Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
2,494 vulnerabilities · highest exploit probability first
  • CVE-2007-4440High 7.5
    Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, allows remote attackers to execute arbitrary code via a long AUTH CRAM-MD5 string.
    pmail · mercury mail transport system
    EPSS65%
    3 exploits
    Published Aug 20, 2007
  • CVE-2007-4370High 7.5
    Multiple buffer overflows in the (1) client and (2) server in Racer 0.5.3 beta 5 allow remote attackers to execute arbitrary code via a long string to UDP port 26000.
    racer · racer
    EPSS59%
    3 exploits
    Published Aug 15, 2007
  • CVE-2007-3034Critical 9.3
    Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 allows remote attackers to execute arbitrary code via a crafted metafile (image) with a large record length value, which triggers a…
    microsoft · windows 2000
    EPSS52%
    1 exploit
    Published Aug 14, 2007
  • CVE-2007-3386Medium 4.3
    tomcat host manager xss
    apache · tomcat
    EPSS59%
    1 exploit
    Published Aug 14, 2007
  • CVE-2007-3872Medium 6.8
    Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and possibly earlier versions, allow remote attackers to execute arbitrary code via certain crafted requests.
    hp · openview operations
    EPSS30%
    2 exploits
    Published Aug 9, 2007
  • CVE-2007-3566High 7.5
    Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote attackers to execute arbitrary code via a long size value in a create request to port 3050/tcp.
    borland software · interbase
    EPSS66%
    2 exploits
    Published Jul 26, 2007
  • CVE-2007-4006Medium 6.8
    Buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 has unknown impact and remote attack vectors, aka ZD-00000034.
    mike dubman · windows rsh daemon
    EPSS34%
    3 exploits
    Published Jul 25, 2007
  • CVE-2007-3925Medium 6.5
    Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.
    ipswitch · imail server
    EPSS85%
    3 exploits
    Published Jul 20, 2007
  • CVE-2007-3798Critical 9.8
    Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.
    tcpdump · tcpdump
    EPSS70%
    1 exploit
    Published Jul 16, 2007
  • CVE-2007-0042High 7.8
    Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive information, and possibly bypass security mechanisms that try to constrain the…
    microsoft · .net framework
    EPSS76%
    1 exploit
    Published Jul 10, 2007
  • CVE-2007-3614High 7.5
    Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 through 7.5, allow remote attackers to execute arbitrary code via (1) a certain cookie value; (2) a certain additional parameter, related to sapdbwa_GetQueryString; and other…
    sap · sap db
    EPSS70%
    4 exploits
    Published Jul 6, 2007
  • CVE-2007-3605High 7.6
    Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remote attackers to execute arbitrary code via a long argument to the PrepareToPostHTML function.
    sap · enjoysap
    EPSS70%
    2 exploits
    Published Jul 6, 2007
  • CVE-2007-3435Critical 9.3
    Stack-based buffer overflow in the BeginPrint method in a certain ActiveX control in RKD Software (barcodetools.com) BarCodeAx.dll 4.9 allows remote attackers to execute arbitrary code via a long argument.
    rkd software · barcode activex
    EPSS35%
    2 exploits
    Published Jun 26, 2007
  • CVE-2007-3314Medium 6.8
    Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (English Trial), and 2.0 with Portable Executable Viewer 1.00 (English Trial), allows remote attackers to execute arbitrary code via a long PDB debug filename in a PE…
    altap · portable executable viewer
    EPSS43%
    2 exploits
    Published Jun 21, 2007
  • CVE-2007-3280Critical 9.0
    Database superuser can execute code on behalf of postgresql server
    postgresql · postgresql
    EPSS25%
    1 exploit
    Published Jun 19, 2007
  • CVE-2007-3216Critical 10.0
    Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.1 allow remote attackers to execute arbitrary code via crafted arguments to the (1) rxsAddNewUser, (2) rxsSetUserInfo, (3) rxsRenameUser, (4)…
    broadcom · brightstor arcserve backup laptops desktops
    EPSS59%
    6 exploits
    Published Jun 14, 2007
  • CVE-2007-2222Critical 9.3
    Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as used by Microsoft Internet Explorer 5.01, 6, and 7, allow remote attackers to execute arbitrary code via a crafted ActiveX object that triggers memory corruption,…
    microsoft · internet explorer
    EPSS55%
    2 exploits
    Published Jun 12, 2007
  • CVE-2007-3147Critical 9.3
    Buffer overflow in the Yahoo!
    yahoo · messenger
    EPSS40%
    3 exploits
    Published Jun 11, 2007
  • CVE-2007-2919Critical 9.3
    Multiple stack-based buffer overflows in the FViewerLoading ActiveX control (FlipViewerX.dll) in E-Book Systems FlipViewer before 4.1 allow remote attackers to cause a denial of service (crash) or execute arbitrary code via long (1) UID, (2) Opf, (3) PAGENO, (4) LaunchMode, (5)…
    e-book systems · flipviewer
    EPSS34%
    2 exploits
    Published Jun 6, 2007
  • CVE-2007-2864Critical 9.3
    Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.
