# Vulnerabilities published in 2007


- [CVE-2007-0471](https://insights.sbomify.com/CVE-2007-0471/): Auth bypass in checkpoint:connectra ngx (high 7.5)
- [CVE-2007-0470](https://insights.sbomify.com/CVE-2007-0470/): Privilege escalation in sun:solaris (high 7.2)
- [CVE-2007-0469](https://insights.sbomify.com/CVE-2007-0469/): RubyGems file overwrite vulnerability (critical 9.3)
- [CVE-2007-0468](https://insights.sbomify.com/CVE-2007-0468/): Memory corruption in microsoft:visual studio (medium 6.8)
- [CVE-2007-0467](https://insights.sbomify.com/CVE-2007-0467/): Race condition in apple:mac os x (medium 6.2)
- [CVE-2007-0466](https://insights.sbomify.com/CVE-2007-0466/): Memory corruption in telestream:flip4mac windows media components for quicktime (critical 10.0)
- [CVE-2007-0465](https://insights.sbomify.com/CVE-2007-0465/): Memory corruption in apple:installer (high 7.6)
- [CVE-2007-0464](https://insights.sbomify.com/CVE-2007-0464/): Null dereference in cfnetwork:cfnetwork (medium 5.0)
- [CVE-2007-0463](https://insights.sbomify.com/CVE-2007-0463/): Memory corruption in apple:software update (medium 5.0)
- [CVE-2007-0462](https://insights.sbomify.com/CVE-2007-0462/): Memory corruption in apple:mac os x (critical 10.0)
- [CVE-2007-0461](https://insights.sbomify.com/CVE-2007-0461/): Denial of service in dazuko:dazuko (medium 5.0)
- [CVE-2007-0460](https://insights.sbomify.com/CVE-2007-0460/): Memory corruption in suse:suse linux (critical 10.0)
- [CVE-2007-0459](https://insights.sbomify.com/CVE-2007-0459/): Denial of service in wireshark:wireshark (medium 5.0)
- [CVE-2007-0458](https://insights.sbomify.com/CVE-2007-0458/): Denial of service in wireshark:wireshark (medium 4.3)
- [CVE-2007-0457](https://insights.sbomify.com/CVE-2007-0457/): Denial of service in wireshark:wireshark (medium 4.3)
- [CVE-2007-0456](https://insights.sbomify.com/CVE-2007-0456/): Denial of service in wireshark:wireshark (medium 4.3)
- [CVE-2007-0455](https://insights.sbomify.com/CVE-2007-0455/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2007-0454](https://insights.sbomify.com/CVE-2007-0454/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2007-0453](https://insights.sbomify.com/CVE-2007-0453/): Memory corruption in samba:samba (medium 4.6)
- [CVE-2007-0452](https://insights.sbomify.com/CVE-2007-0452/): Denial of service in samba:samba (medium 6.8)
- [CVE-2007-0451](https://insights.sbomify.com/CVE-2007-0451/): Denial of service in apache:spamassassin (medium 4.3)
- [CVE-2007-0450](https://insights.sbomify.com/CVE-2007-0450/): Apache Tomcat Directory Traversal (medium 5.0)
- [CVE-2007-0449](https://insights.sbomify.com/CVE-2007-0449/): Memory corruption in broadcom:brightstor arcserve backup laptops desktops (critical 10.0)
- [CVE-2007-0448](https://insights.sbomify.com/CVE-2007-0448/): Security feature bypass in php:php (critical 10.0)
- [CVE-2007-0447](https://insights.sbomify.com/CVE-2007-0447/): Memory corruption in symantec:antivirus scan engine (critical 9.3)
- [CVE-2007-0446](https://insights.sbomify.com/CVE-2007-0446/): Memory corruption in hp:mercury loadrunner agent (critical 10.0)
- [CVE-2007-0445](https://insights.sbomify.com/CVE-2007-0445/): Memory corruption in kaspersky lab:kaspersky anti-virus (critical 10.0)
- [CVE-2007-0444](https://insights.sbomify.com/CVE-2007-0444/): Memory corruption in citrix:metaframe (high 7.2)
- [CVE-2007-0443](https://insights.sbomify.com/CVE-2007-0443/): Memory corruption in gracenote:cddbcontrol activex control (critical 9.3)
- [CVE-2007-0442](https://insights.sbomify.com/CVE-2007-0442/): Other in ibm:os 400 (medium 5.0)
- [CVE-2007-0441](https://insights.sbomify.com/CVE-2007-0441/): Other in hp:openview network node manager (medium 5.1)
- [CVE-2007-0437](https://insights.sbomify.com/CVE-2007-0437/): Cross-site scripting in intersystems:cache database (low 3.5)
- [CVE-2007-0436](https://insights.sbomify.com/CVE-2007-0436/): Privilege escalation in barron mccann:install (medium 4.6)
