Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: April 2007

53 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2007-1819
    49Plan

    Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality Cente

    CriticalCVSS 9.3WeaponizedEPSS 39%

    hp · mercury quality centerApr 2, 2007

  • CVE-2007-1825
    33Monitor

    Buffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrar

    HighCVSS 7.5Proof of conceptEPSS 10%

    php · phpApr 2, 2007

  • CVE-2007-1211
    37Monitor

    Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-assisted remote attac

    HighCVSS 7.1Proof of conceptEPSS 29%

    microsoft · windows 2000Apr 4, 2007

  • CVE-2007-1866
    43Plan

    Stack-based buffer overflow in the dns_decode_reverse_name function in dns_decode.c in dproxy-nexgen allows remote attackers to execute arbi

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    dproxy · dproxyApr 4, 2007

  • CVE-2007-1868
    58Plan

    The management service in IBM Tivoli Provisioning Manager for OS Deployment before 5.1 Fix Pack 2 does not properly handle multipart/form-da

    CriticalCVSS 10.0WeaponizedEPSS 59%

    ibm · tivoli provisioning manager os deploymentApr 4, 2007

  • CVE-2007-0956
    49Plan

    The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username

    CriticalCVSS 10.0No exploitEPSS 29%

    mit · kerberos 5Apr 5, 2007

  • CVE-2007-0957
    39Monitor

    Stack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) a

    CriticalCVSS 9.0No exploitEPSS 10%

    mit · kerberos 5Apr 5, 2007

  • CVE-2007-1687
    43Plan

    Multiple buffer overflows in the Internet Pictures Corporation iPIX Image Well ActiveX control (iPIX-ImageWell-ipix.dll) allow remote attack

    CriticalCVSS 10.0Proof of conceptEPSS 11%

    internet pictures corporation · ipix image wellApr 10, 2007

  • CVE-2007-0938
    54Plan

    Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain characters in a crafted HTTP GET request,

    CriticalCVSS 10.0No exploitEPSS 45%

    microsoft · content management serverApr 10, 2007

  • CVE-2007-0939
    22Monitor

    Cross-site scripting (XSS) vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 allows remote attackers to inje

    MediumCVSS 4.3No exploitEPSS 16%

    microsoft · content management serverApr 10, 2007

  • CVE-2007-1205
    46Plan

    Unspecified vulnerability in Microsoft Agent (msagent\agentsvr.exe) in Windows 2000 SP4, XP SP2, and Server 2003, 2003 SP1, and 2003 SP2 all

    CriticalCVSS 9.3No exploitEPSS 30%

    microsoft · windows 2000Apr 10, 2007

  • CVE-2006-7192
    24Monitor

    Microsoft ASP .NET Framework 2.0.50727.42 does not properly handle comment (/* */) enclosures, which allows remote attackers to bypass reque

    MediumCVSS 4.3No exploitEPSS 22%

    microsoft · .net frameworkApr 10, 2007

  • CVE-2007-1910
    34Monitor

    Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service (application crash) and possibly ex

    MediumCVSS 6.8Proof of conceptEPSS 24%

    microsoft · wordApr 10, 2007

  • CVE-2007-1911
    32Monitor

    Multiple unspecified vulnerabilities in Microsoft Word 2007 allow remote attackers to cause a denial of service (CPU consumption) via crafte

    HighCVSS 7.1Proof of conceptEPSS 11%

    microsoft · wordApr 10, 2007

  • CVE-2007-1912
    30Monitor

    Heap-based buffer overflow in Microsoft Windows allows user-assisted remote attackers to have an unknown impact via a crafted .HLP file.

    MediumCVSS 6.8Proof of conceptEPSS 11%

    microsoft · windows 2000Apr 10, 2007

  • CVE-2007-1357
    35Monitor

    The atalk_sum_skb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x, allows remote attackers to cause a denial

    HighCVSS 7.8Proof of conceptEPSS 13%

    linux · linux kernelApr 10, 2007

  • CVE-2007-1946
    48Plan

    Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a denial of service (cr

    CriticalCVSS 10.0No exploitEPSS 26%

    microsoft · windows xpApr 10, 2007

  • CVE-2007-1559
    47Plan

    Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via

    CriticalCVSS 9.3WeaponizedEPSS 31%

    roxio · cineplayerApr 11, 2007

  • CVE-2007-1748
    63This week

    Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Serve

    CriticalCVSS 10.0WeaponizedEPSS 77%

    microsoft · windows 2000Apr 13, 2007

  • CVE-2007-2031
    45Plan

    Buffer overflow in the HTTP proxy service for 3proxy 0.5 to 0.5.3g, and 0.6b-devel before 20070413, might allow remote attackers to execute

