Tools / CVE Explorer
Which vulnerabilities actually matter?
Every CVE with its CVSS severity, EPSS probability of exploitation and CISA KEV status side by side, refreshed daily from NVD, FIRST and CISA — plus a plain-English verdict on whether it needs an emergency change or the normal patch cycle.
The year’s CVE activity with KEV, EPSS and exploit data as a PDF: heatmaps, a vendor treemap, and the lists worth checking against your estate.
CVE Watchlist →Your products only, as a page, feed or emailThis week in CVEs →New by severity, KEV additions, EPSS jumpsKEV deadline calendar →CISA due dates, with an .ics feed
398,576 CVEs1,728 in CISA KEV17,267 with EPSS ≥ 10%25,049 with a public exploitUpdated 28 September 2026
25,049 results · page 324 of 501
| CVE | Summary | Priority | Published |
|---|---|---|---|
| CVE-2007-4918 | SQL injection vulnerability in classes/gelato.class.php in Gelato allows remote attackers to execute arbitrary SQL commands via the post parameter to index.php. | EXPLOIT ✓HIGH 7.5EPSS 1.62% | 17 September 2007 |
| CVE-2007-4917 | Cross-site scripting (XSS) vulnerability in tracking.php in PHP-Stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML via the ip parameter in an online action, a different vector than CVE-2007-4334. | EXPLOIT ✓MEDIUM 4.3EPSS 1.46% | 17 September 2007 |
| CVE-2007-4916 | Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft Foundation Class (MFC) Library 8.0, as used by the ListFiles method in hpqutil.dll 2.0.0.138 in Hewlett-Packard… | EXPLOIT ×2 ✓HIGH 10.0EPSS 19.7% | 17 September 2007 |
| CVE-2007-4915 | The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from entering memory locations used for string constants, which allows remote attackers to change the admin password… | EXPLOIT ×2 ✓HIGH 10.0EPSS 68.2% | 17 September 2007 |
| CVE-2007-4911 | JSMP3OGGWt.dll in JetCast Server 2.0.0.4308 allows remote attackers to cause a denial of service (daemon crash) via a long .mp3 URI to TCP port 8000. | EXPLOIT ✓MEDIUM 5.0EPSS 3.31% | 17 September 2007 |
| CVE-2007-4909 | Interpretation conflict in WinSCP before 4.0.4 allows remote attackers to perform arbitrary file transfers with a remote server via file-transfer commands in the final portion of a (1) scp, and possibly a (2) sftp or (3) ftp, URL, as demonstrated by a… | EXPLOIT ✓HIGH 9.3EPSS 3.52% | 17 September 2007 |
| CVE-2007-4908 | Directory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers to include and execute arbitrary local files via a .. | EXPLOIT ✓HIGH 7.5EPSS 2.83% | 17 September 2007 |
| CVE-2007-4907 | Multiple PHP remote file inclusion vulnerabilities in X-Cart allow remote attackers to execute arbitrary PHP code via a URL in the xcart_dir parameter to (1) config.php, (2) prepare.php, (3) smarty.php, (4) customer/product.php, (5) provider/auth.php,… | EXPLOIT ✓HIGH 7.5EPSS 8.22% | 17 September 2007 |
| CVE-2007-4906 | PHP remote file inclusion vulnerability in tasks/send_queued_emails.php in NuclearBB Alpha 2, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter. | EXPLOIT ✓MEDIUM 6.8EPSS 38.4% | 17 September 2007 |
| CVE-2007-4905 | Unrestricted file upload vulnerability in mod/contak.php in AuraCMS 2.1 allows remote attackers to upload and execute arbitrary PHP files via the image parameter, which places a file under files/. | EXPLOIT ✓HIGH 7.5EPSS 7.01% | 17 September 2007 |
| CVE-2007-4904 | RealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 on Fedora Core 6 (FC6) and possibly other platforms, allow user-assisted remote attackers to cause a denial of service (application crash) via a malformed .au file that triggers… | EXPLOIT ✓MEDIUM 4.3EPSS 2.79% | 17 September 2007 |
