# Vulnerabilities published in 2007


- [CVE-2007-2236](https://insights.sbomify.com/CVE-2007-2236/): Code injection in punbb:punbb (medium 6.8)
- [CVE-2007-2235](https://insights.sbomify.com/CVE-2007-2235/): Cross-site scripting in punbb:punbb (medium 4.3)
- [CVE-2007-2234](https://insights.sbomify.com/CVE-2007-2234/): Security feature bypass in punbb:punbb (high 7.5)
- [CVE-2007-2233](https://insights.sbomify.com/CVE-2007-2233/): Command injection in cosign:cosign (medium 6.5)
- [CVE-2007-2232](https://insights.sbomify.com/CVE-2007-2232/): Auth bypass in cosign:cosign (high 7.5)
- [CVE-2007-2231](https://insights.sbomify.com/CVE-2007-2231/): Path traversal in dovecot:dovecot (medium 4.3)
- [CVE-2007-2230](https://insights.sbomify.com/CVE-2007-2230/): SQL injection in broadcom:cleverpath portal (medium 6.5)
- [CVE-2007-2229](https://insights.sbomify.com/CVE-2007-2229/): Misconfiguration in microsoft:windows vista (high 7.2)
- [CVE-2007-2228](https://insights.sbomify.com/CVE-2007-2228/): Null dereference in microsoft:windows 2000 (high 7.8)
- [CVE-2007-2227](https://insights.sbomify.com/CVE-2007-2227/): Information disclosure in microsoft:outlook express (medium 4.3)
- [CVE-2007-2225](https://insights.sbomify.com/CVE-2007-2225/): Information disclosure in microsoft:outlook express (medium 4.3)
- [CVE-2007-2224](https://insights.sbomify.com/CVE-2007-2224/): Integer overflow in microsoft:office (critical 9.3)
- [CVE-2007-2223](https://insights.sbomify.com/CVE-2007-2223/): Integer overflow in microsoft:xml core services (critical 9.3)
- [CVE-2007-2222](https://insights.sbomify.com/CVE-2007-2222/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2007-2221](https://insights.sbomify.com/CVE-2007-2221/): Other in microsoft:internet explorer (critical 9.3)
- [CVE-2007-2219](https://insights.sbomify.com/CVE-2007-2219/): Other in microsoft:windows 2000 (critical 9.3)
- [CVE-2007-2218](https://insights.sbomify.com/CVE-2007-2218/): Memory corruption in microsoft:windows 2000 (critical 9.3)
- [CVE-2007-2217](https://insights.sbomify.com/CVE-2007-2217/): Memory corruption in kodak:image viewer (critical 9.3)
- [CVE-2007-2216](https://insights.sbomify.com/CVE-2007-2216/): Code injection in microsoft:internet explorer (critical 9.3)
- [CVE-2007-2214](https://insights.sbomify.com/CVE-2007-2214/): File upload in dmcms:dmcms (high 7.5)
- [CVE-2007-2213](https://insights.sbomify.com/CVE-2007-2213/): Null dereference in ipswitch:ws ftp (high 7.8)
- [CVE-2007-2212](https://insights.sbomify.com/CVE-2007-2212/): SQL injection in mybb:mybb (high 7.5)
- [CVE-2007-2211](https://insights.sbomify.com/CVE-2007-2211/): SQL injection in mybulletinboard:mybulletinboard (high 7.5)
- [CVE-2007-2210](https://insights.sbomify.com/CVE-2007-2210/): Memory corruption in netsprint:ask ie toolbar (high 7.8)
- [CVE-2007-2209](https://insights.sbomify.com/CVE-2007-2209/): Memory corruption in accusoft:imagegear (medium 6.8)
- [CVE-2007-2208](https://insights.sbomify.com/CVE-2007-2208/): Code injection in extreme phpbb:extreme phpbb (high 7.5)
- [CVE-2007-2207](https://insights.sbomify.com/CVE-2007-2207/): SQL injection in ripe website manager:ripe website manager (high 7.5)
- [CVE-2007-2206](https://insights.sbomify.com/CVE-2007-2206/): Cross-site scripting in ripe website manager:ripe website manager (medium 4.3)
- [CVE-2007-2205](https://insights.sbomify.com/CVE-2007-2205/): Code injection in lan management system:lan management system (high 7.5)
- [CVE-2007-2204](https://insights.sbomify.com/CVE-2007-2204/): Code injection in gpl php board:gpl php board (high 7.5)
- [CVE-2007-2203](https://insights.sbomify.com/CVE-2007-2203/): Cross-site scripting in big blue:guestbook (medium 4.3)
- [CVE-2007-2202](https://insights.sbomify.com/CVE-2007-2202/): Code injection in acvsws:acvsws php5 (medium 6.8)
- [CVE-2007-2201](https://insights.sbomify.com/CVE-2007-2201/): Code injection in post revolution:post revolution (high 7.5)
- [CVE-2007-2200](https://insights.sbomify.com/CVE-2007-2200/): Path traversal in pagode:pagode (critical 10.0)
