# Vulnerabilities published in 2007


- [CVE-2007-1188](https://insights.sbomify.com/CVE-2007-1188/): Other in web-app.org:webapp (high 7.5)
- [CVE-2007-1187](https://insights.sbomify.com/CVE-2007-1187/): Information disclosure in web-app.org:webapp (medium 5.5)
- [CVE-2007-1186](https://insights.sbomify.com/CVE-2007-1186/): Other in web-app.org:webapp (medium 5.0)
- [CVE-2007-1185](https://insights.sbomify.com/CVE-2007-1185/): Other in web-app.org:webapp (medium 5.0)
- [CVE-2007-1184](https://insights.sbomify.com/CVE-2007-1184/): Misconfiguration in web-app.org:webapp (medium 5.0)
- [CVE-2007-1183](https://insights.sbomify.com/CVE-2007-1183/): Other in web-app.org:webapp (high 7.5)
- [CVE-2007-1182](https://insights.sbomify.com/CVE-2007-1182/): Missing authorization in web-app.org:webapp (medium 6.4)
- [CVE-2007-1181](https://insights.sbomify.com/CVE-2007-1181/): Other in web-app.org:webapp (medium 5.0)
- [CVE-2007-1180](https://insights.sbomify.com/CVE-2007-1180/): Cross-site request forgery in web-app.org:webapp (medium 4.3)
- [CVE-2007-1179](https://insights.sbomify.com/CVE-2007-1179/): Other in web-app.org:webapp (medium 5.0)
- [CVE-2007-1178](https://insights.sbomify.com/CVE-2007-1178/): Missing authorization in web-app.org:webapp (high 7.5)
- [CVE-2007-1177](https://insights.sbomify.com/CVE-2007-1177/): Cross-site scripting in web-app.org:webapp (medium 5.8)
- [CVE-2007-1176](https://insights.sbomify.com/CVE-2007-1176/): Cross-site scripting in web-app.org:webapp (medium 4.3)
- [CVE-2007-1175](https://insights.sbomify.com/CVE-2007-1175/): Cross-site scripting in web-app.org:webapp (medium 4.3)
- [CVE-2007-1174](https://insights.sbomify.com/CVE-2007-1174/): Cross-site scripting in web-app.org:webapp (medium 4.3)
- [CVE-2007-1173](https://insights.sbomify.com/CVE-2007-1173/): Memory corruption in centennial:discovery (critical 10.0)
- [CVE-2007-1172](https://insights.sbomify.com/CVE-2007-1172/): SQL injection in nukescripts:nukesentinel (medium 6.4)
- [CVE-2007-1171](https://insights.sbomify.com/CVE-2007-1171/): SQL injection in nukescripts:nukesentinel (high 7.5)
- [CVE-2007-1170](https://insights.sbomify.com/CVE-2007-1170/): Denial of service in simbin:gt legends (medium 5.0)
- [CVE-2007-1169](https://insights.sbomify.com/CVE-2007-1169/): Weak cryptography in trend micro:serverprotect (medium 5.0)
- [CVE-2007-1168](https://insights.sbomify.com/CVE-2007-1168/): Auth bypass in trend micro:serverprotect (high 7.5)
- [CVE-2007-1167](https://insights.sbomify.com/CVE-2007-1167/): Information disclosure in dzcp:dev\!l\'z clanportal (medium 5.0)
- [CVE-2007-1166](https://insights.sbomify.com/CVE-2007-1166/): SQL injection in nabocorp:nabopoll (high 7.5)
- [CVE-2007-1165](https://insights.sbomify.com/CVE-2007-1165/): Code injection in dbscripts:dbguestbook (high 7.5)
- [CVE-2007-1164](https://insights.sbomify.com/CVE-2007-1164/): Code injection in dbscripts:dbimagegallery (high 7.5)
- [CVE-2007-1163](https://insights.sbomify.com/CVE-2007-1163/): SQL injection in webspell:webspell (high 7.5)
- [CVE-2007-1162](https://insights.sbomify.com/CVE-2007-1162/): Denial of service in common controls replacement project:browsedialog server (high 7.8)
- [CVE-2007-1161](https://insights.sbomify.com/CVE-2007-1161/): Cross-site scripting in call center software:call center software (medium 4.3)
- [CVE-2007-1160](https://insights.sbomify.com/CVE-2007-1160/): Auth bypass in webspell:webspell (critical 10.0)
- [CVE-2007-1159](https://insights.sbomify.com/CVE-2007-1159/): Cross-site scripting in pyrophobia:pyrophobia (medium 4.3)
- [CVE-2007-1158](https://insights.sbomify.com/CVE-2007-1158/): Path traversal in postnuke software foundation:pagesetter (medium 5.0)
- [CVE-2007-1157](https://insights.sbomify.com/CVE-2007-1157/): Cross-site request forgery in jboss:jboss (high 7.6)
- [CVE-2007-1156](https://insights.sbomify.com/CVE-2007-1156/): Auth bypass in man machine systems:jbrowser (high 7.5)
- [CVE-2007-1155](https://insights.sbomify.com/CVE-2007-1155/): File upload in webspell:webspell (medium 4.6)
