# Vulnerabilities published in 2007


- [CVE-2007-1513](https://insights.sbomify.com/CVE-2007-1513/): Code injection in grafx:company website builder pro (medium 6.8)
- [CVE-2007-1512](https://insights.sbomify.com/CVE-2007-1512/): Memory corruption in microsoft:visual studio .net (critical 10.0)
- [CVE-2007-1511](https://insights.sbomify.com/CVE-2007-1511/): Memory corruption in frontbase:relational database server (high 7.1)
- [CVE-2007-1510](https://insights.sbomify.com/CVE-2007-1510/): SQL injection in particle blogger:particle blogger (high 7.5)
- [CVE-2007-1509](https://insights.sbomify.com/CVE-2007-1509/): Path traversal in holtstraeter:rot 13 (medium 4.3)
- [CVE-2007-1508](https://insights.sbomify.com/CVE-2007-1508/): Cross-site scripting in directadmin:directadmin (medium 4.3)
- [CVE-2007-1507](https://insights.sbomify.com/CVE-2007-1507/): Privilege escalation in openafs:openafs (high 7.5)
- [CVE-2007-1506](https://insights.sbomify.com/CVE-2007-1506/): Cross-site scripting in oracle:application server portal (medium 4.3)
- [CVE-2007-1505](https://insights.sbomify.com/CVE-2007-1505/): Weak cryptography in fujitsu:fence (low 2.1)
- [CVE-2007-1504](https://insights.sbomify.com/CVE-2007-1504/): Cross-site scripting in fujitsu:interstage application server (medium 4.3)
- [CVE-2007-1503](https://insights.sbomify.com/CVE-2007-1503/): Memory corruption in rhapsody irc:rhapsody irc (high 7.5)
- [CVE-2007-1502](https://insights.sbomify.com/CVE-2007-1502/): Memory corruption in rhapsody irc:rhapsody irc (medium 6.8)
- [CVE-2007-1501](https://insights.sbomify.com/CVE-2007-1501/): Memory corruption in avant force:avant browser (critical 9.3)
- [CVE-2007-1500](https://insights.sbomify.com/CVE-2007-1500/): Race condition in gentoo:linux (medium 4.3)
- [CVE-2007-1499](https://insights.sbomify.com/CVE-2007-1499/): Cross-site scripting in microsoft:ie (medium 4.3)
- [CVE-2007-1498](https://insights.sbomify.com/CVE-2007-1498/): Memory corruption in mcafee:epolicy orchestrator (critical 9.3)
- [CVE-2007-1497](https://insights.sbomify.com/CVE-2007-1497/): Security feature bypass in linux:linux kernel (medium 5.0)
- [CVE-2007-1496](https://insights.sbomify.com/CVE-2007-1496/): Null dereference in linux:linux kernel (medium 4.9)
- [CVE-2007-1495](https://insights.sbomify.com/CVE-2007-1495/): Denial of service in symantec:norton personal firewall (medium 4.9)
- [CVE-2007-1494](https://insights.sbomify.com/CVE-2007-1494/): Cross-site scripting in nukescripts:nukesentinel (medium 6.8)
- [CVE-2007-1493](https://insights.sbomify.com/CVE-2007-1493/): SQL injection in nukescripts:nukesentinel (high 7.5)
- [CVE-2007-1492](https://insights.sbomify.com/CVE-2007-1492/): Denial of service in microsoft:windows xp (high 7.1)
- [CVE-2007-1491](https://insights.sbomify.com/CVE-2007-1491/): Misconfiguration in avaya:s8300 (medium 5.2)
- [CVE-2007-1490](https://insights.sbomify.com/CVE-2007-1490/): Command injection in avaya:communication manager (medium 6.0)
- [CVE-2007-1489](https://insights.sbomify.com/CVE-2007-1489/): Cross-site request forgery in web-app.org:webapp (medium 6.8)
- [CVE-2007-1488](https://insights.sbomify.com/CVE-2007-1488/): Other in sun:java system web server (high 7.5)
- [CVE-2007-1487](https://insights.sbomify.com/CVE-2007-1487/): Path traversal in cyber inside:weblog (medium 5.0)
- [CVE-2007-1486](https://insights.sbomify.com/CVE-2007-1486/): Code injection in carbonize:lazarus guestbook (critical 10.0)
- [CVE-2007-1485](https://insights.sbomify.com/CVE-2007-1485/): Memory corruption in ftplib:ftplib (critical 10.0)
- [CVE-2007-1484](https://insights.sbomify.com/CVE-2007-1484/): Memory corruption in php:php (medium 4.6)
- [CVE-2007-1483](https://insights.sbomify.com/CVE-2007-1483/): Code injection in k5n:webcalendar (high 7.5)
- [CVE-2007-1482](https://insights.sbomify.com/CVE-2007-1482/): Cross-site scripting in liqua:wbblog (medium 4.3)
- [CVE-2007-1481](https://insights.sbomify.com/CVE-2007-1481/): SQL injection in wbblog:wbblog (high 7.5)
