# Vulnerabilities published in 2007


- [CVE-2007-1933](https://insights.sbomify.com/CVE-2007-1933/): Path traversal in dreamcodes:pcp-guestbook (high 7.5)
- [CVE-2007-1932](https://insights.sbomify.com/CVE-2007-1932/): Path traversal in scar4u:scarnews (high 7.5)
- [CVE-2007-1931](https://insights.sbomify.com/CVE-2007-1931/): SQL injection in smodcms:smodcms (high 7.5)
- [CVE-2007-1930](https://insights.sbomify.com/CVE-2007-1930/): Path traversal in cattadoc:cattadoc (high 7.8)
- [CVE-2007-1929](https://insights.sbomify.com/CVE-2007-1929/): Path traversal in gna:beryo (medium 5.0)
- [CVE-2007-1928](https://insights.sbomify.com/CVE-2007-1928/): Path traversal in witshare:witshare (high 7.5)
- [CVE-2007-1927](https://insights.sbomify.com/CVE-2007-1927/): Cross-site scripting in youngzsoft:cmailserver (medium 4.3)
- [CVE-2007-1926](https://insights.sbomify.com/CVE-2007-1926/): Cross-site scripting in directadmin:directadmin (medium 6.8)
- [CVE-2007-1925](https://insights.sbomify.com/CVE-2007-1925/): Missing authorization in tru-zone:nukeet (medium 6.5)
- [CVE-2007-1924](https://insights.sbomify.com/CVE-2007-1924/): Code injection in phpcontact:phpcontact (medium 6.8)
- [CVE-2007-1923](https://insights.sbomify.com/CVE-2007-1923/): Missing authorization in ledgersmb:ledgersmb (high 7.5)
- [CVE-2007-1922](https://insights.sbomify.com/CVE-2007-1922/): Memory corruption in nullsoft:winamp (critical 9.3)
- [CVE-2007-1921](https://insights.sbomify.com/CVE-2007-1921/): Memory corruption in nullsoft:winamp (critical 9.3)
- [CVE-2007-1920](https://insights.sbomify.com/CVE-2007-1920/): SQL injection in smodbip:smodbip (high 7.5)
- [CVE-2007-1919](https://insights.sbomify.com/CVE-2007-1919/): Cross-site scripting in arizona-dream:livre d or livor (medium 4.3)
- [CVE-2007-1918](https://insights.sbomify.com/CVE-2007-1918/): Denial of service in sap:rfc library (medium 5.0)
- [CVE-2007-1917](https://insights.sbomify.com/CVE-2007-1917/): Memory corruption in sap:rfc library (critical 10.0)
- [CVE-2007-1916](https://insights.sbomify.com/CVE-2007-1916/): Memory corruption in sap:rfc library (critical 10.0)
- [CVE-2007-1915](https://insights.sbomify.com/CVE-2007-1915/): Memory corruption in sap:rfc library (high 7.5)
- [CVE-2007-1914](https://insights.sbomify.com/CVE-2007-1914/): Information disclosure in sap:rfc library (high 7.8)
- [CVE-2007-1913](https://insights.sbomify.com/CVE-2007-1913/): Information disclosure in sap:rfc library (medium 5.0)
- [CVE-2007-1912](https://insights.sbomify.com/CVE-2007-1912/): Memory corruption in microsoft:windows 2000 (medium 6.8)
- [CVE-2007-1911](https://insights.sbomify.com/CVE-2007-1911/): Denial of service in microsoft:word (high 7.1)
- [CVE-2007-1910](https://insights.sbomify.com/CVE-2007-1910/): Memory corruption in microsoft:word (medium 6.8)
- [CVE-2007-1909](https://insights.sbomify.com/CVE-2007-1909/): SQL injection in ryan haudenschilt:battle.net clan script (high 7.5)
- [CVE-2007-1908](https://insights.sbomify.com/CVE-2007-1908/): Code injection in php121:php121 instant messenger (medium 6.8)
- [CVE-2007-1907](https://insights.sbomify.com/CVE-2007-1907/): Code injection in pathos:content management system (medium 6.8)
- [CVE-2007-1906](https://insights.sbomify.com/CVE-2007-1906/): Path traversal in ecardmax.com:hot editor (medium 6.8)
- [CVE-2007-1905](https://insights.sbomify.com/CVE-2007-1905/): Cross-site scripting in pineapple technologies:quizshock (medium 4.3)
- [CVE-2007-1904](https://insights.sbomify.com/CVE-2007-1904/): Path traversal in aol:icq (medium 4.3)
- [CVE-2007-1903](https://insights.sbomify.com/CVE-2007-1903/): Cross-site scripting in sonicbb:sonicbb (low 2.6)
- [CVE-2007-1902](https://insights.sbomify.com/CVE-2007-1902/): SQL injection in sonicbb:sonicbb (medium 6.8)
- [CVE-2007-1901](https://insights.sbomify.com/CVE-2007-1901/): Information disclosure in sonicbb:sonicbb (medium 4.3)
- [CVE-2007-1900](https://insights.sbomify.com/CVE-2007-1900/): Other in php:php (medium 5.0)