- [CVE-2007-0435](https://insights.sbomify.com/CVE-2007-0435/): Auth bypass in t-com:speedport 500v (high 7.5)
- [CVE-2007-0434](https://insights.sbomify.com/CVE-2007-0434/): Security feature bypass in bea:aqualogic enterprise security (medium 4.6)
- [CVE-2007-0433](https://insights.sbomify.com/CVE-2007-0433/): Auth bypass in bea:aqualogic service bus (medium 6.5)
- [CVE-2007-0432](https://insights.sbomify.com/CVE-2007-0432/): Auth bypass in bea:aqualogic service bus (high 7.5)
- [CVE-2007-0431](https://insights.sbomify.com/CVE-2007-0431/): Denial of service in avm:fritzbox (high 7.8)
- [CVE-2007-0430](https://insights.sbomify.com/CVE-2007-0430/): Memory corruption in apple:mac os x (medium 4.9)
- [CVE-2007-0429](https://insights.sbomify.com/CVE-2007-0429/): Denial of service in divx:divx player (medium 5.0)
- [CVE-2007-0428](https://insights.sbomify.com/CVE-2007-0428/): Null dereference in wzdftpd:wzdftpd (medium 5.0)
- [CVE-2007-0427](https://insights.sbomify.com/CVE-2007-0427/): Memory corruption in microsoft:html help workshop (critical 9.3)
- [CVE-2007-0426](https://insights.sbomify.com/CVE-2007-0426/): Security feature bypass in oracle:weblogic portal (medium 6.8)
- [CVE-2007-0425](https://insights.sbomify.com/CVE-2007-0425/): Memory corruption in bea:jrockit (high 7.5)
- [CVE-2007-0424](https://insights.sbomify.com/CVE-2007-0424/): Denial of service in bea:weblogic server (medium 5.0)
- [CVE-2007-0423](https://insights.sbomify.com/CVE-2007-0423/): Business logic in oracle:weblogic portal (medium 4.4)
- [CVE-2007-0422](https://insights.sbomify.com/CVE-2007-0422/): Denial of service in bea:weblogic server (medium 5.0)
- [CVE-2007-0421](https://insights.sbomify.com/CVE-2007-0421/): Denial of service in bea:weblogic server (medium 6.4)
- [CVE-2007-0420](https://insights.sbomify.com/CVE-2007-0420/): Information disclosure in bea:weblogic server (medium 5.0)
- [CVE-2007-0419](https://insights.sbomify.com/CVE-2007-0419/): Denial of service in bea:weblogic server (medium 5.0)
- [CVE-2007-0418](https://insights.sbomify.com/CVE-2007-0418/): Missing authorization in bea:weblogic server (high 7.5)
- [CVE-2007-0417](https://insights.sbomify.com/CVE-2007-0417/): Privilege escalation in bea:weblogic server (critical 10.0)
- [CVE-2007-0416](https://insights.sbomify.com/CVE-2007-0416/): Auth bypass in bea:weblogic server (high 7.5)
- [CVE-2007-0415](https://insights.sbomify.com/CVE-2007-0415/): Security feature bypass in bea:weblogic server (medium 5.0)
- [CVE-2007-0414](https://insights.sbomify.com/CVE-2007-0414/): Denial of service in bea:weblogic server (medium 5.0)
- [CVE-2007-0413](https://insights.sbomify.com/CVE-2007-0413/): Information disclosure in bea:weblogic server (medium 4.4)
- [CVE-2007-0412](https://insights.sbomify.com/CVE-2007-0412/): Information disclosure in bea:weblogic server (medium 5.0)
- [CVE-2007-0411](https://insights.sbomify.com/CVE-2007-0411/): Security feature bypass in bea:weblogic server (medium 6.8)
- [CVE-2007-0410](https://insights.sbomify.com/CVE-2007-0410/): Denial of service in bea:weblogic server (medium 5.0)
- [CVE-2007-0409](https://insights.sbomify.com/CVE-2007-0409/): Information disclosure in bea:weblogic server (low 1.5)
- [CVE-2007-0408](https://insights.sbomify.com/CVE-2007-0408/): Auth bypass in bea:weblogic server (high 7.5)
- [CVE-2007-0407](https://insights.sbomify.com/CVE-2007-0407/): Cross-site scripting in plain black:webgui (medium 6.8)
- [CVE-2007-0406](https://insights.sbomify.com/CVE-2007-0406/): Memory corruption in gxine:gxine (medium 4.6)
- [CVE-2007-0405](https://insights.sbomify.com/CVE-2007-0405/): Django Improper Access Control (medium 6.5)
- [CVE-2007-0404](https://insights.sbomify.com/CVE-2007-0404/): Django Arbitrary Code Execution (high 7.5)
- [CVE-2007-0403](https://insights.sbomify.com/CVE-2007-0403/): SQL injection in easebay resources:paypal subscription manager (high 7.5)
- [CVE-2007-0402](https://insights.sbomify.com/CVE-2007-0402/): Cross-site scripting in easebay resources:paypal subscription manager (medium 6.8)