- [CVE-2007-1480](https://insights.sbomify.com/CVE-2007-1480/): Missing authorization in creative guestbook:creative guestbook (high 7.5)
- [CVE-2007-1479](https://insights.sbomify.com/CVE-2007-1479/): Cross-site scripting in creative guestbook:creative guestbook (medium 4.3)
- [CVE-2007-1478](https://insights.sbomify.com/CVE-2007-1478/): Path traversal in mcgallery:mcgallery (medium 5.0)
- [CVE-2007-1477](https://insights.sbomify.com/CVE-2007-1477/): Path traversal in oscommerce:php point of sale (high 7.5)
- [CVE-2007-1476](https://insights.sbomify.com/CVE-2007-1476/): Denial of service in symantec:client security (low 1.9)
- [CVE-2007-1475](https://insights.sbomify.com/CVE-2007-1475/): Memory corruption in php:php (medium 5.4)
- [CVE-2007-1474](https://insights.sbomify.com/CVE-2007-1474/): Command injection in horde:horde application framework (medium 6.8)
- [CVE-2007-1473](https://insights.sbomify.com/CVE-2007-1473/): Cross-site scripting in horde:horde application framework (medium 4.3)
- [CVE-2007-1472](https://insights.sbomify.com/CVE-2007-1472/): Code injection in t-systems solutions for research gmbh:groupit (medium 6.8)
- [CVE-2007-1471](https://insights.sbomify.com/CVE-2007-1471/): Auth bypass in orion-blog:orion-blog (high 7.5)
- [CVE-2007-1470](https://insights.sbomify.com/CVE-2007-1470/): Memory corruption in netsw:libftp (medium 6.8)
- [CVE-2007-1469](https://insights.sbomify.com/CVE-2007-1469/): SQL injection in xigla:absolute image gallery xe (high 7.5)
- [CVE-2007-1468](https://insights.sbomify.com/CVE-2007-1468/): Cross-site scripting in ibm:rational clearquest (medium 4.3)
- [CVE-2007-1467](https://insights.sbomify.com/CVE-2007-1467/): Cross-site scripting in cisco:acs solution engine (low 3.5)
- [CVE-2007-1466](https://insights.sbomify.com/CVE-2007-1466/): Integer overflow in sourceforge:wordperfect document importer-exporter (medium 6.8)
- [CVE-2007-1465](https://insights.sbomify.com/CVE-2007-1465/): Memory corruption in dproxy:dproxy (critical 10.0)
- [CVE-2007-1464](https://insights.sbomify.com/CVE-2007-1464/): Memory corruption in inkscape:inkscape (medium 6.8)
- [CVE-2007-1463](https://insights.sbomify.com/CVE-2007-1463/): Memory corruption in inkscape:inkscape (medium 6.8)
- [CVE-2007-1462](https://insights.sbomify.com/CVE-2007-1462/): Information disclosure in conga:conga (medium 4.3)
- [CVE-2007-1461](https://insights.sbomify.com/CVE-2007-1461/): Security feature bypass in php:php (high 7.8)
- [CVE-2007-1460](https://insights.sbomify.com/CVE-2007-1460/): Security feature bypass in php:php (medium 5.0)
- [CVE-2007-1459](https://insights.sbomify.com/CVE-2007-1459/): Code injection in webcreator:webcreator (medium 6.8)
- [CVE-2007-1458](https://insights.sbomify.com/CVE-2007-1458/): Code injection in care2x:care2x (medium 6.8)
- [CVE-2007-1457](https://insights.sbomify.com/CVE-2007-1457/): Memory corruption in christian scheurer:unrarlib (critical 10.0)
- [CVE-2007-1456](https://insights.sbomify.com/CVE-2007-1456/): Code injection in phpalbum.net:phpalbum (high 7.5)
- [CVE-2007-1455](https://insights.sbomify.com/CVE-2007-1455/): Path traversal in cpanel-host:fantastico de luxe (critical 9.0)
- [CVE-2007-1454](https://insights.sbomify.com/CVE-2007-1454/): Cross-site scripting in php:php (medium 4.3)
- [CVE-2007-1453](https://insights.sbomify.com/CVE-2007-1453/): Memory corruption in php:php (high 7.5)
- [CVE-2007-1452](https://insights.sbomify.com/CVE-2007-1452/): Security feature bypass in php:php (medium 5.0)
- [CVE-2007-1451](https://insights.sbomify.com/CVE-2007-1451/): Missing authorization in guppy:guppy (medium 6.4)
- [CVE-2007-1450](https://insights.sbomify.com/CVE-2007-1450/): SQL injection in phpnuke:php-nuke (high 7.5)
- [CVE-2007-1449](https://insights.sbomify.com/CVE-2007-1449/): Path traversal in phpnuke:php-nuke (medium 4.3)
- [CVE-2007-1448](https://insights.sbomify.com/CVE-2007-1448/): Denial of service in broadcom:brightstor arcserve backup (low 2.1)
- [CVE-2007-1447](https://insights.sbomify.com/CVE-2007-1447/): Memory corruption in broadcom:brightstor arcserve backup (critical 10.0)