| CVE-2007-4903 | Multiple buffer overflows in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allow remote attackers to execute arbitrary code via (1) a long string in the first argument to the AcquireContext method or (2) an… | EXPLOIT ✓HIGH 7.5EPSS 9.39% | 17 September 2007 |
| CVE-2007-4902 | Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allows remote attackers to write to arbitrary files via a full pathname in the argument to the SaveToFile method. | EXPLOIT ✓MEDIUM 6.4EPSS 5.62% | 17 September 2007 |
| CVE-2007-4899 | Multiple cross-site scripting (XSS) vulnerabilities in Boinc Forum 5.10.20 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) id parameter to forum_forum.php, or the search_string parameter to… | EXPLOIT ×2 ✓MEDIUM 4.3EPSS 1.49% | 14 September 2007 |
| CVE-2007-4897 | pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service (application crash) via a long argument to the PString::vsprintf function, related to a "memory management flaw". | EXPLOIT ✓MEDIUM 5.0EPSS 10.9% | 14 September 2007 |
| CVE-2007-4896 | Multiple cross-site scripting (XSS) vulnerabilities in admin/header.php in Toms Gaestebuch 1.01 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) lang[adminseite], (2) lang[ueberschrift], or (3) einst[metachar]… | EXPLOIT ✓MEDIUM 4.3EPSS 1.73% | 14 September 2007 |
| CVE-2007-4895 | Directory traversal vulnerability in dwoprn.php in Sisfo Kampus 2006 (Semarang 3) allows remote attackers to read arbitrary files via the f parameter. | EXPLOIT ✓MEDIUM 5.0EPSS 2.73% | 14 September 2007 |
| CVE-2007-4892 | Multiple SQL injection vulnerabilities in SWSoft Plesk 7.6.1, 8.1.0, 8.1.1, and 8.2.0 for Windows allow remote attackers to execute arbitrary SQL commands via a PLESKSESSID cookie to (1) login.php3 or (2) auth.php3. | EXPLOIT ✓HIGH 7.5EPSS 1.22% | 14 September 2007 |
| CVE-2007-4891 | A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) StartProcess, (2) SyncShell, (3) SaveAs, (4) CABDefaultURL, (5) CABFileName, and (6) CABRunFile methods, which allows remote attackers… | EXPLOIT ✓MEDIUM 6.8EPSS 31.0% | 14 September 2007 |
| CVE-2007-4890 | Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support Library (VBTOVSI.DLL) 1.0.0.0 in Microsoft Visual Studio 6.0 allows remote attackers to create or overwrite arbitrary files via a full pathname in the… | EXPLOIT ✓MEDIUM 5.8EPSS 16.4% | 14 September 2007 |
| CVE-2007-4886 | Incomplete blacklist vulnerability in index.php in AuraCMS 1.x and probably 2.x allows remote attackers to execute arbitrary PHP code via a (1) UNC share pathname, or a (2) ftp, (3) ftps, or (4) ssh2.sftp URL, in the pilih parameter, for which PHP… | EXPLOIT ✓MEDIUM 6.8EPSS 2.07% | 14 September 2007 |
| CVE-2007-4846 | SQL injection vulnerability in start.php in Webace-Linkscript (wls) 1.3 Special Edition (SE) allows remote attackers to execute arbitrary SQL commands via the id parameter in a rubrik go action. | EXPLOIT ✓HIGH 7.5EPSS 2.43% | 12 September 2007 |
| CVE-2007-4845 | Multiple SQL injection vulnerabilities in UPLOAD/index.php in RW::Download 2.0.3 lite allow remote attackers to execute arbitrary SQL commands via the (1) dlid or (2) cid parameter. | EXPLOIT ✓HIGH 7.5EPSS 1.01% | 12 September 2007 |
| CVE-2007-4843 | Directory traversal vulnerability in X-Diesel Unreal Commander 0.92 build 565 and 573 allows remote FTP servers to create or overwrite arbitrary files via a .. | EXPLOIT ✓MEDIUM 5.8EPSS 3.23% | 12 September 2007 |
| CVE-2007-4838 | Multiple buffer overflows in CellFactor Revolution 1.03 and earlier allow remote attackers to execute arbitrary code via a long string in a (1) 0x21, (2) 0x22, or (3) 0x23 packet. | EXPLOIT ✓HIGH 7.5EPSS 6.09% | 12 September 2007 |
| CVE-2007-4834 | Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP code via a URL in the MGR parameter to (1) index.php, (2) p_ins.php, and (3) u_ins.php in manager/admin/. | EXPLOIT ✓HIGH 7.5EPSS 58.5% | 12 September 2007 |