- [CVE-2007-2199](https://insights.sbomify.com/CVE-2007-2199/): Code injection in cjg explorer pro:cjg explorer pro (medium 6.8)
- [CVE-2007-2198](https://insights.sbomify.com/CVE-2007-2198/): Cross-site scripting in lan management system:lan management system (medium 4.3)
- [CVE-2007-2197](https://insights.sbomify.com/CVE-2007-2197/): Race condition in brettle development:neatupload (medium 5.0)
- [CVE-2007-2196](https://insights.sbomify.com/CVE-2007-2196/): Code injection in joomla:jambook (medium 6.8)
- [CVE-2007-2195](https://insights.sbomify.com/CVE-2007-2195/): Denial of service in alvaro:alvaros messenger (medium 5.0)
- [CVE-2007-2194](https://insights.sbomify.com/CVE-2007-2194/): Memory corruption in gentoo:xnview (critical 10.0)
- [CVE-2007-2193](https://insights.sbomify.com/CVE-2007-2193/): Memory corruption in acd systems:acdsee (critical 9.3)
- [CVE-2007-2192](https://insights.sbomify.com/CVE-2007-2192/): Memory corruption in antonio da cruz:photofiltre studio (critical 9.3)
- [CVE-2007-2191](https://insights.sbomify.com/CVE-2007-2191/): Cross-site scripting in freepbx:freepbx (medium 6.8)
- [CVE-2007-2190](https://insights.sbomify.com/CVE-2007-2190/): Code injection in eba news:eba news (medium 6.8)
- [CVE-2007-2189](https://insights.sbomify.com/CVE-2007-2189/): Code injection in mx smartor:full album pack (medium 6.8)
- [CVE-2007-2188](https://insights.sbomify.com/CVE-2007-2188/): Security feature bypass in extremail:extremail (critical 10.0)
- [CVE-2007-2187](https://insights.sbomify.com/CVE-2007-2187/): Memory corruption in extremail:extremail (critical 10.0)
- [CVE-2007-2186](https://insights.sbomify.com/CVE-2007-2186/): Denial of service in foxit:pdf reader (medium 5.0)
- [CVE-2007-2185](https://insights.sbomify.com/CVE-2007-2185/): Code injection in supasite:supasite (medium 6.8)
- [CVE-2007-2184](https://insights.sbomify.com/CVE-2007-2184/): Path traversal in jchit:counter (medium 5.0)
- [CVE-2007-2183](https://insights.sbomify.com/CVE-2007-2183/): SQL injection in php-ring:webring system (high 7.5)
- [CVE-2007-2182](https://insights.sbomify.com/CVE-2007-2182/): File upload in maran:php forum (medium 6.8)
- [CVE-2007-2181](https://insights.sbomify.com/CVE-2007-2181/): Code injection in webinsta:fm manager (medium 6.8)
- [CVE-2007-2180](https://insights.sbomify.com/CVE-2007-2180/): Memory corruption in nullsoft:winamp (high 7.1)
- [CVE-2007-2179](https://insights.sbomify.com/CVE-2007-2179/): Null dereference in raiden professional servers:raidenftpd (high 7.8)
- [CVE-2007-2178](https://insights.sbomify.com/CVE-2007-2178/): Denial of service in objective development:sharity (high 7.8)
- [CVE-2007-2177](https://insights.sbomify.com/CVE-2007-2177/): Memory corruption in microgaming:download helper activex control (medium 6.8)
- [CVE-2007-2176](https://insights.sbomify.com/CVE-2007-2176/): Other in mozilla:firefox (critical 10.0)
- [CVE-2007-2175](https://insights.sbomify.com/CVE-2007-2175/): Memory corruption in apple:safari (high 7.6)
- [CVE-2007-2174](https://insights.sbomify.com/CVE-2007-2174/): Privilege escalation in checkpoint:zonealarm (high 7.2)
- [CVE-2007-2173](https://insights.sbomify.com/CVE-2007-2173/): Code injection in double precision incorporated:courier-imap (critical 10.0)
- [CVE-2007-2172](https://insights.sbomify.com/CVE-2007-2172/): Memory corruption in canonical:ubuntu linux (medium 4.7)
- [CVE-2007-2171](https://insights.sbomify.com/CVE-2007-2171/): Memory corruption in novell:groupwise (critical 10.0)
- [CVE-2007-2170](https://insights.sbomify.com/CVE-2007-2170/): Missing authorization in oracle:e-business suite (critical 9.4)
- [CVE-2007-2169](https://insights.sbomify.com/CVE-2007-2169/): Code injection in mozzers subsystem:mozzers subsystem (high 7.5)
- [CVE-2007-2168](https://insights.sbomify.com/CVE-2007-2168/): Code injection in aimstats:aimstats (high 7.5)
- [CVE-2007-2167](https://insights.sbomify.com/CVE-2007-2167/): Code injection in aimstats:aimstats (high 7.5)