- [CVE-2007-1446](https://insights.sbomify.com/CVE-2007-1446/): Code injection in danny ho:oes (high 7.5)
- [CVE-2007-1445](https://insights.sbomify.com/CVE-2007-1445/): SQL injection in betaparticle:betaparticle blog (high 7.5)
- [CVE-2007-1444](https://insights.sbomify.com/CVE-2007-1444/): Race condition in netperf:netperf (medium 4.4)
- [CVE-2007-1443](https://insights.sbomify.com/CVE-2007-1443/): Cross-site scripting in woltlab:burning board (medium 4.3)
- [CVE-2007-1442](https://insights.sbomify.com/CVE-2007-1442/): Privilege escalation in oracle:database server (high 7.2)
- [CVE-2007-1441](https://insights.sbomify.com/CVE-2007-1441/): Denial of service in rim:blackberry (medium 4.3)
- [CVE-2007-1440](https://insights.sbomify.com/CVE-2007-1440/): SQL injection in jgbbs:jgbbs (high 7.5)
- [CVE-2007-1439](https://insights.sbomify.com/CVE-2007-1439/): Code injection in bitesser:mysql commander (critical 9.3)
- [CVE-2007-1438](https://insights.sbomify.com/CVE-2007-1438/): SQL injection in x-ice:news system (high 7.5)
- [CVE-2007-1437](https://insights.sbomify.com/CVE-2007-1437/): Code injection in ledgersmb:ledgersmb (critical 9.0)
- [CVE-2007-1436](https://insights.sbomify.com/CVE-2007-1436/): Auth bypass in ledgersmb:ledgersmb (high 7.5)
- [CVE-2007-1435](https://insights.sbomify.com/CVE-2007-1435/): Memory corruption in d-link:tftp server (critical 10.0)
- [CVE-2007-1434](https://insights.sbomify.com/CVE-2007-1434/): SQL injection in grayscale:grayscale blog (high 7.5)
- [CVE-2007-1433](https://insights.sbomify.com/CVE-2007-1433/): Cross-site scripting in grayscale:grayscale blog (medium 4.3)
- [CVE-2007-1432](https://insights.sbomify.com/CVE-2007-1432/): Missing authorization in grayscale:grayscale blog (high 7.5)
- [CVE-2007-1431](https://insights.sbomify.com/CVE-2007-1431/): Denial of service in pennmush:pennmush (high 7.8)
- [CVE-2007-1430](https://insights.sbomify.com/CVE-2007-1430/): Code injection in clip-share:clipshare (high 7.5)
- [CVE-2007-1429](https://insights.sbomify.com/CVE-2007-1429/): Code injection in moodle:moodle (high 7.5)
- [CVE-2007-1428](https://insights.sbomify.com/CVE-2007-1428/): SQL injection in php labs:jobsitepro (high 7.5)
- [CVE-2007-1427](https://insights.sbomify.com/CVE-2007-1427/): Path traversal in assetman:assetman (medium 5.0)
- [CVE-2007-1426](https://insights.sbomify.com/CVE-2007-1426/): Denial of service in astrocam:astrocam (high 7.8)
- [CVE-2007-1425](https://insights.sbomify.com/CVE-2007-1425/): SQL injection in triexa:sonicmailer pro (high 7.5)
- [CVE-2007-1424](https://insights.sbomify.com/CVE-2007-1424/): Code injection in softnews media group:datalife engine (high 7.5)
- [CVE-2007-1423](https://insights.sbomify.com/CVE-2007-1423/): Code injection in work system e-commerce:work system e-commerce (critical 9.3)
- [CVE-2007-1422](https://insights.sbomify.com/CVE-2007-1422/): SQL injection in duyuru scripti:duyuru scripti (high 7.5)
- [CVE-2007-1421](https://insights.sbomify.com/CVE-2007-1421/): Code injection in premod subdog:premod subdog (critical 10.0)
- [CVE-2007-1420](https://insights.sbomify.com/CVE-2007-1420/): Null dereference in mysql:mysql (low 2.1)
- [CVE-2007-1419](https://insights.sbomify.com/CVE-2007-1419/): Security feature bypass in sun:java dynamic management kit (medium 4.3)
- [CVE-2007-1418](https://insights.sbomify.com/CVE-2007-1418/): Cross-site scripting in mindtouch:dekiwiki (medium 4.3)
- [CVE-2007-1417](https://insights.sbomify.com/CVE-2007-1417/): SQL injection in hc design:newssystem (high 7.5)
- [CVE-2007-1416](https://insights.sbomify.com/CVE-2007-1416/): Code injection in jccorp:urlshrink (critical 10.0)
- [CVE-2007-1415](https://insights.sbomify.com/CVE-2007-1415/): Code injection in pmb services:pmb services (high 7.5)
- [CVE-2007-1414](https://insights.sbomify.com/CVE-2007-1414/): Code injection in coppermine:coppermine photo gallery (critical 10.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2007/page/51/