# Vulnerabilities published in 2007


- [CVE-2007-1087](https://insights.sbomify.com/CVE-2007-1087/): Memory corruption in ibm:db2 (high 7.2)
- [CVE-2007-1086](https://insights.sbomify.com/CVE-2007-1086/): Privilege escalation in ibm:db2 universal database (high 7.2)
- [CVE-2007-1085](https://insights.sbomify.com/CVE-2007-1085/): Cross-site scripting in google:desktop (high 7.6)
- [CVE-2007-1084](https://insights.sbomify.com/CVE-2007-1084/): Security feature bypass in mozilla:firefox (medium 6.8)
- [CVE-2007-1083](https://insights.sbomify.com/CVE-2007-1083/): Memory corruption in verisign:mpki (critical 9.3)
- [CVE-2007-1082](https://insights.sbomify.com/CVE-2007-1082/): Denial of service in ftpx:ftp explorer (high 7.1)
- [CVE-2007-1081](https://insights.sbomify.com/CVE-2007-1081/): Other in typo3:typo3 (high 7.5)
- [CVE-2007-1080](https://insights.sbomify.com/CVE-2007-1080/): Memory corruption in turbosoft:turboftp (high 7.8)
- [CVE-2007-1079](https://insights.sbomify.com/CVE-2007-1079/): Memory corruption in rhinosoft:ftp voyager (high 7.8)
- [CVE-2007-1078](https://insights.sbomify.com/CVE-2007-1078/): Code injection in flashgamescript:flashgamescript (high 7.5)
- [CVE-2007-1077](https://insights.sbomify.com/CVE-2007-1077/): SQL injection in design4online:userpages2 (high 7.5)
- [CVE-2007-1076](https://insights.sbomify.com/CVE-2007-1076/): Path traversal in phptraffica:phptraffica (high 7.5)
- [CVE-2007-1075](https://insights.sbomify.com/CVE-2007-1075/): Denial of service in turbosoft:turboftp (high 7.8)
- [CVE-2007-1074](https://insights.sbomify.com/CVE-2007-1074/): Memory corruption in dji:newsbin pro (critical 9.3)
- [CVE-2007-1073](https://insights.sbomify.com/CVE-2007-1073/): Code injection in mcrefer:mcrefer (critical 10.0)
- [CVE-2007-1072](https://insights.sbomify.com/CVE-2007-1072/): Privilege escalation in cisco:unified ip phone firmware 7906g (high 7.2)
- [CVE-2007-1071](https://insights.sbomify.com/CVE-2007-1071/): Integer overflow in apple:mac os x (high 7.8)
- [CVE-2007-1070](https://insights.sbomify.com/CVE-2007-1070/): Memory corruption in trend micro:serverprotect (critical 10.0)
- [CVE-2007-1069](https://insights.sbomify.com/CVE-2007-1069/): Denial of service in vmware:workstation (high 7.8)
- [CVE-2007-1068](https://insights.sbomify.com/CVE-2007-1068/): Information disclosure in cisco:secure services client (high 7.2)
- [CVE-2007-1067](https://insights.sbomify.com/CVE-2007-1067/): Privilege escalation in cisco:secure services client (high 7.2)
- [CVE-2007-1066](https://insights.sbomify.com/CVE-2007-1066/): Misconfiguration in cisco:secure services client (medium 6.8)
- [CVE-2007-1065](https://insights.sbomify.com/CVE-2007-1065/): Privilege escalation in cisco:secure services client (medium 6.8)
- [CVE-2007-1064](https://insights.sbomify.com/CVE-2007-1064/): Privilege escalation in cisco:secure services client (medium 6.8)
- [CVE-2007-1063](https://insights.sbomify.com/CVE-2007-1063/): Hardcoded credentials in cisco:unified ip phone firmware 7906g (critical 10.0)
- [CVE-2007-1062](https://insights.sbomify.com/CVE-2007-1062/): Auth bypass in cisco:unified ip conference station 7935 firmware (critical 10.0)
- [CVE-2007-1061](https://insights.sbomify.com/CVE-2007-1061/): SQL injection in francisco burzi:php-nuke (medium 6.8)
- [CVE-2007-1060](https://insights.sbomify.com/CVE-2007-1060/): Code injection in interspire:sendstudio (medium 6.8)
- [CVE-2007-1059](https://insights.sbomify.com/CVE-2007-1059/): Code injection in ultimate fun book:ultimate fun book (medium 6.8)
- [CVE-2007-1058](https://insights.sbomify.com/CVE-2007-1058/): SQL injection in online web building:online web building (high 7.5)
- [CVE-2007-1057](https://insights.sbomify.com/CVE-2007-1057/): Race condition in nortel:net direct client (medium 6.9)
- [CVE-2007-1056](https://insights.sbomify.com/CVE-2007-1056/): Privilege escalation in vmware:workstation (high 7.2)
- [CVE-2007-1055](https://insights.sbomify.com/CVE-2007-1055/): Cross-site scripting in mediawiki:mediawiki (medium 6.8)