- [CVE-2007-1899](https://insights.sbomify.com/CVE-2007-1899/): SQL injection in mywebland:mybloggie (medium 5.1)
- [CVE-2007-1898](https://insights.sbomify.com/CVE-2007-1898/): Business logic in jetbox:jetbox cms (medium 5.8)
- [CVE-2007-1897](https://insights.sbomify.com/CVE-2007-1897/): SQL injection in wordpress:wordpress (medium 6.5)
- [CVE-2007-1896](https://insights.sbomify.com/CVE-2007-1896/): Path traversal in sky gunning:myspeach (medium 5.8)
- [CVE-2007-1895](https://insights.sbomify.com/CVE-2007-1895/): Code injection in sky gunning:myspeach (medium 6.8)
- [CVE-2007-1894](https://insights.sbomify.com/CVE-2007-1894/): Cross-site scripting in wordpress:wordpress (medium 4.3)
- [CVE-2007-1893](https://insights.sbomify.com/CVE-2007-1893/): Missing authorization in wordpress:wordpress (medium 4.9)
- [CVE-2007-1892](https://insights.sbomify.com/CVE-2007-1892/): Memory corruption in akamai technologies:download manager (critical 9.3)
- [CVE-2007-1891](https://insights.sbomify.com/CVE-2007-1891/): Memory corruption in akamai technologies:download manager (critical 9.3)
- [CVE-2007-1890](https://insights.sbomify.com/CVE-2007-1890/): Integer overflow in php:php (high 7.5)
- [CVE-2007-1889](https://insights.sbomify.com/CVE-2007-1889/): Integer overflow in php:php (high 7.5)
- [CVE-2007-1888](https://insights.sbomify.com/CVE-2007-1888/): Memory corruption in php:php (high 7.5)
- [CVE-2007-1887](https://insights.sbomify.com/CVE-2007-1887/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2007-1886](https://insights.sbomify.com/CVE-2007-1886/): Integer overflow in php:php (medium 6.8)
- [CVE-2007-1885](https://insights.sbomify.com/CVE-2007-1885/): Integer overflow in php:php (high 7.5)
- [CVE-2007-1884](https://insights.sbomify.com/CVE-2007-1884/): Integer overflow in php:php (medium 6.8)
- [CVE-2007-1883](https://insights.sbomify.com/CVE-2007-1883/): Memory corruption in php:php (high 7.8)
- [CVE-2007-1882](https://insights.sbomify.com/CVE-2007-1882/): SQL injection in hp:mercury quality center (medium 6.5)
- [CVE-2007-1881](https://insights.sbomify.com/CVE-2007-1881/): Privilege escalation in kaspersky lab:kaspersky anti-virus (medium 6.8)
- [CVE-2007-1880](https://insights.sbomify.com/CVE-2007-1880/): Integer overflow in kaspersky lab:kaspersky anti-virus (medium 6.6)
- [CVE-2007-1879](https://insights.sbomify.com/CVE-2007-1879/): Information disclosure in kaspersky lab:kaspersky anti-virus (critical 9.3)
- [CVE-2007-1878](https://insights.sbomify.com/CVE-2007-1878/): Cross-site scripting in parakey inc.:firebug (medium 6.8)
- [CVE-2007-1877](https://insights.sbomify.com/CVE-2007-1877/): Denial of service in vmware:workstation (high 7.8)
- [CVE-2007-1876](https://insights.sbomify.com/CVE-2007-1876/): Other in vmware:workstation (high 7.2)
- [CVE-2007-1874](https://insights.sbomify.com/CVE-2007-1874/): Misconfiguration in adobe:coldfusion (high 7.2)
- [CVE-2007-1873](https://insights.sbomify.com/CVE-2007-1873/): Cross-site scripting in mephisto:mephisto (medium 4.3)
- [CVE-2007-1872](https://insights.sbomify.com/CVE-2007-1872/): Cross-site scripting in toenda software development:toendacms (medium 4.3)
- [CVE-2007-1871](https://insights.sbomify.com/CVE-2007-1871/): Cross-site scripting in chcounter:chcounter (medium 4.3)
- [CVE-2007-1870](https://insights.sbomify.com/CVE-2007-1870/): Null dereference in lighttpd:lighttpd (high 7.8)
- [CVE-2007-1869](https://insights.sbomify.com/CVE-2007-1869/): Denial of service in lighttpd:lighttpd (medium 5.0)
- [CVE-2007-1868](https://insights.sbomify.com/CVE-2007-1868/): Memory corruption in ibm:tivoli provisioning manager os deployment (critical 10.0)
- [CVE-2007-1867](https://insights.sbomify.com/CVE-2007-1867/): Memory corruption in irfanview:irfanview (critical 10.0)
- [CVE-2007-1866](https://insights.sbomify.com/CVE-2007-1866/): Memory corruption in dproxy:dproxy (critical 10.0)