    CriticalCVSS 10.0Proof of conceptEPSS 15%

    3proxy · 3proxyApr 16, 2007

  • CVE-2007-2052
    24Monitor

    Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be us

    MediumCVSS 5.0Proof of conceptEPSS 13%

    python · pythonApr 16, 2007

  • CVE-2007-1674
    62This week

    Stack-based buffer overflow in the Alert Service (aolnsrvr.exe) in LANDesk Management Suite 8.7 allows remote attackers to execute arbitrary

    CriticalCVSS 10.0WeaponizedEPSS 72%

    landesk · landesk management suiteApr 17, 2007

  • CVE-2007-2057
    46Plan

    Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authenticati

    CriticalCVSS 10.0Proof of conceptEPSS 19%

    aircrack-ng · airodump-ngApr 17, 2007

  • CVE-2007-2093
    44Plan

    Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) 1.0 allows remote attackers to inject ar

    HighCVSS 7.5Proof of conceptEPSS 45%

    limesoft · limesoft guestbookApr 18, 2007

  • CVE-2007-2108
    33Monitor

    Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 on Windows allows remote a

    MediumCVSS 6.8No exploitEPSS 21%

    oracle · database serverApr 18, 2007

  • CVE-2007-2141
    44Plan

    Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary PHP code into shout

    HighCVSS 7.5Proof of conceptEPSS 45%

    shoutpro · shoutproApr 19, 2007

  • CVE-2007-2156
    33Monitor

    Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PHP code via a URL in

    HighCVSS 7.5Proof of conceptEPSS 10%

    rezervi generic · rezervi genericApr 19, 2007

  • CVE-2007-2161
    21Monitor

    Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (browser hang) via JavaScript that matches a regular expr

    MediumCVSS 4.3No exploitEPSS 12%

    microsoft · internet explorerApr 22, 2007

  • CVE-2007-2165
    24Monitor

    The Auth API in ProFTPD before 20070417, when multiple simultaneous authentication modules are configured, does not require that the module

    MediumCVSS 5.1No exploitEPSS 12%

    proftpd project · proftpdApr 22, 2007

  • CVE-2007-2167
    43Plan

    Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into config.php via the number

    HighCVSS 7.5Proof of conceptEPSS 44%

    aimstats · aimstatsApr 22, 2007

  • CVE-2007-2175
    55Plan

    Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to exe

    HighCVSS 7.6WeaponizedEPSS 83%

    apple · safariApr 24, 2007

  • CVE-2007-0746
    43Plan

    Heap-based buffer overflow in the VideoConference framework in Apple Mac OS X 10.3.9 through 10.4.9 allows remote attackers to execute arbit

    CriticalCVSS 10.0No exploitEPSS 10%

    apple · mac os xApr 24, 2007

  • CVE-2007-2193
    48Plan

    Stack-based buffer overflow in the ID_X.apl plugin in ACDSee 9.0 Build 108, Pro 8.1 Build 99, and Photo Editor 4.0 Build 195 allows user-ass

    CriticalCVSS 9.3WeaponizedEPSS 36%

    acd systems · acdseeApr 24, 2007

  • CVE-2007-2194
    46Plan

    Stack-based buffer overflow in XnView 1.90.3 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a l

    CriticalCVSS 10.0Proof of conceptEPSS 18%

    gentoo · xnviewApr 24, 2007

  • CVE-2007-2171
    47Plan

    Stack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW) WebAccess before 7.0 SP2 allows remote att

    CriticalCVSS 10.0No exploitEPSS 24%

    novell · groupwiseApr 24, 2007

  • CVE-2007-2199
    41Plan

    PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for Vincent Blavet PhpConc

    MediumCVSS 6.8Proof of conceptEPSS 46%

    cjg explorer pro · cjg explorer proApr 24, 2007

  • CVE-2007-2200
    43Plan

    Directory traversal vulnerability in navigator/navigator_ok.php in Pagode 0.5.8 allows remote attackers to read and possibly delete arbitrar