- [CVE-2007-1054](https://insights.sbomify.com/CVE-2007-1054/): Cross-site scripting in mediawiki:mediawiki (medium 6.8)
- [CVE-2007-1053](https://insights.sbomify.com/CVE-2007-1053/): Code injection in warped systems:phpxmms (critical 10.0)
- [CVE-2007-1052](https://insights.sbomify.com/CVE-2007-1052/): Code injection in pblang:pblang (critical 10.0)
- [CVE-2007-1051](https://insights.sbomify.com/CVE-2007-1051/): Weak cryptography in comodo:comodo firewall pro (medium 4.6)
- [CVE-2007-1050](https://insights.sbomify.com/CVE-2007-1050/): Cross-site scripting in abledesign:mycalendar (medium 4.3)
- [CVE-2007-1049](https://insights.sbomify.com/CVE-2007-1049/): Cross-site scripting in wordpress:wordpress (medium 4.3)
- [CVE-2007-1048](https://insights.sbomify.com/CVE-2007-1048/): Code injection in phpbb wordsearch:phpbb wordsearch (high 7.5)
- [CVE-2007-1047](https://insights.sbomify.com/CVE-2007-1047/): Missing authorization in distributed checksum clearinghouse:dcc (high 7.5)
- [CVE-2007-1046](https://insights.sbomify.com/CVE-2007-1046/): Information disclosure in dem trac:dem trac (medium 5.0)
- [CVE-2007-1045](https://insights.sbomify.com/CVE-2007-1045/): Hardcoded credentials in malbum:malbum (critical 10.0)
- [CVE-2007-1044](https://insights.sbomify.com/CVE-2007-1044/): Information disclosure in pearson education:powerschool (medium 5.0)
- [CVE-2007-1043](https://insights.sbomify.com/CVE-2007-1043/): Auth bypass in ezboo:webstats (high 7.5)
- [CVE-2007-1042](https://insights.sbomify.com/CVE-2007-1042/): Path traversal in xpression news:xpression news (medium 5.8)
- [CVE-2007-1041](https://insights.sbomify.com/CVE-2007-1041/): Memory corruption in sandh:news rover (critical 9.3)
- [CVE-2007-1040](https://insights.sbomify.com/CVE-2007-1040/): Path traversal in xpression news:xpression news (high 7.5)
- [CVE-2007-1039](https://insights.sbomify.com/CVE-2007-1039/): Other in peanutkb:peanut knowledge base (critical 10.0)
- [CVE-2007-1038](https://insights.sbomify.com/CVE-2007-1038/): Denial of service in shemes.com:grabit (medium 5.0)
- [CVE-2007-1037](https://insights.sbomify.com/CVE-2007-1037/): Memory corruption in rsbr-software:news file grabber (critical 9.3)
- [CVE-2007-1036](https://insights.sbomify.com/CVE-2007-1036/): Misconfiguration in jboss:jboss application server (high 7.5)
- [CVE-2007-1035](https://insights.sbomify.com/CVE-2007-1035/): Other in drupal:audio module (high 7.5)
- [CVE-2007-1034](https://insights.sbomify.com/CVE-2007-1034/): SQL injection in php-nuke:emporium module (high 7.5)
- [CVE-2007-1033](https://insights.sbomify.com/CVE-2007-1033/): Auth bypass in drupal:secure site module (high 7.5)
- [CVE-2007-1032](https://insights.sbomify.com/CVE-2007-1032/): File upload in phpmyfaq:phpmyfaq (medium 6.8)
- [CVE-2007-1031](https://insights.sbomify.com/CVE-2007-1031/): Path traversal in spoonlabs:vivvo article management cms (medium 6.8)
- [CVE-2007-1030](https://insights.sbomify.com/CVE-2007-1030/): Denial of service in niels provos:libevent (high 7.8)
- [CVE-2007-1029](https://insights.sbomify.com/CVE-2007-1029/): Memory corruption in quicksoft:easymail objects (high 7.6)
- [CVE-2007-1028](https://insights.sbomify.com/CVE-2007-1028/): Cross-site scripting in barry jaspan:image pager (medium 6.8)
- [CVE-2007-1027](https://insights.sbomify.com/CVE-2007-1027/): Race condition in ibm:db2 (medium 4.4)
- [CVE-2007-1026](https://insights.sbomify.com/CVE-2007-1026/): SQL injection in scriptdungeon:xlatunes (high 7.5)
- [CVE-2007-1025](https://insights.sbomify.com/CVE-2007-1025/): Code injection in virtualsystem:vs-link-partner (high 7.5)
- [CVE-2007-1024](https://insights.sbomify.com/CVE-2007-1024/): Code injection in marcello vitagliano:meganoides news (critical 10.0)
- [CVE-2007-1023](https://insights.sbomify.com/CVE-2007-1023/): SQL injection in snitz communications:snitz forums 2000 (high 7.5)
- [CVE-2007-1022](https://insights.sbomify.com/CVE-2007-1022/): SQL injection in turuncu portal:turuncu portal (high 7.5)
- [CVE-2007-1021](https://insights.sbomify.com/CVE-2007-1021/): SQL injection in xfairguy:codeavalanche news (critical 10.0)
