# Vulnerabilities published in 2007


- [CVE-2007-2336](https://insights.sbomify.com/CVE-2007-2336/): Denial of service in intervations:navicopa web server (high 7.8)
- [CVE-2007-2335](https://insights.sbomify.com/CVE-2007-2335/): Cross-site scripting in lunascape:lunascape (medium 4.3)
- [CVE-2007-2334](https://insights.sbomify.com/CVE-2007-2334/): Auth bypass in nortel:contivity (high 7.5)
- [CVE-2007-2333](https://insights.sbomify.com/CVE-2007-2333/): Hardcoded credentials in nortel:contivity (critical 10.0)
- [CVE-2007-2332](https://insights.sbomify.com/CVE-2007-2332/): Weak cryptography in nortel:vpn router 1010 (critical 9.0)
- [CVE-2007-2331](https://insights.sbomify.com/CVE-2007-2331/): Code injection in shop-script:shop-script (high 7.5)
- [CVE-2007-2330](https://insights.sbomify.com/CVE-2007-2330/): Code injection in dynatracker:dynatracker (high 7.5)
- [CVE-2007-2329](https://insights.sbomify.com/CVE-2007-2329/): Code injection in searchactivity:searchactivity (high 7.5)
- [CVE-2007-2328](https://insights.sbomify.com/CVE-2007-2328/): Code injection in phpmytgp:phpmytgp (high 7.5)
- [CVE-2007-2327](https://insights.sbomify.com/CVE-2007-2327/): Code injection in labs4:htmleditbox (high 7.5)
- [CVE-2007-2326](https://insights.sbomify.com/CVE-2007-2326/): Code injection in goldcoders:hyip manager pro (high 7.5)
- [CVE-2007-2325](https://insights.sbomify.com/CVE-2007-2325/): Code injection in mynewsgroup:mynewsgroup (critical 10.0)
- [CVE-2007-2324](https://insights.sbomify.com/CVE-2007-2324/): Path traversal in julmajanne:julmacms (high 7.8)
- [CVE-2007-2323](https://insights.sbomify.com/CVE-2007-2323/): Memory corruption in intervideo:home theater (critical 10.0)
- [CVE-2007-2322](https://insights.sbomify.com/CVE-2007-2322/): Null dereference in nero:mediahome (high 7.8)
- [CVE-2007-2321](https://insights.sbomify.com/CVE-2007-2321/): Other in silverstripe:silverstripe (critical 10.0)
- [CVE-2007-2320](https://insights.sbomify.com/CVE-2007-2320/): SQL injection in papoo:papoo (high 7.5)
- [CVE-2007-2319](https://insights.sbomify.com/CVE-2007-2319/): Code injection in autostand category:autostand category (medium 6.8)
- [CVE-2007-2318](https://insights.sbomify.com/CVE-2007-2318/): Memory corruption in filezilla:filezilla (critical 9.3)
- [CVE-2007-2317](https://insights.sbomify.com/CVE-2007-2317/): Code injection in minibb:minibb (high 7.5)
- [CVE-2007-2316](https://insights.sbomify.com/CVE-2007-2316/): Other in open business management:open business management (critical 10.0)
- [CVE-2007-2315](https://insights.sbomify.com/CVE-2007-2315/): Denial of service in minishare:minimal http server (high 7.8)
- [CVE-2007-2314](https://insights.sbomify.com/CVE-2007-2314/): SQL injection in crea-book:crea-book (medium 6.8)
- [CVE-2007-2313](https://insights.sbomify.com/CVE-2007-2313/): Code injection in mxbb:mx shotcast (high 7.5)
- [CVE-2007-2312](https://insights.sbomify.com/CVE-2007-2312/): SQL injection in vwar:virtual war (high 7.5)
- [CVE-2007-2311](https://insights.sbomify.com/CVE-2007-2311/): Code injection in bloofoxcms:bloofoxcms (high 7.5)
- [CVE-2007-2310](https://insights.sbomify.com/CVE-2007-2310/): Cross-site scripting in bloofoxcms:bloofoxcms (medium 4.3)
- [CVE-2007-2309](https://insights.sbomify.com/CVE-2007-2309/): Cross-site scripting in flowers:flowers (medium 4.3)
- [CVE-2007-2308](https://insights.sbomify.com/CVE-2007-2308/): Cross-site scripting in flowers:flowers (medium 4.3)
- [CVE-2007-2307](https://insights.sbomify.com/CVE-2007-2307/): Code injection in webkalk2:webkalk2 (high 7.5)
- [CVE-2007-2306](https://insights.sbomify.com/CVE-2007-2306/): Cross-site scripting in vwar:virtual war (medium 4.3)
- [CVE-2007-2305](https://insights.sbomify.com/CVE-2007-2305/): SQL injection in qdblog:qdblog (high 7.5)
- [CVE-2007-2304](https://insights.sbomify.com/CVE-2007-2304/): Path traversal in qdblog:qdblog (high 7.5)
- [CVE-2007-2303](https://insights.sbomify.com/CVE-2007-2303/): Path traversal in news manager deluxe:news manager deluxe (medium 6.8)