- [CVE-2007-1154](https://insights.sbomify.com/CVE-2007-1154/): SQL injection in webspell:webspell (medium 6.8)
- [CVE-2007-1153](https://insights.sbomify.com/CVE-2007-1153/): Code injection in cutephp:cutenews (high 7.5)
- [CVE-2007-1152](https://insights.sbomify.com/CVE-2007-1152/): Path traversal in pyrophobia:pyrophobia (medium 5.0)
- [CVE-2007-1151](https://insights.sbomify.com/CVE-2007-1151/): Cross-site scripting in lovecms:lovecms (medium 4.3)
- [CVE-2007-1150](https://insights.sbomify.com/CVE-2007-1150/): File upload in lovecms:lovecms (low 3.6)
- [CVE-2007-1149](https://insights.sbomify.com/CVE-2007-1149/): Path traversal in lovecms:lovecms (medium 5.0)
- [CVE-2007-1148](https://insights.sbomify.com/CVE-2007-1148/): Code injection in lovecms:lovecms (high 7.5)
- [CVE-2007-1147](https://insights.sbomify.com/CVE-2007-1147/): Code injection in hbm:hbm (high 7.5)
- [CVE-2007-1146](https://insights.sbomify.com/CVE-2007-1146/): Code injection in delmaa.com:arabhost (high 7.5)
- [CVE-2007-1145](https://insights.sbomify.com/CVE-2007-1145/): Cross-site scripting in kayako:esupport (medium 4.3)
- [CVE-2007-1144](https://insights.sbomify.com/CVE-2007-1144/): Path traversal in comscripts:j-web pics navigator (medium 5.0)
- [CVE-2007-1143](https://insights.sbomify.com/CVE-2007-1143/): Path traversal in jeunes-webmasters:j-web pics navigator (high 7.8)
- [CVE-2007-1142](https://insights.sbomify.com/CVE-2007-1142/): Cross-site scripting in reamday enterprises:magic news plus (medium 4.3)
- [CVE-2007-1141](https://insights.sbomify.com/CVE-2007-1141/): Code injection in reamday enterprises:magic news plus (high 7.5)
- [CVE-2007-1140](https://insights.sbomify.com/CVE-2007-1140/): Path traversal in barekoncept:pheap (critical 9.4)
- [CVE-2007-1139](https://insights.sbomify.com/CVE-2007-1139/): File upload in cromosoft:simple plantilla php (critical 10.0)
- [CVE-2007-1138](https://insights.sbomify.com/CVE-2007-1138/): Path traversal in cromosoft:simple plantilla php (medium 5.0)
- [CVE-2007-1137](https://insights.sbomify.com/CVE-2007-1137/): Information disclosure in sourceforge:putmail (medium 5.0)
- [CVE-2007-1136](https://insights.sbomify.com/CVE-2007-1136/): Command injection in webmplayer:webmplayer (medium 6.8)
- [CVE-2007-1135](https://insights.sbomify.com/CVE-2007-1135/): SQL injection in sourceforge:webmplayer (medium 6.8)
- [CVE-2007-1134](https://insights.sbomify.com/CVE-2007-1134/): Other in watchtower:watchtower (critical 10.0)
- [CVE-2007-1133](https://insights.sbomify.com/CVE-2007-1133/): Code injection in scripter.ch:fcring (high 7.5)
- [CVE-2007-1132](https://insights.sbomify.com/CVE-2007-1132/): Cross-site scripting in mtcms:mtcms (medium 4.3)
- [CVE-2007-1131](https://insights.sbomify.com/CVE-2007-1131/): Code injection in scripter.ch:sinapis forum (high 7.5)
- [CVE-2007-1130](https://insights.sbomify.com/CVE-2007-1130/): Code injection in scipter.ch:gastebuch (high 7.5)
- [CVE-2007-1129](https://insights.sbomify.com/CVE-2007-1129/): File upload in mtcms:mtcms (high 7.5)
- [CVE-2007-1128](https://insights.sbomify.com/CVE-2007-1128/): Information disclosure in watersweb shops:shop kit plus (medium 5.0)
- [CVE-2007-1127](https://insights.sbomify.com/CVE-2007-1127/): Path traversal in watersweb shops:shop kit plus (medium 6.4)
- [CVE-2007-1126](https://insights.sbomify.com/CVE-2007-1126/): Path traversal in xt-commerce:xt-commerce (medium 5.0)
- [CVE-2007-1125](https://insights.sbomify.com/CVE-2007-1125/): Cross-site scripting in xeroxer:simple one-file gallery (medium 4.3)
- [CVE-2007-1124](https://insights.sbomify.com/CVE-2007-1124/): Path traversal in xeroxer:simple one-file gallery (medium 5.0)
- [CVE-2007-1123](https://insights.sbomify.com/CVE-2007-1123/): Code injection in zpanel:zpanel (high 7.5)
- [CVE-2007-1122](https://insights.sbomify.com/CVE-2007-1122/): SQL injection in zephyrsoft toolbox:address book continued (medium 6.4)