- [CVE-2007-2166](https://insights.sbomify.com/CVE-2007-2166/): Code injection in opensurveypilot:opensurveypilot (medium 6.8)
- [CVE-2007-2165](https://insights.sbomify.com/CVE-2007-2165/): Auth bypass in proftpd project:proftpd (medium 5.1)
- [CVE-2007-2164](https://insights.sbomify.com/CVE-2007-2164/): Denial of service in kde:konqueror (medium 5.0)
- [CVE-2007-2163](https://insights.sbomify.com/CVE-2007-2163/): Denial of service in apple:safari (medium 5.0)
- [CVE-2007-2162](https://insights.sbomify.com/CVE-2007-2162/): Denial of service in gnu:iceweasel (high 7.8)
- [CVE-2007-2161](https://insights.sbomify.com/CVE-2007-2161/): Denial of service in microsoft:internet explorer (medium 4.3)
- [CVE-2007-2160](https://insights.sbomify.com/CVE-2007-2160/): Cross-site request forgery in drupal:database administration module (high 7.5)
- [CVE-2007-2159](https://insights.sbomify.com/CVE-2007-2159/): Cross-site scripting in drupal:database administration module (medium 4.3)
- [CVE-2007-2158](https://insights.sbomify.com/CVE-2007-2158/): Code injection in kooijman-design:jgallery (high 7.5)
- [CVE-2007-2157](https://insights.sbomify.com/CVE-2007-2157/): Path traversal in zomplog:zomplog (high 7.8)
- [CVE-2007-2156](https://insights.sbomify.com/CVE-2007-2156/): Code injection in rezervi generic:rezervi generic (high 7.5)
- [CVE-2007-2155](https://insights.sbomify.com/CVE-2007-2155/): Path traversal in phpfaber:topsites (high 7.8)
- [CVE-2007-2154](https://insights.sbomify.com/CVE-2007-2154/): Code injection in cabron connector:cabron connector (high 7.5)
- [CVE-2007-2153](https://insights.sbomify.com/CVE-2007-2153/): Cross-site scripting in atmail:atmail webmail (medium 6.8)
- [CVE-2007-2152](https://insights.sbomify.com/CVE-2007-2152/): Memory corruption in mcafee:virusscan enterprise (high 7.9)
- [CVE-2007-2151](https://insights.sbomify.com/CVE-2007-2151/): Memory corruption in mcafee:e-business server (medium 5.0)
- [CVE-2007-2150](https://insights.sbomify.com/CVE-2007-2150/): Server-side request forgery in bluearc:titan (high 7.8)
- [CVE-2007-2149](https://insights.sbomify.com/CVE-2007-2149/): Information disclosure in stephen craton:chatness (critical 10.0)
- [CVE-2007-2148](https://insights.sbomify.com/CVE-2007-2148/): Code injection in stephen craton:chatness (medium 6.5)
- [CVE-2007-2147](https://insights.sbomify.com/CVE-2007-2147/): Missing authorization in stephen craton:chatness (critical 10.0)
- [CVE-2007-2146](https://insights.sbomify.com/CVE-2007-2146/): Code injection in minigal:minigal (high 7.5)
- [CVE-2007-2145](https://insights.sbomify.com/CVE-2007-2145/): Code injection in minigal:minigal (high 7.5)
- [CVE-2007-2144](https://insights.sbomify.com/CVE-2007-2144/): Code injection in joomlapack:joomlapack (medium 6.8)
- [CVE-2007-2143](https://insights.sbomify.com/CVE-2007-2143/): Code injection in bonoestente:joomla template be2004-2 (high 7.5)
- [CVE-2007-2142](https://insights.sbomify.com/CVE-2007-2142/): Code injection in ajportal2php:ajportal2php (high 7.5)
- [CVE-2007-2141](https://insights.sbomify.com/CVE-2007-2141/): Code injection in shoutpro:shoutpro (high 7.5)
- [CVE-2007-2140](https://insights.sbomify.com/CVE-2007-2140/): Code injection in franklin huang:flip-search-add-on (high 7.5)
- [CVE-2007-2139](https://insights.sbomify.com/CVE-2007-2139/): Memory corruption in broadcom:brightstor arcserve backup (critical 10.0)
- [CVE-2007-2138](https://insights.sbomify.com/CVE-2007-2138/): Privilege escalation in canonical:ubuntu linux (medium 6.0)
- [CVE-2007-2137](https://insights.sbomify.com/CVE-2007-2137/): Memory corruption in ibm:tivoli monitoring express (critical 10.0)
- [CVE-2007-2136](https://insights.sbomify.com/CVE-2007-2136/): Memory corruption in bmc:patrol perform agent (high 7.5)
- [CVE-2007-2135](https://insights.sbomify.com/CVE-2007-2135/): Missing authorization in oracle:e-business suite (high 7.8)
- [CVE-2007-2134](https://insights.sbomify.com/CVE-2007-2134/): Other in oracle:enterpriseone (high 7.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2007/page/44/