CVE-2007-5000

medium · 4.3

Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

4.3

CVSS

46.6%

EPSS (exploit prob.)

99th

EPSS percentile

2007-12-13

Published

AV:N/AC:M/Au:N/C:N/I:P/A:N

Weaknesses

CWE-79

Affected products

Vendor	Product	Affected versions
apache	http_server	>= 1.3.0, <= 1.3.39
apache	http_server	>= 2.0.35, <= 2.0.61
apache	http_server	>= 2.2.0, <= 2.2.6
fedoraproject	fedora	7
fedoraproject	fedora	8
canonical	ubuntu_linux	6.06
canonical	ubuntu_linux	6.10
canonical	ubuntu_linux	7.04
canonical	ubuntu_linux	7.10
opensuse	opensuse	10.2
opensuse	opensuse	10.3
suse	linux_enterprise_desktop	9
suse	linux_enterprise_server	9
suse	linux_enterprise_server	10
oracle	http_server	10.1.3.5.0

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-5000