# Vulnerabilities published in 2007


- [CVE-2007-2438](https://insights.sbomify.com/CVE-2007-2438/): Security feature bypass in vim development group:vim (high 7.6)
- [CVE-2007-2437](https://insights.sbomify.com/CVE-2007-2437/): Denial of service in x.org:x window system (medium 5.5)
- [CVE-2007-2435](https://insights.sbomify.com/CVE-2007-2435/): Privilege escalation in sun:java enterprise system (critical 10.0)
- [CVE-2007-2434](https://insights.sbomify.com/CVE-2007-2434/): Memory corruption in aventail:aventail connect (critical 10.0)
- [CVE-2007-2433](https://insights.sbomify.com/CVE-2007-2433/): Cross-site scripting in ariadne:ariadne cms (medium 6.8)
- [CVE-2007-2432](https://insights.sbomify.com/CVE-2007-2432/): Cross-site scripting in nukedit:nukedit (medium 6.8)
- [CVE-2007-2431](https://insights.sbomify.com/CVE-2007-2431/): Cross-site scripting in tecnick.com:tcexam (medium 6.8)
- [CVE-2007-2430](https://insights.sbomify.com/CVE-2007-2430/): Path traversal in tecnick.com:tcexam (high 7.8)
- [CVE-2007-2429](https://insights.sbomify.com/CVE-2007-2429/): Command injection in manageengine:passwordmanager pro (critical 10.0)
- [CVE-2007-2428](https://insights.sbomify.com/CVE-2007-2428/): Code injection in ahhp-portal:ahhp-portal (high 7.5)
- [CVE-2007-2427](https://insights.sbomify.com/CVE-2007-2427/): SQL injection in pnflashgames:pnflashgames (high 7.5)
- [CVE-2007-2426](https://insights.sbomify.com/CVE-2007-2426/): Code injection in wildbits:mygallery (high 7.5)
- [CVE-2007-2425](https://insights.sbomify.com/CVE-2007-2425/): Path traversal in blackdot:imageview (medium 5.0)
- [CVE-2007-2424](https://insights.sbomify.com/CVE-2007-2424/): Code injection in the merchant project:the merchant (high 7.5)
- [CVE-2007-2423](https://insights.sbomify.com/CVE-2007-2423/): Cross-site scripting in moinmoin:moinmoin (medium 5.8)
- [CVE-2007-2422](https://insights.sbomify.com/CVE-2007-2422/): Code injection in comdev:modules builder (critical 9.8)
- [CVE-2007-2421](https://insights.sbomify.com/CVE-2007-2421/): Memory corruption in hitachi:groupmax mobile option (high 7.5)
- [CVE-2007-2420](https://insights.sbomify.com/CVE-2007-2420/): SQL injection in burak yilmaz:burak yilmaz blog (high 7.5)
- [CVE-2007-2419](https://insights.sbomify.com/CVE-2007-2419/): Memory corruption in macrovision:flexnet connect (critical 10.0)
- [CVE-2007-2418](https://insights.sbomify.com/CVE-2007-2418/): Memory corruption in cerulean studios:trillian pro (critical 10.0)
- [CVE-2007-2417](https://insights.sbomify.com/CVE-2007-2417/): Memory corruption in progress:openedge (critical 10.0)
- [CVE-2007-2416](https://insights.sbomify.com/CVE-2007-2416/): SQL injection in e-annu:e-annu (high 7.5)
- [CVE-2007-2415](https://insights.sbomify.com/CVE-2007-2415/): Denial of service in pi3web:pi3web web server (medium 5.0)
- [CVE-2007-2414](https://insights.sbomify.com/CVE-2007-2414/): Denial of service in myserver:myserver (high 7.8)
- [CVE-2007-2412](https://insights.sbomify.com/CVE-2007-2412/): Path traversal in seir anphin:seir anphin (high 7.8)
- [CVE-2007-2411](https://insights.sbomify.com/CVE-2007-2411/): Code injection in sphider:sphider (high 7.5)
- [CVE-2007-2410](https://insights.sbomify.com/CVE-2007-2410/): Cross-site scripting in apple:webcore (medium 4.3)
- [CVE-2007-2409](https://insights.sbomify.com/CVE-2007-2409/): Information disclosure in apple:webcore (medium 4.3)
- [CVE-2007-2408](https://insights.sbomify.com/CVE-2007-2408/): Security feature bypass in apple:safari (medium 6.8)
- [CVE-2007-2407](https://insights.sbomify.com/CVE-2007-2407/): Security feature bypass in samba:samba server (medium 4.0)
- [CVE-2007-2406](https://insights.sbomify.com/CVE-2007-2406/): Memory corruption in apple:quartz composer (medium 6.8)
- [CVE-2007-2405](https://insights.sbomify.com/CVE-2007-2405/): Integer overflow in apple:pdfkit (medium 6.8)
- [CVE-2007-2404](https://insights.sbomify.com/CVE-2007-2404/): Other in apple:mac os x (medium 5.0)
- [CVE-2007-2403](https://insights.sbomify.com/CVE-2007-2403/): Server-side request forgery in apple:cfnetwork (medium 6.8)