- [CVE-2007-1020](https://insights.sbomify.com/CVE-2007-1020/): Cross-site scripting in cedstat:cedstat (medium 6.8)
- [CVE-2007-1019](https://insights.sbomify.com/CVE-2007-1019/): SQL injection in webspell:webspell (medium 6.8)
- [CVE-2007-1018](https://insights.sbomify.com/CVE-2007-1018/): Code injection in virtualsystem:vs-news-system (critical 9.3)
- [CVE-2007-1017](https://insights.sbomify.com/CVE-2007-1017/): Code injection in virtualsystem:vs-news-system (critical 9.3)
- [CVE-2007-1016](https://insights.sbomify.com/CVE-2007-1016/): SQL injection in aktueldownload:aktueldownload haber script (high 7.5)
- [CVE-2007-1015](https://insights.sbomify.com/CVE-2007-1015/): SQL injection in aktueldownload:aktueldownload haber script (critical 10.0)
- [CVE-2007-1014](https://insights.sbomify.com/CVE-2007-1014/): Memory corruption in vicftps:vicftps (critical 10.0)
- [CVE-2007-1013](https://insights.sbomify.com/CVE-2007-1013/): Code injection in virtualsystem:htaccess passwort generator (critical 10.0)
- [CVE-2007-1012](https://insights.sbomify.com/CVE-2007-1012/): Cross-site scripting in deskpro:deskpro (medium 4.3)
- [CVE-2007-1011](https://insights.sbomify.com/CVE-2007-1011/): Code injection in vs-gastebuch:vs-gastebuch (high 7.5)
- [CVE-2007-1010](https://insights.sbomify.com/CVE-2007-1010/): Code injection in zebrafeeds:zebrafeeds (medium 6.8)
- [CVE-2007-1009](https://insights.sbomify.com/CVE-2007-1009/): Security feature bypass in macrovision:installanywhere (medium 4.6)
- [CVE-2007-1008](https://insights.sbomify.com/CVE-2007-1008/): Memory corruption in apple:itunes (low 2.6)
- [CVE-2007-1007](https://insights.sbomify.com/CVE-2007-1007/): Memory corruption in ekiga:ekiga (critical 10.0)
- [CVE-2007-1006](https://insights.sbomify.com/CVE-2007-1006/): Memory corruption in ekiga:ekiga (critical 10.0)
- [CVE-2007-1005](https://insights.sbomify.com/CVE-2007-1005/): Memory corruption in broadcom:etrust intrusion detection (high 7.8)
- [CVE-2007-1004](https://insights.sbomify.com/CVE-2007-1004/): Security feature bypass in mozilla:firefox (medium 4.3)
- [CVE-2007-1003](https://insights.sbomify.com/CVE-2007-1003/): Integer overflow in x.org:x11 (critical 9.0)
- [CVE-2007-1002](https://insights.sbomify.com/CVE-2007-1002/): Memory corruption in evolution:shared memo (medium 6.8)
- [CVE-2007-1001](https://insights.sbomify.com/CVE-2007-1001/): Integer overflow in php:php (medium 6.8)
- [CVE-2007-10003](https://insights.sbomify.com/CVE-2007-10003/): The Hackers Diet Plugin HTTP POST Request ajax_blurb.php sql injection (medium 6.3)
- [CVE-2007-10002](https://insights.sbomify.com/CVE-2007-10002/): web-cyradm auth.inc.php sql injection (high 7.3)
- [CVE-2007-10001](https://insights.sbomify.com/CVE-2007-10001/): web-cyradm search.php sql injection (low 3.5)
- [CVE-2007-1000](https://insights.sbomify.com/CVE-2007-1000/): Null dereference in linux:linux kernel (high 7.2)
- [CVE-2007-0999](https://insights.sbomify.com/CVE-2007-0999/): Memory corruption in gnome:ekiga (critical 9.3)
- [CVE-2007-0998](https://insights.sbomify.com/CVE-2007-0998/): Path traversal in xen:qemu (medium 4.3)
- [CVE-2007-0997](https://insights.sbomify.com/CVE-2007-0997/): Race condition in linux:linux kernel (medium 6.9)
- [CVE-2007-0996](https://insights.sbomify.com/CVE-2007-0996/): Cross-site scripting in mozilla:firefox (medium 5.8)
- [CVE-2007-0995](https://insights.sbomify.com/CVE-2007-0995/): Cross-site scripting in mozilla:firefox (medium 4.3)
- [CVE-2007-0994](https://insights.sbomify.com/CVE-2007-0994/): Code injection in debian:debian linux (medium 6.8)
- [CVE-2007-0988](https://insights.sbomify.com/CVE-2007-0988/): Denial of service in canonical:ubuntu linux (medium 4.3)
- [CVE-2007-0987](https://insights.sbomify.com/CVE-2007-0987/): Path traversal in jupiter cms:jupiter cms (high 7.5)
- [CVE-2007-0986](https://insights.sbomify.com/CVE-2007-0986/): Code injection in jupiter cms:jupiter cms (medium 5.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2007/page/55/