0)
- [CVE-2007-2597](https://insights.sbomify.com/CVE-2007-2597/): Code injection in telltargetcms:telltarget cms (high 7.5)
- [CVE-2007-2596](https://insights.sbomify.com/CVE-2007-2596/): Code injection in agner fog:aforum (high 7.5)
- [CVE-2007-2595](https://insights.sbomify.com/CVE-2007-2595/): Business logic in rscript:rsauction (medium 6.5)
- [CVE-2007-2594](https://insights.sbomify.com/CVE-2007-2594/): Code injection in phpmyportal:phpmyportal (high 7.5)
- [CVE-2007-2593](https://insights.sbomify.com/CVE-2007-2593/): Security feature bypass in microsoft:terminal server (high 7.5)
- [CVE-2007-2592](https://insights.sbomify.com/CVE-2007-2592/): Cross-site scripting in nokia:groupwise mobile server (medium 4.3)
- [CVE-2007-2591](https://insights.sbomify.com/CVE-2007-2591/): Missing authorization in nokia:groupwise mobile server (high 7.5)
- [CVE-2007-2590](https://insights.sbomify.com/CVE-2007-2590/): Information disclosure in nokia:groupwise mobile server (medium 6.4)
- [CVE-2007-2589](https://insights.sbomify.com/CVE-2007-2589/): Cross-site request forgery in squirrelmail:squirrelmail (medium 5.0)
- [CVE-2007-2588](https://insights.sbomify.com/CVE-2007-2588/): Memory corruption in office ocx:office viewer ocx (critical 9.3)
- [CVE-2007-2587](https://insights.sbomify.com/CVE-2007-2587/): Denial of service in cisco:ios (medium 6.3)
- [CVE-2007-2586](https://insights.sbomify.com/CVE-2007-2586/): Memory corruption in cisco:ios (critical 9.3)
- [CVE-2007-2585](https://insights.sbomify.com/CVE-2007-2585/): Memory corruption in barcodewiz:barcode activex control (critical 9.3)
- [CVE-2007-2584](https://insights.sbomify.com/CVE-2007-2584/): Memory corruption in mcafee:security center (critical 10.0)
- [CVE-2007-2583](https://insights.sbomify.com/CVE-2007-2583/): Null dereference in canonical:ubuntu linux (medium 4.0)
- [CVE-2007-2582](https://insights.sbomify.com/CVE-2007-2582/): Memory corruption in ibm:db2 (critical 10.0)
- [CVE-2007-2581](https://insights.sbomify.com/CVE-2007-2581/): Cross-site scripting in microsoft:sharepoint server (medium 4.3)
- [CVE-2007-2580](https://insights.sbomify.com/CVE-2007-2580/): Information disclosure in apple:safari (low 1.9)
- [CVE-2007-2579](https://insights.sbomify.com/CVE-2007-2579/): Cross-site scripting in acp3:acp3 (medium 5.8)
- [CVE-2007-2578](https://insights.sbomify.com/CVE-2007-2578/): Other in acp3:acp3 (high 7.5)
- [CVE-2007-2577](https://insights.sbomify.com/CVE-2007-2577/): SQL injection in acp3:acp3 (high 7.5)
- [CVE-2007-2576](https://insights.sbomify.com/CVE-2007-2576/): Memory corruption in east wind software:advdaudio.ocx (medium 6.8)
- [CVE-2007-2575](https://insights.sbomify.com/CVE-2007-2575/): Code injection in vm watermark:vm watermark (high 7.5)
- [CVE-2007-2574](https://insights.sbomify.com/CVE-2007-2574/): Path traversal in archangelmgt:weblog (medium 5.0)
- [CVE-2007-2573](https://insights.sbomify.com/CVE-2007-2573/): Code injection in phptree:phptree (high 7.5)
- [CVE-2007-2572](https://insights.sbomify.com/CVE-2007-2572/): Code injection in noah:noah (high 7.5)
- [CVE-2007-2571](https://insights.sbomify.com/CVE-2007-2571/): SQL injection in xoops:wfquotes module (high 7.5)
- [CVE-2007-2570](https://insights.sbomify.com/CVE-2007-2570/): Code injection in guilain omont:wikivi5 (high 7.5)
