# Vulnerabilities published in 2007


- [CVE-2007-0882](https://insights.sbomify.com/CVE-2007-0882/): Auth bypass in oracle:solaris (critical 10.0)
- [CVE-2007-0881](https://insights.sbomify.com/CVE-2007-0881/): Code injection in openi-cms group:openi-cms (medium 6.8)
- [CVE-2007-0880](https://insights.sbomify.com/CVE-2007-0880/): Information disclosure in capital request forms:capital request forms (high 7.8)
- [CVE-2007-0879](https://insights.sbomify.com/CVE-2007-0879/): Memory corruption in smidgeonsoft:pebrowse (critical 9.3)
- [CVE-2007-0878](https://insights.sbomify.com/CVE-2007-0878/): Denial of service in microsoft:windows mobile (high 7.8)
- [CVE-2007-0877](https://insights.sbomify.com/CVE-2007-0877/): Denial of service in march networks:3108 dvr (medium 5.0)
- [CVE-2007-0876](https://insights.sbomify.com/CVE-2007-0876/): Cross-site scripting in qdig:qdig (medium 4.3)
- [CVE-2007-0875](https://insights.sbomify.com/CVE-2007-0875/): SQL injection in mcrefer:mcrefer (high 7.5)
- [CVE-2007-0874](https://insights.sbomify.com/CVE-2007-0874/): Auth bypass in allons voter:allons voter (medium 6.8)
- [CVE-2007-0873](https://insights.sbomify.com/CVE-2007-0873/): Auth bypass in nabocorp:nabopoll (high 7.5)
- [CVE-2007-0872](https://insights.sbomify.com/CVE-2007-0872/): Path traversal in plain old webserver:plain old webserver (medium 5.0)
- [CVE-2007-0871](https://insights.sbomify.com/CVE-2007-0871/): File upload in extremepow:extreme file hosting (high 7.5)
- [CVE-2007-0870](https://insights.sbomify.com/CVE-2007-0870/): Denial of service in microsoft:word (high 7.6)
- [CVE-2007-0869](https://insights.sbomify.com/CVE-2007-0869/): Cross-site scripting in jelsoft:vbulletin (medium 4.3)
- [CVE-2007-0868](https://insights.sbomify.com/CVE-2007-0868/): Denial of service in yahoo:messenger (medium 5.0)
- [CVE-2007-0867](https://insights.sbomify.com/CVE-2007-0867/): Code injection in site-assistant:site-assistant (high 7.5)
- [CVE-2007-0866](https://insights.sbomify.com/CVE-2007-0866/): Other in hp:openview storage data protector (medium 6.8)
- [CVE-2007-0865](https://insights.sbomify.com/CVE-2007-0865/): SQL injection in lushinews:lushinews (high 7.5)
- [CVE-2007-0864](https://insights.sbomify.com/CVE-2007-0864/): SQL injection in lushiwarplaner:lushiwarplaner (high 7.5)
- [CVE-2007-0863](https://insights.sbomify.com/CVE-2007-0863/): Code injection in trevorchan:trevorchan (critical 10.0)
- [CVE-2007-0862](https://insights.sbomify.com/CVE-2007-0862/): Code injection in gnopaste:gnopaste (medium 6.8)
- [CVE-2007-0861](https://insights.sbomify.com/CVE-2007-0861/): Code injection in phpcoin:phpcoin (high 7.5)
- [CVE-2007-0860](https://insights.sbomify.com/CVE-2007-0860/): Code injection in laboratory for optical and computational instrumentation:local calendar system (high 7.5)
- [CVE-2007-0859](https://insights.sbomify.com/CVE-2007-0859/): Security feature bypass in palm:treo (low 2.1)
- [CVE-2007-0857](https://insights.sbomify.com/CVE-2007-0857/): MoinMoin Multiple cross-site scripting (XSS) vulnerabilities (medium 4.3)
- [CVE-2007-0856](https://insights.sbomify.com/CVE-2007-0856/): Misconfiguration in trend micro:client-server-messaging security (high 7.2)
- [CVE-2007-0855](https://insights.sbomify.com/CVE-2007-0855/): Memory corruption in rarlab:unrar (medium 6.8)
- [CVE-2007-0854](https://insights.sbomify.com/CVE-2007-0854/): Code injection in cpanel:webhost manager (high 7.5)
- [CVE-2007-0853](https://insights.sbomify.com/CVE-2007-0853/): SQL injection in techexcel inc.:devtrack (high 7.5)
- [CVE-2007-0852](https://insights.sbomify.com/CVE-2007-0852/): Cross-site scripting in techexcel inc.:devtrack (medium 6.8)
- [CVE-2007-0851](https://insights.sbomify.com/CVE-2007-0851/): Memory corruption in trend micro:client-server-messaging suite smb (critical 9.3)
- [CVE-2007-0850](https://insights.sbomify.com/CVE-2007-0850/): Code injection in syscp team:syscp (high 7.5)
- [CVE-2007-0849](https://insights.sbomify.com/CVE-2007-0849/): Command injection in syscp team:syscp (high 7.2)
