Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: July 2007

55 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2007-3522
    47Plan

    Multiple PHP remote file inclusion vulnerabilities in sPHPell 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the Spe

    MediumCVSS 6.8Proof of conceptEPSS 66%

    sphpell · sphpellJul 3, 2007

  • CVE-2007-3524
    46Plan

    Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to execute arbitrary PHP

    MediumCVSS 6.8Proof of conceptEPSS 64%

    ripe website manager · ripe website managerJul 3, 2007

  • CVE-2007-3536
    34Monitor

    Multiple buffer overflows in the AMX NetLinx VNC (AmxVnc) ActiveX control in AmxVnc.dll 1.0.13.0 allow remote attackers to execute arbitrary

    HighCVSS 7.6Proof of conceptEPSS 13%

    amx · netlinx vnc activex controlJul 3, 2007

  • CVE-2007-3550
    39Monitor

    Microsoft Internet Explorer 6.0 and 7.0 allows remote attackers to fill Zones with arbitrary domains using certain metacharacters such as wi

    HighCVSS 7.8No exploitEPSS 27%

    microsoft · ieJul 3, 2007

  • CVE-2007-3554
    35Monitor

    Stack-based buffer overflow in the HPSDDX Class (SDD) ActiveX control in sdd.dll in HP Instant Support - Driver Check before 1.5.0.3 allows

    HighCVSS 7.6Proof of conceptEPSS 17%

    hp · instant supportJul 4, 2007

  • CVE-2007-3576
    21Monitor

    Microsoft Internet Explorer 6 executes web script from URIs of arbitrary scheme names ending with the "script" character sequence, using the

    MediumCVSS 4.3No exploitEPSS 12%

    microsoft · internet explorerJul 5, 2007

  • CVE-2007-3605
    51Plan

    Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remot

    HighCVSS 7.6WeaponizedEPSS 69%

    sap · enjoysapJul 6, 2007

  • CVE-2007-3614
    51Plan

    Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 through 7.5, allow remote attackers

    HighCVSS 7.5WeaponizedEPSS 70%

    sap · sap dbJul 6, 2007

  • CVE-2007-3624
    51Plan

    Heap-based buffer overflow in the Message HTTP Server in SAP Message Server allows remote attackers to execute arbitrary code via a long str

    CriticalCVSS 10.0Proof of conceptEPSS 36%

    sap · sap message serverJul 9, 2007

  • CVE-2007-3632
    45Plan

    Multiple PHP remote file inclusion vulnerabilities in LimeSurvey (aka PHPSurveyor) 1.49RC2 allow remote attackers to execute arbitrary PHP c

    MediumCVSS 6.8Proof of conceptEPSS 61%

    limesurvey · limesurveyJul 9, 2007

  • CVE-2007-3655
    31Monitor

    Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remot

    MediumCVSS 6.8Proof of conceptEPSS 12%

    sun · jreJul 10, 2007

  • CVE-2007-3670
    26Monitor

    Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered,

    MediumCVSS 4.3Proof of conceptEPSS 29%

    microsoft · internet explorerJul 10, 2007

  • CVE-2007-0040
    52Plan

    The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4, Server 2003 SP1 and SP2, Server 2003 x64 Edition and SP2,

    CriticalCVSS 10.0No exploitEPSS 39%

    microsoft · windows 2000Jul 10, 2007

  • CVE-2007-0041
    46Plan

    The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to

    CriticalCVSS 9.3No exploitEPSS 30%

    microsoft · windows 2000Jul 10, 2007

  • CVE-2007-0042
    54Plan

    Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote

    HighCVSS 7.8Proof of conceptEPSS 76%

    microsoft · windows 2000Jul 10, 2007

  • CVE-2007-0043
    46Plan

    The Just In Time (JIT) Compiler service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows us

    CriticalCVSS 9.3No exploitEPSS 30%

    microsoft · windows 2000Jul 10, 2007

  • CVE-2007-1754
    47Plan

    PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-

    CriticalCVSS 9.3No exploitEPSS 32%

    microsoft · publisherJul 10, 2007

  • CVE-2007-1756
    47Plan

    Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and Office Excel 2007 does not properly validate version information, which allow

