CVE-2007-3033

🗓️ 14 Aug 2007 22:00:00Reported by microsoftType

cve

cve🔗 web.nvd.nist.gov👁 61 Views🌐 WEB

"CVE-2007-3033 Windows Vista XSS vulnerability

Reporter	Title	Published	Views	Family All 11
Check Point Advisories	Microsoft Windows Vista Feed Headlines Gadget Code Execution (MS07-048; CVE-2007-3033)	6 Oct 200900:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Windows Vista Feed Headlines Gadget Code Execution (MS07-048) - Ver2 (CVE-2007-3033)	26 Mar 201500:00	–	checkpoint_advisories
Cvelist	CVE-2007-3033	14 Aug 200722:00	–	cvelist
NVD	CVE-2007-3033	14 Aug 200722:17	–	nvd
Prion	Cross site scripting	14 Aug 200722:17	–	prion
securityvulns	Microsoft Security Bulletin MS07-048 - Important Vulnerabilities in Windows Gadgets Could Allow Remote Code Execution (938123)	15 Aug 200700:00	–	securityvulns
securityvulns	[Full-disclosure] iDefense Security Advisory 08.14.07: Microsoft Windows Vista Sidebar RSS Feeds Gadget Cross Site Scripting Vulnerability	15 Aug 200700:00	–	securityvulns
securityvulns	Microsoft Windows Vista gadgets code execution	15 Aug 200700:00	–	securityvulns
Tenable Nessus	MS07-048: Vulnerabilities in Windows Gadgets Could Allow Remote Code Execution (938123)	16 Aug 200700:00	–	nessus
seebug.org	Microsoft Vista侧栏RSS源小工具跨站脚本漏洞（MS07-048）	17 Aug 200700:00	–	seebug

NVD

Node

microsoft windows_vista

OR

microsoft windows_vistax64

Source	Link
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-048
secunia	www.secunia.com/advisories/26439
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2152
us-cert	www.us-cert.gov/cas/techalerts/TA07-226A.html
securitytracker	www.securitytracker.com/id
vupen	www.vupen.com/english/advisories/2007/2872
securityfocus	www.securityfocus.com/bid/25287
kb	www.kb.cert.org/vuls/id/558648
labs	www.labs.idefense.com/intelligence/vulnerabilities/display.php

Parameter	Position	Path	Description	CWE
pf	path	technet/security/Bulletin/MS07-048.mspx?pf=true	XSS in Windows Vista RSS Gadget via crafted RSS feed.	CWE-79
displaylang	path	downloads/details.aspx?displaylang=zh-cn&FamilyID=49a5bd84-da71-4529-b4d3-ac57dab59e01	XSS in Windows Vista RSS Gadget via crafted RSS feed.	CWE-79
FamilyID	path	downloads/details.aspx?displaylang=zh-cn&FamilyID=49a5bd84-da71-4529-b4d3-ac57dab59e01	XSS in Windows Vista RSS Gadget via crafted RSS feed.	CWE-79
FamilyId	path	downloads/details.aspx?FamilyId=24443f59-b908-480b-9b72-7094d4b5e128	XSS in Windows Vista RSS Gadget via crafted RSS feed.	CWE-79

16 Jun 2026 22:40Current

6Medium risk

Vulners AI Score6

CVSS 24.3

EPSS0.28367

"cve-2007-3033 windows vista xss vulnerability remote code execution"