- [CVE-2007-0848](https://insights.sbomify.com/CVE-2007-0848/): Code injection in maian recipe:maian recipe (high 7.5)
- [CVE-2007-0847](https://insights.sbomify.com/CVE-2007-0847/): SQL injection in open tibia server cms:open tibia server cms (high 7.5)
- [CVE-2007-0846](https://insights.sbomify.com/CVE-2007-0846/): Cross-site scripting in open tibia server cms:open tibia server cms (medium 6.8)
- [CVE-2007-0845](https://insights.sbomify.com/CVE-2007-0845/): Auth bypass in advanced poll:advanced poll (high 7.5)
- [CVE-2007-0844](https://insights.sbomify.com/CVE-2007-0844/): Auth bypass in pam ssh:pam ssh (medium 6.4)
- [CVE-2007-0843](https://insights.sbomify.com/CVE-2007-0843/): Missing authorization in microsoft:windows 2000 (medium 4.6)
- [CVE-2007-0842](https://insights.sbomify.com/CVE-2007-0842/): Denial of service in microsoft:visual c\+\+ (medium 5.0)
- [CVE-2007-0841](https://insights.sbomify.com/CVE-2007-0841/): Other in vbdrupal:vbdrupal (critical 10.0)
- [CVE-2007-0840](https://insights.sbomify.com/CVE-2007-0840/): Cross-site scripting in hlstats:hlstats (medium 6.8)
- [CVE-2007-0839](https://insights.sbomify.com/CVE-2007-0839/): Code injection in valarsoft:webmatic (high 7.5)
- [CVE-2007-0838](https://insights.sbomify.com/CVE-2007-0838/): Denial of service in freeproxy:freeproxy (medium 5.0)
- [CVE-2007-0837](https://insights.sbomify.com/CVE-2007-0837/): Code injection in agermenu:agermenu (high 7.5)
- [CVE-2007-0836](https://insights.sbomify.com/CVE-2007-0836/): Path traversal in coppermine:coppermine photo gallery (medium 4.0)
- [CVE-2007-0835](https://insights.sbomify.com/CVE-2007-0835/): Command injection in coppermine:coppermine photo gallery (medium 6.5)
- [CVE-2007-0834](https://insights.sbomify.com/CVE-2007-0834/): Cross-site scripting in darrens 5-dollar script archive:flashchat (medium 6.8)
- [CVE-2007-0833](https://insights.sbomify.com/CVE-2007-0833/): Information disclosure in vmware:workstation (low 1.2)
- [CVE-2007-0832](https://insights.sbomify.com/CVE-2007-0832/): Security feature bypass in vmware:workstation (low 1.2)
- [CVE-2007-0831](https://insights.sbomify.com/CVE-2007-0831/): Code injection in atsphp:atsphp (high 7.5)
- [CVE-2007-0830](https://insights.sbomify.com/CVE-2007-0830/): Cross-site scripting in jelsoft:vbulletin (low 3.5)
- [CVE-2007-0829](https://insights.sbomify.com/CVE-2007-0829/): Auth bypass in alwil:avast antivirus (medium 4.4)
- [CVE-2007-0828](https://insights.sbomify.com/CVE-2007-0828/): Code injection in mysqlnewsengine:mysqlnewsengine (high 7.5)
- [CVE-2007-0827](https://insights.sbomify.com/CVE-2007-0827/): Memory corruption in alibaba:alipay activex control (medium 6.8)
- [CVE-2007-0826](https://insights.sbomify.com/CVE-2007-0826/): SQL injection in kisisel site 2007:kisisel site forum.asp (high 7.5)
- [CVE-2007-0825](https://insights.sbomify.com/CVE-2007-0825/): Denial of service in flashfxp:flashfxp (high 7.8)
- [CVE-2007-0824](https://insights.sbomify.com/CVE-2007-0824/): Code injection in lightro:lightro cms (high 7.5)
- [CVE-2007-0823](https://insights.sbomify.com/CVE-2007-0823/): Information disclosure in slackware:slackware linux (low 1.9)
- [CVE-2007-0822](https://insights.sbomify.com/CVE-2007-0822/): Null dereference in linux:linux kernel (low 1.9)
- [CVE-2007-0821](https://insights.sbomify.com/CVE-2007-0821/): Path traversal in cedric:claire portailphp (medium 5.0)
- [CVE-2007-0820](https://insights.sbomify.com/CVE-2007-0820/): Code injection in cedric:claire portailphp (high 7.5)
- [CVE-2007-0819](https://insights.sbomify.com/CVE-2007-0819/): Misconfiguration in hp:network node manager (high 7.2)
- [CVE-2007-0817](https://insights.sbomify.com/CVE-2007-0817/): Cross-site scripting in adobe:coldfusion (medium 4.3)
- [CVE-2007-0816](https://insights.sbomify.com/CVE-2007-0816/): Null dereference in broadcom:brightstor arcserve backup (medium 5.0)
- [CVE-2007-0815](https://insights.sbomify.com/CVE-2007-0815/): Cross-site scripting in uapplication:uphotogallery (medium 4.3)
