Skip to content
BackEsc
Sign in

No vendor recorded · 2007

No vendor recorded: 2007

7,209 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE whose record names no vendor, published in 2007. The named ones are the most at risk.

check available
6
likely to be exploited
699

Every one of the 7,209 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Distccd v1 - Remote Code ExecutionCVE-2004-268787% likely

    CWE-16

  2. Apache Tomcat 4.x-7.x - Cross-Site ScriptingCVE-2007-244977% likely
  3. OpenSymphony XWork/Apache Struts2 - Remote Code ExecutionCVE-2007-455626% likely
  4. phpPgAdmin <=4.1.1 - Cross-Site ScriptingCVE-2007-572815% likely

    CWE-79

  5. Joomla! RSfiles <=1.0.2 - Local File InclusionCVE-2007-45049.5% likely
  6. Jira Rainbow.Zen - Cross-Site ScriptingCVE-2007-08856.0% likely
  7. Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the…CVE-2007-088299% likely

    CWE-88

  8. Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allo…CVE-2007-045091% likely

    CWE-22

  9. Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Sea…CVE-2007-392585% likely

    CWE-119

  10. Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbitrary code via parameters to t…CVE-2007-217584% likely
  11. clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary commands via shell metacharacters that are used in a certain popen…CVE-2007-456084% likely

    CWE-78

  12. lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when…CVE-2001-158383% likely

    CWE-78

  13. The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attackers to bypass authentication and gain a…CVE-2007-103682% likely

    CWE-264

  14. Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used…CVE-2007-077482% likely
  15. Apache HTTP Server 2.0.x and 2.2.x does not sanitize the HTTP Method specifier header from an HTTP request when it is reflected back in a "413 Request Entity Too Large" error mess…CVE-2007-620381% likely

    CWE-79

  16. Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote…CVE-2007-536580% likely

    CWE-119

  17. Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Su…CVE-2007-044980% likely

    CWE-119

  18. Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute arbitra…CVE-2006-527679% likely
  19. Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 thro…CVE-2007-213978% likely
  20. Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allow…CVE-2007-174878% likely

    CWE-119

  21. Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests invol…CVE-2007-244678% likely

    CWE-119

  22. Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1)…CVE-2007-250877% likely

    CWE-119

  23. PHP remote file inclusion vulnerability in footer.php in the Horoscope 1.0 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfig[root…CVE-2007-323677% likely
  24. tiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via PHP sequences in the f array parameter, which are processed by create_function.CVE-2007-542377% likely

    CWE-94

  25. Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files…CVE-2007-004276% likely

    CWE-200

  26. Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, an…CVE-2007-488076% likely

    CWE-119

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in