- [CVE-2007-0401](https://insights.sbomify.com/CVE-2007-0401/): SQL injection in easebay resources:login manager (high 7.5)
- [CVE-2007-0400](https://insights.sbomify.com/CVE-2007-0400/): Cross-site scripting in easebay resources:login manager (medium 6.8)
- [CVE-2007-0399](https://insights.sbomify.com/CVE-2007-0399/): Cross-site scripting in simple machines:simple machines forum (medium 6.0)
- [CVE-2007-0398](https://insights.sbomify.com/CVE-2007-0398/): Cross-site scripting in arnotic:a-forum (medium 6.8)
- [CVE-2007-0397](https://insights.sbomify.com/CVE-2007-0397/): Security feature bypass in cisco:adaptive security appliance device manager (medium 6.4)
- [CVE-2007-0396](https://insights.sbomify.com/CVE-2007-0396/): Denial of service in hp:hp-ux (high 7.1)
- [CVE-2007-0395](https://insights.sbomify.com/CVE-2007-0395/): Code injection in comvironment:comvironment (high 7.5)
- [CVE-2007-0394](https://insights.sbomify.com/CVE-2007-0394/): Privilege escalation in hp:hp-ux (medium 4.6)
- [CVE-2007-0393](https://insights.sbomify.com/CVE-2007-0393/): Privilege escalation in sun:solaris (medium 4.6)
- [CVE-2007-0392](https://insights.sbomify.com/CVE-2007-0392/): Privilege escalation in ibm:aix (medium 4.6)
- [CVE-2007-0391](https://insights.sbomify.com/CVE-2007-0391/): Memory corruption in bitdefender:bitdefender client (high 7.2)
- [CVE-2007-0390](https://insights.sbomify.com/CVE-2007-0390/): Cross-site scripting in sabros.us:sabros.us (medium 6.8)
- [CVE-2007-0389](https://insights.sbomify.com/CVE-2007-0389/): Path traversal in arsdigita:arsdigita community education solution (high 7.8)
- [CVE-2007-0388](https://insights.sbomify.com/CVE-2007-0388/): SQL injection in woltlab:burning board (high 7.5)
- [CVE-2007-0387](https://insights.sbomify.com/CVE-2007-0387/): SQL injection in joomla:joomla (high 7.5)
- [CVE-2007-0386](https://insights.sbomify.com/CVE-2007-0386/): Other in postnuke software foundation:postnuke (critical 10.0)
- [CVE-2007-0385](https://insights.sbomify.com/CVE-2007-0385/): Information disclosure in postnuke software foundation:postnuke (high 7.8)
- [CVE-2007-0384](https://insights.sbomify.com/CVE-2007-0384/): Cross-site scripting in postnuke software foundation:postnuke (medium 5.1)
- [CVE-2007-0383](https://insights.sbomify.com/CVE-2007-0383/): Missing authorization in wdaemon:wdaemon (medium 5.0)
- [CVE-2007-0382](https://insights.sbomify.com/CVE-2007-0382/): SQL injection in letterman:letterman (high 7.5)
- [CVE-2007-0381](https://insights.sbomify.com/CVE-2007-0381/): SQL injection in adaptive technology resource centre:atutor (high 7.5)
- [CVE-2007-0380](https://insights.sbomify.com/CVE-2007-0380/): Information disclosure in docman:docman (medium 5.0)
- [CVE-2007-0379](https://insights.sbomify.com/CVE-2007-0379/): Cross-site scripting in docman:docman (medium 6.8)
- [CVE-2007-0378](https://insights.sbomify.com/CVE-2007-0378/): SQL injection in docman:docman (high 7.5)
- [CVE-2007-0377](https://insights.sbomify.com/CVE-2007-0377/): SQL injection in xoops:xoops (high 7.5)
- [CVE-2007-0376](https://insights.sbomify.com/CVE-2007-0376/): Cross-site scripting in virtuemart:virtuemart (medium 6.8)
- [CVE-2007-0375](https://insights.sbomify.com/CVE-2007-0375/): Information disclosure in joomla:joomla (medium 5.0)
- [CVE-2007-0374](https://insights.sbomify.com/CVE-2007-0374/): SQL injection in joomla:joomla (high 7.5)
- [CVE-2007-0373](https://insights.sbomify.com/CVE-2007-0373/): SQL injection in joomla:joomla (medium 6.8)
- [CVE-2007-0372](https://insights.sbomify.com/CVE-2007-0372/): SQL injection in francisco burzi:php-nuke (high 7.5)
- [CVE-2007-0371](https://insights.sbomify.com/CVE-2007-0371/): Denial of service in common controls replacement project:browsedialog server (medium 4.3)
- [CVE-2007-0370](https://insights.sbomify.com/CVE-2007-0370/): File upload in phpbp:phpbp (high 7.5)
- [CVE-2007-0369](https://insights.sbomify.com/CVE-2007-0369/): SQL injection in phpbp:phpbp (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2007/page/61/