- [CVE-2007-0814](https://insights.sbomify.com/CVE-2007-0814/): Cross-site scripting in adrenalin labs:adrenalins asp chat (medium 4.3)
- [CVE-2007-0813](https://insights.sbomify.com/CVE-2007-0813/): Cross-site scripting in home production:mysearchengine (medium 4.3)
- [CVE-2007-0812](https://insights.sbomify.com/CVE-2007-0812/): SQL injection in woltlab:burning board lite (high 7.5)
- [CVE-2007-0811](https://insights.sbomify.com/CVE-2007-0811/): Null dereference in microsoft:ie (medium 4.3)
- [CVE-2007-0810](https://insights.sbomify.com/CVE-2007-0810/): Code injection in geeklog:geeklog (high 7.5)
- [CVE-2007-0809](https://insights.sbomify.com/CVE-2007-0809/): Code injection in ptirhiikmods:mod-ch (high 7.5)
- [CVE-2007-0808](https://insights.sbomify.com/CVE-2007-0808/): Code injection in mina ajans:mina ajans script (high 7.5)
- [CVE-2007-0807](https://insights.sbomify.com/CVE-2007-0807/): Cross-site scripting in darrens 5-dollar script archive:flashchat (medium 6.8)
- [CVE-2007-0806](https://insights.sbomify.com/CVE-2007-0806/): Auth bypass in les news:les news (high 7.5)
- [CVE-2007-0805](https://insights.sbomify.com/CVE-2007-0805/): Information disclosure in hp:tru64 (low 2.1)
- [CVE-2007-0804](https://insights.sbomify.com/CVE-2007-0804/): Path traversal in ggcms:ggcms (high 7.5)
- [CVE-2007-0803](https://insights.sbomify.com/CVE-2007-0803/): Memory corruption in stlport project:stlport (high 7.5)
- [CVE-2007-0802](https://insights.sbomify.com/CVE-2007-0802/): Security feature bypass in mozilla:firefox (medium 6.4)
- [CVE-2007-0801](https://insights.sbomify.com/CVE-2007-0801/): Race condition in mozilla:firefox (medium 4.3)
- [CVE-2007-0800](https://insights.sbomify.com/CVE-2007-0800/): Security feature bypass in mozilla:firefox (medium 4.3)
- [CVE-2007-0799](https://insights.sbomify.com/CVE-2007-0799/): SQL injection in uapplication:ublog (high 7.5)
- [CVE-2007-0798](https://insights.sbomify.com/CVE-2007-0798/): Cross-site scripting in uapplication:ublog reload (medium 4.3)
- [CVE-2007-0797](https://insights.sbomify.com/CVE-2007-0797/): Code injection in bluevirus-design:sma-db (high 7.5)
- [CVE-2007-0796](https://insights.sbomify.com/CVE-2007-0796/): Memory corruption in bluecoat:winproxy (high 7.5)
- [CVE-2007-0795](https://insights.sbomify.com/CVE-2007-0795/): Code injection in wap:wap portal server (high 7.5)
- [CVE-2007-0794](https://insights.sbomify.com/CVE-2007-0794/): SQL injection in globalmegacorp:dvddb (high 7.5)
- [CVE-2007-0793](https://insights.sbomify.com/CVE-2007-0793/): Code injection in globalmegacorp:dvddb (high 7.5)
- [CVE-2007-0792](https://insights.sbomify.com/CVE-2007-0792/): Misconfiguration in mozilla:bugzilla (high 7.5)
- [CVE-2007-0791](https://insights.sbomify.com/CVE-2007-0791/): Cross-site scripting in mozilla:bugzilla (medium 4.3)
- [CVE-2007-0790](https://insights.sbomify.com/CVE-2007-0790/): Memory corruption in smartftp:smartftp (high 7.5)
- [CVE-2007-0789](https://insights.sbomify.com/CVE-2007-0789/): SQL injection in mambo:mambo (medium 6.8)
- [CVE-2007-0788](https://insights.sbomify.com/CVE-2007-0788/): Cross-site scripting in mediawiki:mediawiki (medium 4.3)
- [CVE-2007-0787](https://insights.sbomify.com/CVE-2007-0787/): Code injection in simple invoices:simple invoices (medium 6.8)
- [CVE-2007-0786](https://insights.sbomify.com/CVE-2007-0786/): SQL injection in noname media:photo galerie standard (high 7.5)
- [CVE-2007-0785](https://insights.sbomify.com/CVE-2007-0785/): Code injection in flipsource:flip (high 7.5)
- [CVE-2007-0784](https://insights.sbomify.com/CVE-2007-0784/): SQL injection in rbl:tpassword (high 7.5)
- [CVE-2007-0780](https://insights.sbomify.com/CVE-2007-0780/): Cross-site scripting in canonical:ubuntu linux (medium 6.8)
- [CVE-2007-0779](https://insights.sbomify.com/CVE-2007-0779/): Security feature bypass in mozilla:firefox (medium 6.4)
- [CVE-2007-0778](https://insights.sbomify.com/CVE-2007-0778/): Information disclosure in canonical:ubuntu linux (medium 5.4)

---
From sbomify Insights: https://insights.sbomify.com/years/2007/page/57/