| CVE-2007-3040 | Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Microsoft Agent on Windows 2000 SP4 allows remote attackers to execute arbitrary code via a crafted URL to the Agent (Agent.Control) ActiveX control, which triggers an overflow within the Agent… | EXPLOIT ✓HIGH 9.3EPSS 54.4% | 12 September 2007 |
| CVE-2007-2930 | The (1) NSID_SHUFFLE_ONLY and (2) NSID_USE_POOL PRNG algorithms in ISC BIND 8 before 8.4.7-P1 generate predictable DNS query identifiers when sending outgoing queries such as NOTIFY messages when answering questions as a resolver, which allows remote… | EXPLOIT ×2 ✓MEDIUM 4.3EPSS 7.58% | 12 September 2007 |
| CVE-2007-4821 | Buffer overflow in a certain ActiveX control in officeviewer.ocx 5.2.218.1 in EDraw Office Viewer Component 5.2 allows remote attackers to execute arbitrary code via a long first argument to the HttpDownloadFileToTempDir method, a different… | EXPLOIT ✓HIGH 9.3EPSS 9.25% | 11 September 2007 |
| CVE-2007-4820 | Absolute path traversal vulnerability in blanko.preview.php in Sisfo Kampus 2006 allows remote attackers to read arbitrary local files, and possibly execute local PHP scripts, via the nmf parameter. | EXPLOIT ✓HIGH 7.5EPSS 2.33% | 11 September 2007 |
| CVE-2007-4819 | Multiple cross-site scripting (XSS) vulnerabilities in Txx CMS 0.2 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. | EXPLOIT ✓MEDIUM 4.3EPSS 1.52% | 11 September 2007 |
| CVE-2007-4818 | Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the doc_root parameter to (1) addons/plugin.php, (2) addons/sidebar.php, (3) mail/index.php, or (4) mail/mailbox.php in… | EXPLOIT ✓HIGH 7.5EPSS 55.5% | 11 September 2007 |
| CVE-2007-4817 | Unrestricted file upload vulnerability in the Restaurante (com_restaurante) component for Joomla! allows remote attackers to upload and execute arbitrary PHP code via an upload action specifying a filename with a double extension such as .php.jpg, which… | EXPLOIT ✓HIGH 7.5EPSS 7.27% | 11 September 2007 |
| CVE-2007-4816 | Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown impact via a long (1) URL, (2) backImage, or (3) titleImage property value; (4) a long first argument to the advancedOpen method; a long… | EXPLOIT ✓HIGH 7.5EPSS 9.15% | 11 September 2007 |
| CVE-2007-4815 | Multiple PHP remote file inclusion vulnerabilities in WebED in Markus Iser ED Engine 0.8999 alpha allow remote attackers to execute arbitrary PHP code via a URL in the Codebase parameter to (1) channeledit.php, (2) post.php, (3) view.php, or (4)… | EXPLOIT ✓MEDIUM 6.8EPSS 39.4% | 11 September 2007 |
| CVE-2007-4814 | Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQL Server Enterprise Manager 8.05.2004 allows remote attackers to execute arbitrary code via a long second… | EXPLOIT ×2 ✓HIGH 7.5EPSS 45.7% | 11 September 2007 |
| CVE-2007-4812 | Buffer overflow in Apple Safari 3.0.3 522.15.5, and other versions before Beta Update 3.0.4, allows remote attackers to cause a denial of service (crash) and possibly have other unspecified impact by setting document.location.hash to a long string. | EXPLOIT ✓MEDIUM 5.0EPSS 3.04% | 11 September 2007 |
| CVE-2007-4809 | Multiple PHP remote file inclusion vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 allow remote attackers to execute arbitrary PHP code via a URL in the DOC_ROOT parameter to (1) lib/functions.php or (2) lib/header.php. | EXPLOIT ✓HIGH 7.5EPSS 56.4% | 11 September 2007 |
| CVE-2007-4808 | Multiple SQL injection vulnerabilities in TLM CMS 3.2 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to news.php in a lirenews action, (2) the idnews parameter to goodies.php in a lire action, (3) the id parameter to… | EXPLOIT ✓HIGH 7.5EPSS 3.60% | 11 September 2007 |