- [CVE-2007-1865](https://insights.sbomify.com/CVE-2007-1865/): Information disclosure in redhat:enterprise linux (low 1.9)
- [CVE-2007-1864](https://insights.sbomify.com/CVE-2007-1864/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2007-1863](https://insights.sbomify.com/CVE-2007-1863/): Denial of service in apache:http server (medium 5.0)
- [CVE-2007-1862](https://insights.sbomify.com/CVE-2007-1862/): Information disclosure in apache:http server (medium 5.0)
- [CVE-2007-1861](https://insights.sbomify.com/CVE-2007-1861/): Denial of service in linux:linux kernel (medium 4.9)
- [CVE-2007-1860](https://insights.sbomify.com/CVE-2007-1860/): Path traversal in apache:tomcat jk web server connector (medium 5.0)
- [CVE-2007-1859](https://insights.sbomify.com/CVE-2007-1859/): Auth bypass in xscreensaver:xscreensaver (medium 4.6)
- [CVE-2007-1858](https://insights.sbomify.com/CVE-2007-1858/): Weak cryptography in apache:tomcat (low 2.6)
- [CVE-2007-1856](https://insights.sbomify.com/CVE-2007-1856/): Misconfiguration in paul vixie:vixie cron (low 2.1)
- [CVE-2007-1855](https://insights.sbomify.com/CVE-2007-1855/): Code injection in webasyst llc:shop-script (high 7.5)
- [CVE-2007-1854](https://insights.sbomify.com/CVE-2007-1854/): Other in hitachi:cosminexus component container (medium 5.0)
- [CVE-2007-1853](https://insights.sbomify.com/CVE-2007-1853/): Information disclosure in hitachi:jp1-hicommand device manager (medium 5.0)
- [CVE-2007-1852](https://insights.sbomify.com/CVE-2007-1852/): Code injection in ben3w:2bgal (medium 6.8)
- [CVE-2007-1851](https://insights.sbomify.com/CVE-2007-1851/): Path traversal in really simple php and ajax:really simple php and ajax (high 7.5)
- [CVE-2007-1850](https://insights.sbomify.com/CVE-2007-1850/): Path traversal in drake team:drake cms (medium 5.0)
- [CVE-2007-1849](https://insights.sbomify.com/CVE-2007-1849/): Path traversal in drake team:drake cms (high 7.5)
- [CVE-2007-1848](https://insights.sbomify.com/CVE-2007-1848/): Cross-site scripting in drake team:drake cms (medium 4.3)
- [CVE-2007-1847](https://insights.sbomify.com/CVE-2007-1847/): SQL injection in xoops:repository module (high 7.5)
- [CVE-2007-1846](https://insights.sbomify.com/CVE-2007-1846/): SQL injection in xoops:malaika system myads module (high 7.5)
- [CVE-2007-1845](https://insights.sbomify.com/CVE-2007-1845/): SQL injection in php fusion:expanded calendar module (high 7.5)
- [CVE-2007-1844](https://insights.sbomify.com/CVE-2007-1844/): Code injection in avatic:aardvark topsites php (high 7.5)
- [CVE-2007-1843](https://insights.sbomify.com/CVE-2007-1843/): Code injection in maptools:maplab (medium 6.8)
- [CVE-2007-1842](https://insights.sbomify.com/CVE-2007-1842/): Path traversal in jsboard:jsboard (high 7.5)
- [CVE-2007-1841](https://insights.sbomify.com/CVE-2007-1841/): Denial of service in ipsec-tools:ipsec-tools (medium 4.3)
- [CVE-2007-1840](https://insights.sbomify.com/CVE-2007-1840/): Cross-site scripting in ldap account manager:ldap account manager (medium 4.3)
- [CVE-2007-1839](https://insights.sbomify.com/CVE-2007-1839/): Code injection in codebb:codebb (high 7.5)
- [CVE-2007-1838](https://insights.sbomify.com/CVE-2007-1838/): SQL injection in xoops:friendfinder module (high 7.5)
- [CVE-2007-1837](https://insights.sbomify.com/CVE-2007-1837/): Code injection in mangobery cms:mangobery cms (high 7.5)
- [CVE-2007-1836](https://insights.sbomify.com/CVE-2007-1836/): Command injection in data domain:data domain os (critical 9.0)
- [CVE-2007-1835](https://insights.sbomify.com/CVE-2007-1835/): Security feature bypass in php:php (medium 4.6)
- [CVE-2007-1834](https://insights.sbomify.com/CVE-2007-1834/): Denial of service in cisco:unified callmanager (high 7.8)
- [CVE-2007-1833](https://insights.sbomify.com/CVE-2007-1833/): Denial of service in cisco:unified callmanager (medium 5.0)
- [CVE-2007-1832](https://insights.sbomify.com/CVE-2007-1832/): File upload in web-app.org:webapp (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2007/page/47/