- [CVE-2007-2402](https://insights.sbomify.com/CVE-2007-2402/): Information disclosure in apple:quicktime (medium 4.3)
- [CVE-2007-2401](https://insights.sbomify.com/CVE-2007-2401/): Cross-site scripting in apple:mac os x (medium 4.3)
- [CVE-2007-2400](https://insights.sbomify.com/CVE-2007-2400/): Race condition in apple:iphone os (medium 4.3)
- [CVE-2007-2399](https://insights.sbomify.com/CVE-2007-2399/): Memory corruption in apple:mac os x (critical 9.3)
- [CVE-2007-2398](https://insights.sbomify.com/CVE-2007-2398/): Security feature bypass in apple:safari (high 7.1)
- [CVE-2007-2397](https://insights.sbomify.com/CVE-2007-2397/): Security feature bypass in apple:quicktime (critical 9.3)
- [CVE-2007-2396](https://insights.sbomify.com/CVE-2007-2396/): Code injection in apple:quicktime (critical 9.3)
- [CVE-2007-2395](https://insights.sbomify.com/CVE-2007-2395/): Memory corruption in apple:quicktime (critical 9.3)
- [CVE-2007-2394](https://insights.sbomify.com/CVE-2007-2394/): Integer overflow in apple:quicktime (critical 9.3)
- [CVE-2007-2393](https://insights.sbomify.com/CVE-2007-2393/): Security feature bypass in apple:quicktime (critical 9.3)
- [CVE-2007-2392](https://insights.sbomify.com/CVE-2007-2392/): Memory corruption in apple:quicktime (critical 9.3)
- [CVE-2007-2391](https://insights.sbomify.com/CVE-2007-2391/): Cross-site scripting in apple:safari (medium 4.3)
- [CVE-2007-2390](https://insights.sbomify.com/CVE-2007-2390/): Memory corruption in apple:mac os x (critical 10.0)
- [CVE-2007-2389](https://insights.sbomify.com/CVE-2007-2389/): Information disclosure in apple:quicktime (high 7.1)
- [CVE-2007-2388](https://insights.sbomify.com/CVE-2007-2388/): Code injection in apple:quicktime (critical 9.3)
- [CVE-2007-2387](https://insights.sbomify.com/CVE-2007-2387/): Auth bypass in apple:xserve lights-out management (critical 10.0)
- [CVE-2007-2386](https://insights.sbomify.com/CVE-2007-2386/): Memory corruption in apple:mac os x (critical 9.4)
- [CVE-2007-2385](https://insights.sbomify.com/CVE-2007-2385/): Information disclosure in yahoo:ui library (medium 5.0)
- [CVE-2007-2384](https://insights.sbomify.com/CVE-2007-2384/): Information disclosure in script.aculo.us:script.aculo.us (high 7.8)
- [CVE-2007-2383](https://insights.sbomify.com/CVE-2007-2383/): Information disclosure in prototypejs:prototype framework (medium 5.0)
- [CVE-2007-2382](https://insights.sbomify.com/CVE-2007-2382/): Information disclosure in mad4milk:moo.fx (medium 5.0)
- [CVE-2007-2381](https://insights.sbomify.com/CVE-2007-2381/): Information disclosure in mochikit:mochikit framework (medium 5.0)
- [CVE-2007-2380](https://insights.sbomify.com/CVE-2007-2380/): Information disclosure in microsoft:atlas framework (medium 5.0)
- [CVE-2007-2379](https://insights.sbomify.com/CVE-2007-2379/): Information disclosure in jquery:jquery (medium 5.0)
- [CVE-2007-2378](https://insights.sbomify.com/CVE-2007-2378/): Information disclosure in google:web toolkit (medium 5.0)
- [CVE-2007-2377](https://insights.sbomify.com/CVE-2007-2377/): Information disclosure in getahead:direct web remoting (medium 5.0)
- [CVE-2007-2376](https://insights.sbomify.com/CVE-2007-2376/): Information disclosure in dojo toolkit:dojo toolkit (medium 5.0)
- [CVE-2007-2375](https://insights.sbomify.com/CVE-2007-2375/): Security feature bypass in symantec:enterprise security manager (critical 10.0)
- [CVE-2007-2374](https://insights.sbomify.com/CVE-2007-2374/): Other in avaya:definity one media server (critical 9.3)
- [CVE-2007-2373](https://insights.sbomify.com/CVE-2007-2373/): SQL injection in wf-links:wf-links (high 7.5)
- [CVE-2007-2372](https://insights.sbomify.com/CVE-2007-2372/): Missing authorization in gregory kokanosky:phpmynewsletter (critical 10.0)
- [CVE-2007-2371](https://insights.sbomify.com/CVE-2007-2371/): Missing authorization in gregory kokanosky:phpmynewsletter (critical 10.0)
- [CVE-2007-2370](https://insights.sbomify.com/CVE-2007-2370/): SQL injection in xoops:john mordo jobs module (high 7.5)