- [CVE-2007-1121](https://insights.sbomify.com/CVE-2007-1121/): SQL injection in zephyrsoft toolbox:address book continued (medium 6.4)
- [CVE-2007-1120](https://insights.sbomify.com/CVE-2007-1120/): Other in steema software:teechart pro (critical 9.3)
- [CVE-2007-1119](https://insights.sbomify.com/CVE-2007-1119/): Security feature bypass in novell:zenworks (medium 6.4)
- [CVE-2007-1118](https://insights.sbomify.com/CVE-2007-1118/): Code injection in efiction:efiction (medium 6.8)
- [CVE-2007-1117](https://insights.sbomify.com/CVE-2007-1117/): Memory corruption in microsoft:publisher (critical 10.0)
- [CVE-2007-1116](https://insights.sbomify.com/CVE-2007-1116/): Information disclosure in mozilla:firefox (medium 5.0)
- [CVE-2007-1115](https://insights.sbomify.com/CVE-2007-1115/): Cross-site scripting in opera:opera browser (medium 4.3)
- [CVE-2007-1114](https://insights.sbomify.com/CVE-2007-1114/): Cross-site scripting in microsoft:ie (medium 4.3)
- [CVE-2007-1112](https://insights.sbomify.com/CVE-2007-1112/): Missing authorization in kaspersky lab:kaspersky anti-virus (critical 10.0)
- [CVE-2007-1111](https://insights.sbomify.com/CVE-2007-1111/): Cross-site scripting in activecalendar:activecalendar (medium 6.8)
- [CVE-2007-1110](https://insights.sbomify.com/CVE-2007-1110/): Path traversal in activecalendar:activecalendar (medium 5.0)
- [CVE-2007-1109](https://insights.sbomify.com/CVE-2007-1109/): Cross-site scripting in phpwebgallery:phpwebgallery (medium 4.3)
- [CVE-2007-1108](https://insights.sbomify.com/CVE-2007-1108/): Code injection in cs-gallery:cs-gallery (medium 6.8)
- [CVE-2007-1107](https://insights.sbomify.com/CVE-2007-1107/): SQL injection in coppermine:coppermine photo gallery (high 7.5)
- [CVE-2007-1106](https://insights.sbomify.com/CVE-2007-1106/): Code injection in nomoketos rules:nomoketos rules (medium 6.8)
- [CVE-2007-1105](https://insights.sbomify.com/CVE-2007-1105/): Code injection in extreme phpbb:extreme phpbb (medium 5.0)
- [CVE-2007-1104](https://insights.sbomify.com/CVE-2007-1104/): Code injection in php mip:php mip (medium 4.3)
- [CVE-2007-1103](https://insights.sbomify.com/CVE-2007-1103/): Security feature bypass in tor:tor (medium 4.3)
- [CVE-2007-1102](https://insights.sbomify.com/CVE-2007-1102/): Information disclosure in photostand:photostand (medium 5.0)
- [CVE-2007-1101](https://insights.sbomify.com/CVE-2007-1101/): Cross-site scripting in photostand:photostand (medium 4.3)
- [CVE-2007-1100](https://insights.sbomify.com/CVE-2007-1100/): Path traversal in pickle:pickle (high 7.8)
- [CVE-2007-1099](https://insights.sbomify.com/CVE-2007-1099/): Security feature bypass in dropbear ssh project:dropbear ssh (high 7.5)
- [CVE-2007-1098](https://insights.sbomify.com/CVE-2007-1098/): Denial of service in scrymud:scrymud (high 7.8)
- [CVE-2007-1097](https://insights.sbomify.com/CVE-2007-1097/): File upload in wiclear:wiclear (critical 10.0)
- [CVE-2007-1096](https://insights.sbomify.com/CVE-2007-1096/): Cross-site scripting in virtuemart:virtuemart (medium 6.8)
- [CVE-2007-1095](https://insights.sbomify.com/CVE-2007-1095/): Security feature bypass in mozilla:firefox (medium 6.8)
- [CVE-2007-1094](https://insights.sbomify.com/CVE-2007-1094/): Null dereference in microsoft:internet explorer (high 7.8)
- [CVE-2007-1093](https://insights.sbomify.com/CVE-2007-1093/): Code injection in hitachi:cm2-network node manager (critical 10.0)
- [CVE-2007-1092](https://insights.sbomify.com/CVE-2007-1092/): Memory corruption in mozilla:firefox (critical 9.3)
- [CVE-2007-1091](https://insights.sbomify.com/CVE-2007-1091/): Security feature bypass in microsoft:ie (medium 6.8)
- [CVE-2007-1090](https://insights.sbomify.com/CVE-2007-1090/): Denial of service in microsoft:windows explorer (high 7.1)
- [CVE-2007-1089](https://insights.sbomify.com/CVE-2007-1089/): Missing authorization in ibm:db2 universal database (high 7.2)
- [CVE-2007-1088](https://insights.sbomify.com/CVE-2007-1088/): Memory corruption in ibm:db2 (high 7.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2007/page/54/