- [CVE-2007-2302](https://insights.sbomify.com/CVE-2007-2302/): Code injection in expow:expow (high 7.5)
- [CVE-2007-2301](https://insights.sbomify.com/CVE-2007-2301/): Code injection in arash:audiocms (high 7.5)
- [CVE-2007-2300](https://insights.sbomify.com/CVE-2007-2300/): Cross-site scripting in surat kabar:phpwebnews (medium 4.3)
- [CVE-2007-2299](https://insights.sbomify.com/CVE-2007-2299/): SQL injection in frogss:frogss cms (high 7.5)
- [CVE-2007-2298](https://insights.sbomify.com/CVE-2007-2298/): Code injection in gforge:garennes (high 7.5)
- [CVE-2007-2297](https://insights.sbomify.com/CVE-2007-2297/): Denial of service in asterisk:asterisk (high 7.8)
- [CVE-2007-2296](https://insights.sbomify.com/CVE-2007-2296/): Integer overflow in apple:quicktime (critical 9.3)
- [CVE-2007-2295](https://insights.sbomify.com/CVE-2007-2295/): Memory corruption in apple:quicktime (critical 9.3)
- [CVE-2007-2294](https://insights.sbomify.com/CVE-2007-2294/): Null dereference in asterisk:asterisk (high 7.8)
- [CVE-2007-2293](https://insights.sbomify.com/CVE-2007-2293/): Memory corruption in asterisk:asterisk (high 7.6)
- [CVE-2007-2292](https://insights.sbomify.com/CVE-2007-2292/): Other in microsoft:internet explorer (medium 4.3)
- [CVE-2007-2291](https://insights.sbomify.com/CVE-2007-2291/): Other in microsoft:internet explorer (high 7.5)
- [CVE-2007-2290](https://insights.sbomify.com/CVE-2007-2290/): Code injection in cafelog:b2 (high 7.5)
- [CVE-2007-2289](https://insights.sbomify.com/CVE-2007-2289/): Code injection in alexscriptengine:download-engine (high 7.5)
- [CVE-2007-2288](https://insights.sbomify.com/CVE-2007-2288/): Code injection in doruk100.net:doruk100net (high 7.5)
- [CVE-2007-2287](https://insights.sbomify.com/CVE-2007-2287/): Code injection in comus:comus (high 7.5)
- [CVE-2007-2286](https://insights.sbomify.com/CVE-2007-2286/): Code injection in built2go:php link portal (high 7.5)
- [CVE-2007-2285](https://insights.sbomify.com/CVE-2007-2285/): Path traversal in jack slocum:ext js (high 7.8)
- [CVE-2007-2284](https://insights.sbomify.com/CVE-2007-2284/): Memory corruption in abc-view:abc-view manager (critical 9.3)
- [CVE-2007-2283](https://insights.sbomify.com/CVE-2007-2283/): Memory corruption in freshdevices:freshview (critical 9.3)
- [CVE-2007-2282](https://insights.sbomify.com/CVE-2007-2282/): Hardcoded credentials in cisco:netflow collection engine (critical 10.0)
- [CVE-2007-2281](https://insights.sbomify.com/CVE-2007-2281/): Integer overflow in hp:openview storage data protector (critical 10.0)
- [CVE-2007-2280](https://insights.sbomify.com/CVE-2007-2280/): Memory corruption in hp:openview storage data protector (critical 10.0)
- [CVE-2007-2279](https://insights.sbomify.com/CVE-2007-2279/): Auth bypass in symantec:veritas storage foundation (critical 9.3)
- [CVE-2007-2278](https://insights.sbomify.com/CVE-2007-2278/): Code injection in dcp-portal:dcp-portal (high 7.5)
- [CVE-2007-2277](https://insights.sbomify.com/CVE-2007-2277/): Auth bypass in plogger:plogger (high 7.5)
- [CVE-2007-2276](https://insights.sbomify.com/CVE-2007-2276/): Denial of service in 3com:tippingpoint ips (high 7.8)
- [CVE-2007-2275](https://insights.sbomify.com/CVE-2007-2275/): Privilege escalation in hp:storageworks command view (medium 4.6)
- [CVE-2007-2274](https://insights.sbomify.com/CVE-2007-2274/): Denial of service in opera:opera browser (high 7.8)
- [CVE-2007-2273](https://insights.sbomify.com/CVE-2007-2273/): Code injection in alessandro lulli:wavewoo (high 7.5)
- [CVE-2007-2272](https://insights.sbomify.com/CVE-2007-2272/): Code injection in advanced webhost billing system:advanced webhost billing system (high 7.5)
- [CVE-2007-2271](https://insights.sbomify.com/CVE-2007-2271/): Path traversal in rajneel lal totaram:usp foss distribution (critical 9.4)
- [CVE-2007-2270](https://insights.sbomify.com/CVE-2007-2270/): Denial of service in linksys:spa941 (high 7.8)