| CVE-2007-4807 | Multiple PHP remote file inclusion vulnerabilities in Focus/SIS 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the staticpath parameter to (1) modules/Discipline/CategoryBreakdownTime.php or (2)… | EXPLOIT ✓HIGH 7.5EPSS 3.21% | 11 September 2007 |
| CVE-2007-4806 | PHP remote file inclusion vulnerability in modules/Discipline/CategoryBreakdownTime.php in Focus/SIS 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the FocusPath parameter. | EXPLOIT ✓HIGH 7.5EPSS 3.21% | 11 September 2007 |
| CVE-2007-4805 | Directory traversal vulnerability in getgalldata.php in fuzzylime (cms) 3.0 and earlier allows remote attackers to include arbitrary local files via a .. | EXPLOIT ✓HIGH 7.5EPSS 7.38% | 11 September 2007 |
| CVE-2007-4804 | Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) hal.php, (2) cetak.php, (3) lihat.php, (4) pesan.php, and (5) teman.php, different vectors than CVE-2007-4171. | EXPLOIT ✓HIGH 7.5EPSS 3.35% | 11 September 2007 |
| CVE-2007-4803 | Buffer overflow in AtomixMP3 2.3 allows user-assisted remote attackers to execute arbitrary code via long strings in file and title fields in a .pls file, as demonstrated by the (1) File1 and (2) Title1 fields, different vectors than CVE-2006-6287 and… | EXPLOIT ×2 ✓MEDIUM 6.8EPSS 3.89% | 11 September 2007 |
| CVE-2007-4802 | Multiple heap-based buffer overflows in GlobalLink 2.7.0.8 allow remote attackers to execute arbitrary code via (1) a long eighth argument to the SetInfo method in a certain ActiveX control in glItemCom.dll or (2) a long second argument to the… | EXPLOIT ×2 ✓MEDIUM 6.8EPSS 8.96% | 11 September 2007 |
| CVE-2007-4790 | Stack-based buffer overflow in certain ActiveX controls in (1) FPOLE.OCX 6.0.8450.0 and (2) Foxtlib.ocx, as used in the Microsoft Visual FoxPro 6.0 fpole 1.0 Type Library; and Internet Explorer 5.01, 6 SP1 and SP2, and 7; allows remote attackers to… | EXPLOIT ✓HIGH 7.5EPSS 54.9% | 10 September 2007 |
| CVE-2007-4781 | 1.5 Beta1, Beta2, and RC1 allows remote authenticated administrators to upload arbitrary files to tmp/ via the "Upload Package File" functionality, which is accessible when com_installer is the value of the option parameter. | EXPLOIT ✓MEDIUM 6.6EPSS 5.19% | 10 September 2007 |
| CVE-2007-4776 | Buffer overflow in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code via a Visual Basic project (vbp) file containing a long Reference line, related to VBP_Open and OLE. | EXPLOIT ×3 ✓HIGH 9.3EPSS 49.0% | 10 September 2007 |
| CVE-2007-4763 | PHP remote file inclusion vulnerability in dbmodules/DB_adodb.class.php in PHP Object Framework (PHPOF) 20040226 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHPOF_INCLUDE_PATH parameter. | EXPLOIT ✓HIGH 7.5EPSS 2.92% | 8 September 2007 |
| CVE-2007-4762 | Multiple SQL injection vulnerabilities in embadmin/login.asp in E-SMARTCART 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) user and (2) pass fields, different vectors than CVE-2007-0092. | EXPLOIT ✓HIGH 7.5EPSS 1.15% | 8 September 2007 |
How to read this
CVSS measures how bad a vulnerability could be if exploited. EPSS (from FIRST) estimates the probability it will actually be exploited in the next thirty days. KEV is CISA’s list of vulnerabilities that are being exploited right now. EXPLOIT means a working exploit is published in Exploit-DB, so the technical barrier is gone. Patch KEV entries first, then anything with a public exploit or an EPSS above 10 per cent, then work down by CVSS in your normal cycle.
Data is refreshed daily from the NVD, FIRST EPSS, the CISA KEV catalogue and the Exploit-DB repository. Every record can be downloaded as JSON from its page. Our SOC uses the same table to prioritise patching for clients; the verdict on each page is the rule of thumb our analysts apply.