- [CVE-2007-2369](https://insights.sbomify.com/CVE-2007-2369/): Path traversal in php:php (medium 5.0)
- [CVE-2007-2368](https://insights.sbomify.com/CVE-2007-2368/): Path traversal in webspell:webspell (medium 5.0)
- [CVE-2007-2367](https://insights.sbomify.com/CVE-2007-2367/): Memory corruption in wserve http server:wserve http server (critical 10.0)
- [CVE-2007-2366](https://insights.sbomify.com/CVE-2007-2366/): Memory corruption in corel:paint shop pro (high 7.4)
- [CVE-2007-2365](https://insights.sbomify.com/CVE-2007-2365/): Memory corruption in adobe:golive (critical 9.3)
- [CVE-2007-2364](https://insights.sbomify.com/CVE-2007-2364/): Code injection in burnstone:burncms (high 7.5)
- [CVE-2007-2363](https://insights.sbomify.com/CVE-2007-2363/): Memory corruption in irfanview:irfanview (high 8.5)
- [CVE-2007-2362](https://insights.sbomify.com/CVE-2007-2362/): Memory corruption in don moore:mydns (critical 9.0)
- [CVE-2007-2361](https://insights.sbomify.com/CVE-2007-2361/): Misconfiguration in symantec:backupexec system recovery (medium 4.9)
- [CVE-2007-2360](https://insights.sbomify.com/CVE-2007-2360/): Weak cryptography in symantec:backupexec system recovery (medium 6.8)
- [CVE-2007-2359](https://insights.sbomify.com/CVE-2007-2359/): Memory corruption in symantec:backupexec system recovery (high 7.2)
- [CVE-2007-2358](https://insights.sbomify.com/CVE-2007-2358/): Code injection in b2evolution:b2evolution (high 7.5)
- [CVE-2007-2357](https://insights.sbomify.com/CVE-2007-2357/): Cross-site scripting in sinecms:sinecms (medium 6.8)
- [CVE-2007-2356](https://insights.sbomify.com/CVE-2007-2356/): Memory corruption in gimp:gimp (medium 6.8)
- [CVE-2007-2355](https://insights.sbomify.com/CVE-2007-2355/): Command injection in opendap:server3 (critical 10.0)
- [CVE-2007-2354](https://insights.sbomify.com/CVE-2007-2354/): Information disclosure in progress:webspeed messenger (high 7.8)
- [CVE-2007-2353](https://insights.sbomify.com/CVE-2007-2353/): Apache Axis allows Exposure of Sensitive Information to an Unauthorized Actor (medium 5.0)
- [CVE-2007-2352](https://insights.sbomify.com/CVE-2007-2352/): Memory corruption in afflib:afflib (critical 10.0)
- [CVE-2007-2351](https://insights.sbomify.com/CVE-2007-2351/): Other in hp:power manager remote agent (high 7.2)
- [CVE-2007-2350](https://insights.sbomify.com/CVE-2007-2350/): Command injection in freepbx:freepbx (medium 6.5)
- [CVE-2007-2349](https://insights.sbomify.com/CVE-2007-2349/): Cross-site scripting in invision power services:invision power board (medium 5.8)
- [CVE-2007-2348](https://insights.sbomify.com/CVE-2007-2348/): Command injection in alexander v. lukyanov:lftp (medium 6.8)
- [CVE-2007-2347](https://insights.sbomify.com/CVE-2007-2347/): Code injection in oneclick cms:oneclick cms (high 7.5)
- [CVE-2007-2346](https://insights.sbomify.com/CVE-2007-2346/): Code injection in php-generics:php-generics (high 7.5)
- [CVE-2007-2345](https://insights.sbomify.com/CVE-2007-2345/): Code injection in codewand:phpbrowse (high 7.5)
- [CVE-2007-2344](https://insights.sbomify.com/CVE-2007-2344/): Denial of service in enterasys:netsight console (high 7.8)
- [CVE-2007-2343](https://insights.sbomify.com/CVE-2007-2343/): Memory corruption in enterasys:netsight console (high 7.5)
- [CVE-2007-2342](https://insights.sbomify.com/CVE-2007-2342/): SQL injection in creascripts:creadirectory (high 7.5)
- [CVE-2007-2341](https://insights.sbomify.com/CVE-2007-2341/): Code injection in phpbandmanager:phpbandmanager (high 7.5)
- [CVE-2007-2340](https://insights.sbomify.com/CVE-2007-2340/): Code injection in phporacleview:phporacleview (medium 6.8)
- [CVE-2007-2339](https://insights.sbomify.com/CVE-2007-2339/): SQL injection in phorum:phorum (high 7.5)
- [CVE-2007-2338](https://insights.sbomify.com/CVE-2007-2338/): Cross-site request forgery in phorum:phorum (high 7.5)
- [CVE-2007-2337](https://insights.sbomify.com/CVE-2007-2337/): Cross-site scripting in oicgroup:exponent cms (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2007/page/42/