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    pagode · pagodeApr 24, 2007

  • CVE-2007-2209
    30Monitor

    Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11.20 and possibly othe

    MediumCVSS 6.8Proof of conceptEPSS 11%

    accusoft · imagegearApr 24, 2007

  • CVE-2007-2244
    47Plan

    Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote attackers to execute arbi

    CriticalCVSS 9.3Proof of conceptEPSS 31%

    adobe · goliveApr 25, 2007

  • CVE-2007-2139
    63This week

    Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used

    CriticalCVSS 10.0WeaponizedEPSS 77%

    ca · brightstor arcserve backupApr 25, 2007

  • CVE-2007-2285
    35Monitor

    Directory traversal vulnerability in examples/layout/feed-proxy.php in Jack Slocum Ext 1.0 alpha1 (Ext JS) allows remote attackers to read a

    HighCVSS 7.8Proof of conceptEPSS 11%

    jack slocum · ext jsApr 26, 2007

  • CVE-2007-1683
    38Monitor

    Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail IMMenuShellExt ActiveX control (ImShExt.dll) allows remote at

    MediumCVSS 6.8Proof of conceptEPSS 37%

    incredimail · immenushellext activex controlApr 26, 2007

  • CVE-2007-2291
    36Monitor

    CRLF injection vulnerability in the Digest Authentication support for Microsoft Internet Explorer 7.0.5730.11 allows remote attackers to con

    HighCVSS 7.5No exploitEPSS 20%

    microsoft · internet explorerApr 26, 2007

  • CVE-2007-2292
    21Monitor

    CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remot

    MediumCVSS 4.3No exploitEPSS 12%

    mozilla · firefoxApr 26, 2007

  • CVE-2007-2293
    37Monitor

    Multiple stack-based buffer overflows in the process_sdp function in chan_sip.c of the SIP channel T.38 SDP parser in Asterisk before 1.4.3

    HighCVSS 7.6Proof of conceptEPSS 23%

    asterisk · asteriskApr 26, 2007

  • CVE-2007-2340
    40Plan

    Multiple PHP remote file inclusion vulnerabilities in inc/include_all.inc.php in phporacleview allow remote attackers to execute arbitrary P

    MediumCVSS 6.8Proof of conceptEPSS 42%

    phporacleview · phporacleviewApr 27, 2007

  • CVE-2007-2353
    28Monitor

    Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installati

    MediumCVSS 5.0Proof of conceptEPSS 27%

    apache · axisApr 30, 2007

  • CVE-2007-2356
    32Monitor

    Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in Gimp 2.2.14 allows user-assisted remote atta

    MediumCVSS 6.8Proof of conceptEPSS 15%

    gimp · gimpApr 30, 2007

  • CVE-2007-2362
    41Plan

    Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service (daemon crash) and possibly execute arbitra

    CriticalCVSS 9.0Proof of conceptEPSS 16%

    don moore · mydnsApr 30, 2007

  • CVE-2007-2365
    49Plan

    Buffer overflow in Adobe Photoshop CS2 and CS3, Photoshop Elements 5.0, Illustrator CS3, and GoLive 9 allows user-assisted remote attackers

    CriticalCVSS 9.3Proof of conceptEPSS 41%

    adobe · goliveApr 30, 2007

  • CVE-2007-2366
    39Monitor

    Buffer overflow in Corel Paint Shop Pro 11.20 allows user-assisted remote attackers to execute arbitrary code via a crafted .PNG file.

    HighCVSS 7.4Proof of conceptEPSS 33%

    corel · paint shop proApr 30, 2007

  • CVE-2007-2374
    42Plan

    Unspecified vulnerability in Microsoft Windows 2000, XP, and Server 2003 allows user-assisted remote attackers to execute arbitrary code via

    CriticalCVSS 9.3No exploitEPSS 17%

    microsoft · windows 2000Apr 30, 2007

  • CVE-2007-2380
    24Monitor

    The Microsoft Atlas framework exchanges data using JavaScript Object Notation (JSON) without an associated protection scheme, which allows r

    MediumCVSS 5.0No exploitEPSS 12%

    microsoft · atlas frameworkApr 30, 2007