Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-5000
HistoryDec 13, 2007 - 6:46 p.m.

CVE-2007-5000

2007-12-1318:46:00
CWE-79
[email protected]
web.nvd.nist.gov
12

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.665

Percentile

98.0%

JSON

Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

Nvd
Node
apachehttp_serverRange1.3.0โ€“1.3.39
OR
apachehttp_serverRange2.0.35โ€“2.0.61
OR
apachehttp_serverRange2.2.0โ€“2.2.6
Node
fedoraprojectfedoraMatch7
OR
fedoraprojectfedoraMatch8
Node
canonicalubuntu_linuxMatch6.06
OR
canonicalubuntu_linuxMatch6.10
OR
canonicalubuntu_linuxMatch7.04
OR
canonicalubuntu_linuxMatch7.10
Node
opensuseopensuseMatch10.2
OR
opensuseopensuseMatch10.3
OR
suselinux_enterprise_desktopMatch9
OR
suselinux_enterprise_serverMatch9
OR
suselinux_enterprise_serverMatch10sp1
Node
oraclehttp_serverMatch10.1.3.5.0
VendorProductVersionCPE
apachehttp_server*cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
fedoraprojectfedora7cpe:2.3:o:fedoraproject:fedora:7:*:*:*:*:*:*:*
fedoraprojectfedora8cpe:2.3:o:fedoraproject:fedora:8:*:*:*:*:*:*:*
canonicalubuntu_linux6.06cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*
canonicalubuntu_linux6.10cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*
canonicalubuntu_linux7.04cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*
canonicalubuntu_linux7.10cpe:2.3:o:canonical:ubuntu_linux:7.10:*:*:*:*:*:*:*
opensuseopensuse10.2cpe:2.3:o:opensuse:opensuse:10.2:*:*:*:*:*:*:*
opensuseopensuse10.3cpe:2.3:o:opensuse:opensuse:10.3:*:*:*:*:*:*:*
suselinux_enterprise_desktop9cpe:2.3:o:suse:linux_enterprise_desktop:9:*:*:*:*:*:*:*
Rows per page:
1-10 of 131

References

Related

httpd 3
debiancve 1
jvn 1
f5 2
checkpoint_advisories 2
cvelist 1
ubuntucve 1
seebug 1
prion 1
nessus 40
cve 1
veracode 1
openvas 71
slackware 3
securityvulns 4
redhat 8
centos 4
oraclelinux 3
altlinux 3
fedora 2
suse 1
vmware 2
ubuntu 1
osv 1
oracle 1
httpd
httpd
Apache Httpd < 1.3.41 : mod_imagemap XSS
2007-10-23 00:00:00
Apache Httpd < 2.2.8 : mod_imagemap XSS
2007-10-23 00:00:00
Apache Httpd < 2.0.63 : mod_imagemap XSS
2007-10-23 00:00:00
debiancve
debiancve
CVE-2007-5000
2007-12-13 18:46:00
jvn
jvn
JVN#80057925: Cross-site scripting vulnerability in Apache HTTP Server "mod_imap" and "mod_imagemap"
2007-12-13 00:00:00
f5
f5
SOL8186 - Cross-site scripting vulnerability in Apache mod_imap CVE-2007-5000
2007-12-27 00:00:00
K8186 : Cross-site scripting vulnerability in Apache mod_imap CVE-2007-5000
2013-03-19 00:00:00
checkpoint_advisories
checkpoint_advisories
Apache mod_imap and mod_imagemap Module Cross-Site Scripting (CVE-2007-5000)
2009-10-21 00:00:00
Preemptive Protection against Apache mod_imap and mod_imagemap Module Cross-Site Scripting Vulnerability
2008-01-08 00:00:00
cvelist
cvelist
CVE-2007-5000
2007-12-13 18:00:00
ubuntucve
ubuntucve
CVE-2007-5000
2007-12-13 00:00:00
seebug
seebug
Apache mod_imagemapๅ’Œmod_imapๆจกๅ—่ทจ็ซ™่„šๆœฌๆผๆดž
2008-01-11 00:00:00
prion
prion
Cross site scripting
2007-12-13 18:46:00
nessus
nessus
F5 Networks BIG-IP : XSS vulnerability in Apache mod_imap (SOL8186)
2014-10-10 00:00:00
Slackware 12.0 / 12.1 / current : httpd (SSA:2008-210-02)
2008-07-29 00:00:00
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 8.1 / 9.0 / 9.1 : apache (SSA:2008-045-02)
2008-02-18 00:00:00
cve
cve
CVE-2007-5000
2007-12-13 18:46:00
veracode
veracode
Cross-Site Scripting (XSS)
2020-04-10 00:19:34
openvas
openvas
Slackware Advisory SSA:2008-210-02 httpd
2012-09-11 00:00:00
HP OpenView Network Node Manager XSS Vulnerability
2008-12-02 00:00:00
Slackware: Security Advisory (SSA:2008-210-02)
2012-09-10 00:00:00
slackware
slackware
[slackware-security] httpd
2008-07-29 05:31:49
[slackware-security] apache
2008-02-15 01:23:13
[slackware-security] httpd
2008-02-15 01:22:54
securityvulns
securityvulns
[security bulletin] HPSBMA02388 SSRT080059 rev.1 - HP OpenView Network Node Manager &#40;OV NNM&#41;, Remote Cross Site Scripting &#40;XSS&#41;
2008-11-21 00:00:00
HP OpenView Network Node Manager crossite scripting
2008-11-21 00:00:00
About the security content of Security Update 2008-003 / Mac OS X 10.5.3
2008-05-30 00:00:00
redhat
redhat
(RHSA-2008:0007) Moderate: httpd security update
2008-01-15 00:00:00
(RHSA-2008:0006) Moderate: httpd security update
2008-01-15 00:00:00
(RHSA-2008:0004) Moderate: apache security update
2008-01-15 00:00:00
centos
centos
apache security update
2008-01-16 02:42:35
httpd, mod_ssl security update
2008-01-15 13:48:01
httpd, mod_ssl security update
2008-01-15 12:48:29
oraclelinux
oraclelinux
Moderate: httpd security update
2008-01-15 00:00:00
Moderate: httpd security update
2008-01-15 00:00:00
Moderate: httpd security update
2008-01-15 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 8 package apache2 version 2.2.8-alt1
2008-02-29 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.8-alt1
2008-02-29 00:00:00
Security fix for the ALT Linux 9 package apache2 version 2.2.8-alt1
2008-02-29 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: httpd-2.2.8-1.fc8
2008-02-16 02:11:16
[SECURITY] Fedora 7 Update: httpd-2.2.8-1.fc7
2008-02-16 02:08:32
suse
suse
cross site scripting in apache2,apache
2008-04-04 16:29:16
vmware
vmware
VMware Hosted products update libpng and Apache HTTP Server
2009-08-20 00:00:00
VMware Hosted products update libpng and Apache HTTP Server
2009-08-20 00:00:00
ubuntu
ubuntu
Apache vulnerabilities
2008-02-04 00:00:00
osv
osv
apache2-2.4.49-1.1 on GA media
2024-06-15 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2013
2013-07-16 00:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.665

Percentile

98.0%

JSON
Related for NVD:CVE-2007-5000
httpd3debiancve1jvn1f52checkpoint_advisories2cvelist1ubuntucve1seebug1prion1nessus40cve1veracode1openvas71slackware3securityvulns4redhat8centos4oraclelinux3altlinux3fedora2suse1vmware2ubuntu1osv1oracle1