    CriticalCVSS 9.3No exploitEPSS 32%

    microsoft · excelJul 10, 2007

  • CVE-2007-3028
    32Monitor

    The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4 does not properly check "the number of convertible attribu

    MediumCVSS 5.0No exploitEPSS 39%

    microsoft · windows 2000Jul 10, 2007

  • CVE-2007-3029
    46Plan

    Unspecified vulnerability in Microsoft Excel 2002 SP3 and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a mal

    CriticalCVSS 9.3No exploitEPSS 30%

    microsoft · excelJul 10, 2007

  • CVE-2007-3030
    38Monitor

    Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a malforme

    HighCVSS 7.6No exploitEPSS 25%

    microsoft · excelJul 10, 2007

  • CVE-2007-3038
    42Plan

    The Teredo interface in Microsoft Windows Vista and Vista x64 Edition does not properly handle certain network traffic, which allows remote

    HighCVSS 7.8No exploitEPSS 35%

    microsoft · windows vistaJul 10, 2007

  • CVE-2007-3456
    51Plan

    Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value

    CriticalCVSS 9.3Proof of conceptEPSS 47%

    adobe · flash playerJul 11, 2007

  • CVE-2007-3697
    34Monitor

    PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to execute arbitrary code

    HighCVSS 7.5Proof of conceptEPSS 12%

    tufat · flashbbJul 11, 2007

  • CVE-2007-2394
    41Plan

    Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code

    CriticalCVSS 9.3Proof of conceptEPSS 12%

    apple · mac os xJul 15, 2007

  • CVE-2007-2417
    45Plan

    Heap-based buffer overflow in _mprosrv.exe in Progress Software Progress 9.1E and OpenEdge 10.1x, as used by the RSA Authentication Manager

    CriticalCVSS 10.0No exploitEPSS 16%

    rsa · securidJul 15, 2007

  • CVE-2007-3780
    24Monitor

    MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malformed password packet in

    MediumCVSS 5.0No exploitEPSS 14%

    mysql · community serverJul 15, 2007

  • CVE-2007-3798
    60This week

    Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via craf

    CriticalCVSS 9.8Proof of conceptEPSS 70%

    tcpdump · tcpdumpJul 16, 2007

  • CVE-2007-3806
    30Monitor

    The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via an in

    MediumCVSS 6.8Proof of conceptEPSS 10%

    php · phpJul 16, 2007

  • CVE-2007-3813
    35Monitor

    PHP remote file inclusion vulnerability in include/user.php in the NoBoard BETA module for MKPortal allows remote attackers to execute arbit

    MediumCVSS 4.3Proof of conceptEPSS 59%

    mkportal · noboard moduleJul 16, 2007

  • CVE-2007-3823
    39Monitor

    The Logging Server (Logsrv.exe) in IPSwitch WS_FTP 7.5.29.0 allows remote attackers to cause a denial of service (daemon crash) by sending a

    HighCVSS 7.8No exploitEPSS 25%

    ipswitch · ws ftpJul 16, 2007

  • CVE-2007-3826
    46Plan

    Microsoft Internet Explorer 7 on Windows XP SP2 allows remote attackers to prevent users from leaving a site, spoof the address bar, and con

    CriticalCVSS 9.3No exploitEPSS 28%

    microsoft · windows xpJul 17, 2007

  • CVE-2007-3832
    41Plan

    Buffer overflow in the AOL Instant Messenger (AIM) protocol handler in AIM.DLL in Cerulean Studios Trillian allows remote attackers to execu

    CriticalCVSS 9.3Proof of conceptEPSS 11%

    cerulean studios · trillianJul 17, 2007

  • CVE-2007-3763
    28Monitor

    The IAX2 channel driver (chan_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before be

    MediumCVSS 5.0Proof of conceptEPSS 26%

    asterisk · asteriskJul 18, 2007

  • CVE-2007-3764
    29Monitor

    The Skinny channel driver (chan_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW befor