- [CVE-2007-2569](https://insights.sbomify.com/CVE-2007-2569/): Code injection in practical creative and code:friendly (high 7.5)
- [CVE-2007-2568](https://insights.sbomify.com/CVE-2007-2568/): Memory corruption in vcdgear:vcdgear (critical 9.3)
- [CVE-2007-2567](https://insights.sbomify.com/CVE-2007-2567/): Memory corruption in taltech:tal bar code activex control (critical 9.3)
- [CVE-2007-2566](https://insights.sbomify.com/CVE-2007-2566/): Denial of service in taltech:tal bar code activex control (medium 5.0)
- [CVE-2007-2565](https://insights.sbomify.com/CVE-2007-2565/): Denial of service in cdelia software:imageprocessing (high 7.1)
- [CVE-2007-2564](https://insights.sbomify.com/CVE-2007-2564/): Memory corruption in sienzo:digital music mentor (critical 10.0)
- [CVE-2007-2563](https://insights.sbomify.com/CVE-2007-2563/): Memory corruption in versalsoft:http file upload activex control (critical 9.3)
- [CVE-2007-2562](https://insights.sbomify.com/CVE-2007-2562/): Cross-site scripting in kayako:esupport (medium 4.3)
- [CVE-2007-2561](https://insights.sbomify.com/CVE-2007-2561/): SQL injection in fipsasp:fipscms (high 7.5)
- [CVE-2007-2560](https://insights.sbomify.com/CVE-2007-2560/): Path traversal in mentiss acgv:acgvannu (medium 5.0)
- [CVE-2007-2559](https://insights.sbomify.com/CVE-2007-2559/): Code injection in american cart:american cart (high 7.5)
- [CVE-2007-2558](https://insights.sbomify.com/CVE-2007-2558/): Code injection in netsliver:pfa cms (high 7.5)
- [CVE-2007-2557](https://insights.sbomify.com/CVE-2007-2557/): Missing authorization in mambo:mambo (medium 4.0)
- [CVE-2007-2556](https://insights.sbomify.com/CVE-2007-2556/): SQL injection in nuked-klan:nuked-klan (high 7.5)
- [CVE-2007-2555](https://insights.sbomify.com/CVE-2007-2555/): Cross-site scripting in podium cms:podium cms (medium 4.3)
- [CVE-2007-2554](https://insights.sbomify.com/CVE-2007-2554/): Hardcoded credentials in associated press:newspower (high 7.8)
- [CVE-2007-2553](https://insights.sbomify.com/CVE-2007-2553/): Memory corruption in hp:tru64 (high 7.2)
- [CVE-2007-2552](https://insights.sbomify.com/CVE-2007-2552/): Information disclosure in wikkawiki:wikkawiki (medium 5.0)
- [CVE-2007-2551](https://insights.sbomify.com/CVE-2007-2551/): Cross-site scripting in wikkawiki:wikkawiki (medium 4.3)
- [CVE-2007-2550](https://insights.sbomify.com/CVE-2007-2550/): Other in devellion:cubecart (medium 5.0)
- [CVE-2007-2549](https://insights.sbomify.com/CVE-2007-2549/): SQL injection in turnkey web tools:sunshop shopping cart (high 7.5)
- [CVE-2007-2548](https://insights.sbomify.com/CVE-2007-2548/): Other in turnkey web tools:sunshop shopping cart (medium 6.4)
- [CVE-2007-2547](https://insights.sbomify.com/CVE-2007-2547/): Cross-site scripting in turnkey web tools:sunshop shopping cart (medium 4.3)
- [CVE-2007-2546](https://insights.sbomify.com/CVE-2007-2546/): Auth bypass in simple machines:simple machines forum (medium 6.8)
- [CVE-2007-2545](https://insights.sbomify.com/CVE-2007-2545/): Code injection in persism cms:persism cms (high 7.5)
- [CVE-2007-2544](https://insights.sbomify.com/CVE-2007-2544/): Code injection in php toptree bbs:php toptree bbs (high 7.5)
- [CVE-2007-2543](https://insights.sbomify.com/CVE-2007-2543/): SQL injection in xoops:flashgames module (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2007/page/40/