- [CVE-2007-2269](https://insights.sbomify.com/CVE-2007-2269/): Path traversal in swsoft:plesk (medium 5.0)
- [CVE-2007-2268](https://insights.sbomify.com/CVE-2007-2268/): Path traversal in swsoft:plesk (medium 5.0)
- [CVE-2007-2267](https://insights.sbomify.com/CVE-2007-2267/): Denial of service in sun:cluster (medium 6.8)
- [CVE-2007-2266](https://insights.sbomify.com/CVE-2007-2266/): Path traversal in progress:webspeed messenger (critical 10.0)
- [CVE-2007-2265](https://insights.sbomify.com/CVE-2007-2265/): Cross-site scripting in phpee:ya book (medium 6.8)
- [CVE-2007-2264](https://insights.sbomify.com/CVE-2007-2264/): Memory corruption in realnetworks:realone player (critical 9.3)
- [CVE-2007-2263](https://insights.sbomify.com/CVE-2007-2263/): Memory corruption in realnetworks:realone player (critical 9.3)
- [CVE-2007-2262](https://insights.sbomify.com/CVE-2007-2262/): Code injection in sinato:jmuffin (high 7.5)
- [CVE-2007-2261](https://insights.sbomify.com/CVE-2007-2261/): Code injection in realink:c-arbre (high 7.5)
- [CVE-2007-2260](https://insights.sbomify.com/CVE-2007-2260/): Code injection in bibtex:mase (high 7.5)
- [CVE-2007-2259](https://insights.sbomify.com/CVE-2007-2259/): SQL injection in esforum:esforum (high 7.5)
- [CVE-2007-2258](https://insights.sbomify.com/CVE-2007-2258/): Code injection in phpmybibli:phpmybibli (high 7.5)
- [CVE-2007-2257](https://insights.sbomify.com/CVE-2007-2257/): Code injection in fully modded phpbb:fully modded phpbb2 (high 7.5)
- [CVE-2007-2256](https://insights.sbomify.com/CVE-2007-2256/): Cross-site scripting in tjschat:tjschat (medium 4.3)
- [CVE-2007-2255](https://insights.sbomify.com/CVE-2007-2255/): Code injection in alexscriptengine:download-engine (high 7.5)
- [CVE-2007-2254](https://insights.sbomify.com/CVE-2007-2254/): Code injection in deltascripts:php classifieds (high 7.5)
- [CVE-2007-2253](https://insights.sbomify.com/CVE-2007-2253/): Information disclosure in exponent:exponent cms (medium 5.0)
- [CVE-2007-2252](https://insights.sbomify.com/CVE-2007-2252/): Path traversal in exponent:exponent cms (medium 5.0)
- [CVE-2007-2251](https://insights.sbomify.com/CVE-2007-2251/): Privilege escalation in xaraya:xaraya (high 7.5)
- [CVE-2007-2250](https://insights.sbomify.com/CVE-2007-2250/): Information disclosure in phorum:phorum (medium 5.0)
- [CVE-2007-2249](https://insights.sbomify.com/CVE-2007-2249/): Privilege escalation in phorum:phorum (medium 6.5)
- [CVE-2007-2248](https://insights.sbomify.com/CVE-2007-2248/): Cross-site scripting in phorum:phorum (medium 4.3)
- [CVE-2007-2247](https://insights.sbomify.com/CVE-2007-2247/): SQL injection in phpmyspace:phpmyspace (high 7.5)
- [CVE-2007-2246](https://insights.sbomify.com/CVE-2007-2246/): Denial of service in sendmail:sendmail (high 7.8)
- [CVE-2007-2245](https://insights.sbomify.com/CVE-2007-2245/): Cross-site scripting in phpmyadmin:phpmyadmin (medium 6.8)
- [CVE-2007-2244](https://insights.sbomify.com/CVE-2007-2244/): Memory corruption in adobe:golive (critical 9.3)
- [CVE-2007-2243](https://insights.sbomify.com/CVE-2007-2243/): Information disclosure in openbsd:openssh (medium 5.0)
- [CVE-2007-2242](https://insights.sbomify.com/CVE-2007-2242/): Denial of service in ietf:ipv6 (high 7.8)
- [CVE-2007-2241](https://insights.sbomify.com/CVE-2007-2241/): Denial of service in isc:bind (high 7.1)
- [CVE-2007-2240](https://insights.sbomify.com/CVE-2007-2240/): Security feature bypass in lenovo:access support (medium 5.8)
- [CVE-2007-2239](https://insights.sbomify.com/CVE-2007-2239/): Memory corruption in axis:2100 network camera (critical 9.3)
- [CVE-2007-2238](https://insights.sbomify.com/CVE-2007-2238/): Memory corruption in microsoft:intelligent application gateway 2007 (critical 9.3)
- [CVE-2007-2237](https://insights.sbomify.com/CVE-2007-2237/): Denial of service in microsoft:windows xp (medium 5.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2007/page/43/