    MediumCVSS 5.0Proof of conceptEPSS 31%

    asterisk · asteriskJul 18, 2007

  • CVE-2007-3855
    31Monitor

    Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated use

    MediumCVSS 6.5Proof of conceptEPSS 15%

    oracle · database serverJul 18, 2007

  • CVE-2007-3825
    41Plan

    Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Not

    CriticalCVSS 9.3No exploitEPSS 14%

    ca · anti-virus for the enterpriseJul 18, 2007

  • CVE-2007-3924
    41Plan

    Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registered

    CriticalCVSS 9.3No exploitEPSS 13%

    microsoft · internet explorerJul 20, 2007

  • CVE-2007-3925
    51Plan

    Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to

    MediumCVSS 6.5WeaponizedEPSS 84%

    ipswitch · imail serverJul 20, 2007

  • CVE-2007-3927
    47Plan

    Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified

    CriticalCVSS 10.0Proof of conceptEPSS 21%

    ipswitch · imail serverJul 20, 2007

  • CVE-2007-3930
    23Monitor

    Interpretation conflict between Microsoft Internet Explorer and DocuWiki before 2007-06-26b allows remote attackers to inject arbitrary Java

    MediumCVSS 4.3No exploitEPSS 19%

    microsoft · internet explorerJul 20, 2007

  • CVE-2007-2926
    21Monitor

    ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sendi

    MediumCVSS 4.3Proof of conceptEPSS 13%

    isc · bindJul 24, 2007

  • CVE-2007-3958
    35Monitor

    Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service via a certain GIF file, as demo

    HighCVSS 7.1Proof of conceptEPSS 22%

    microsoft · windows 2000Jul 24, 2007

  • CVE-2007-0060
    44Plan

    Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) softwa

    CriticalCVSS 9.3No exploitEPSS 23%

    ca · etrust adminJul 25, 2007

  • CVE-2007-3302
    40Plan

    The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer Associates) eTrust Int

    CriticalCVSS 9.3No exploitEPSS 10%

    ca · etrust intrusion detectionJul 25, 2007

  • CVE-2007-4005
    23Monitor

    Stack-based buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 allows remote attackers to execute arbitrary code via a long string

    MediumCVSS 5.0Proof of conceptEPSS 11%

    mike dubman · windows rsh daemonJul 25, 2007

  • CVE-2007-4006
    40Plan

    Buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 has unknown impact and remote attack vectors, aka ZD-00000034.

    MediumCVSS 6.8WeaponizedEPSS 34%

    mike dubman · windows rsh daemonJul 25, 2007

  • CVE-2007-3566
    50Plan

    Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote attackers to execute a

    HighCVSS 7.5WeaponizedEPSS 66%

    borland software · interbaseJul 26, 2007

  • CVE-2007-4033
    36Monitor

    Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute a

    HighCVSS 7.5Proof of conceptEPSS 18%

    t1lib · t1libJul 27, 2007

  • CVE-2007-4034
    41Plan

    Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before 2007.7.13.3 (2007062

    CriticalCVSS 9.3Proof of conceptEPSS 12%

    yahoo · widgetsJul 27, 2007

  • CVE-2007-4040
    39Monitor

    Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, allows remote attackers

    HighCVSS 8.8No exploitEPSS 13%

    microsoft · outlookJul 27, 2007

  • CVE-2007-4041
    33Monitor

    Multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and 3.0alpha allow remote attackers to execute arbitrary commands via

    MediumCVSS 6.8No exploitEPSS 19%

    mozilla · firefoxJul 27, 2007

  • CVE-2007-4042
    33Monitor

    Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary commands via a NULL byte (%0

    HighCVSS 7.5No exploitEPSS 10%

    netscape · navigatorJul 27, 2007

  • CVE-2007-4058
    24Monitor

    Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows remote attackers to

    MediumCVSS 4.3Proof of conceptEPSS 22%

    emc · vmwareJul 30, 2007

  • CVE-2007-4061
    40Plan

    Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to create or ov

    CriticalCVSS 9.3Proof of conceptEPSS 11%

    nessus · vulnerability scannerJul 30, 2007