    broadcom · anti-virus for the enterprise
    EPSS50%
    2 exploits
    Published Jun 6, 2007
  • CVE-2007-3068Medium 6.8
    Stack-based buffer overflow in DVD X Player 4.1 Professional allows remote attackers to execute arbitrary code via a PLF playlist containing a long filename.
    dvd x studios · dvd x player
    EPSS33%
    4 exploits
    Published Jun 5, 2007
  • CVE-2007-2987Critical 9.3
    Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the (1) DebugMsgLog or (2) DoFileProperties methods.
    zenturi · zenturi programchecker
    EPSS34%
    4 exploits
    Published Jun 1, 2007
  • CVE-2007-2918Medium 6.8
    Multiple stack-based buffer overflows in ActiveX controls (1) VibeC in (a) vibecontrol.dll, (2) CallManager and (3) ViewerClient in (b) StarClient.dll, (4) ComLink in (c) uicomlink.dll, and (5) WebCamXMP in (d) wcamxmp.dll in Logitech VideoCall allow remote attackers to cause a…
    logitech · videocall
    EPSS34%
    2 exploits
    Published May 31, 2007
  • CVE-2007-2888High 7.6
    Stack-based buffer overflow in UltraISO 8.6.2.2011 and earlier allows user-assisted remote attackers to execute arbitrary code via a long FILE string (filename) in a .cue file, a related issue to CVE-2007-2761.
    ezb systems · ultraiso
    EPSS55%
    4 exploits
    Published May 29, 2007
  • CVE-2007-2386Critical 9.4
    Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted UPnP Internet Gateway Device (IGD) packet.
    apple · mac os x
    EPSS50%
    2 exploits
    Published May 24, 2007
  • CVE-2007-2815Critical 10.0
    The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL configuration, which allows remote attackers to bypass NTLM and basic authentication mechanisms and access private web directories via the…
    microsoft · internet information services
    EPSS73%
    1 exploit
    Published May 22, 2007
  • CVE-2007-1689Critical 10.0
    Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the (1) Get and (2) Set functions.
    symantec · norton personal firewall
    EPSS65%
    2 exploits
    Published May 16, 2007
  • CVE-2007-2711Critical 10.0
    Stack-based buffer overflow in TinyIdentD 2.2 and earlier allows remote attackers to execute arbitrary code via a long string to TCP port 113.
    tinyirc · tinyidentd
    EPSS63%
    2 exploits
    Published May 16, 2007
  • CVE-2007-2446Critical 10.0
    Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_type_data), (3)…
    samba · samba
    EPSS78%
    7 exploits
    Published May 14, 2007
  • CVE-2007-2447Medium 6.0
    The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote…
    samba · samba
    EPSS50%
    2 exploits
    Published May 14, 2007
  • CVE-2007-2508Critical 10.0
    Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the…
    trend micro · serverprotect
    EPSS77%
    5 exploits
    Published May 8, 2007
  • CVE-2007-0213Critical 10.0
    Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, which allows remote attackers to execute arbitrary code via a crafted base64-encoded MIME e-mail message.
    microsoft · exchange server
    EPSS66%
    1 exploit
    Published May 8, 2007
  • CVE-2007-2139Critical 10.0
    Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection…
    broadcom · brightstor arcserve backup
    EPSS78%
    2 exploits
    Published Apr 25, 2007
  • CVE-2007-2193Critical 9.3
    Stack-based buffer overflow in the ID_X.apl plugin in ACDSee 9.0 Build 108, Pro 8.1 Build 99, and Photo Editor 4.0 Build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string.
    acd systems · acdsee
    EPSS37%
    2 exploits
    Published Apr 24, 2007
  • CVE-2007-2175High 7.6
    Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbitrary code via parameters to the toQTPointer method in quicktime.util.QTHandleRef, which can be used to modify arbitrary memory…
    apple · safari
    EPSS84%
    4 exploits
    Published Apr 24, 2007
  • CVE-2007-1674Critical 10.0
    Stack-based buffer overflow in the Alert Service (aolnsrvr.exe) in LANDesk Management Suite 8.7 allows remote attackers to execute arbitrary code via a crafted packet to port 65535/UDP.
    landesk · landesk management suite
    EPSS73%
    3 exploits
    Published Apr 18, 2007
  • CVE-2007-1748Critical 10.0
    Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary code via a long zone name containing character constants…
    microsoft · windows 2000
    EPSS78%
    7 exploits
    Published Apr 13, 2007
  • CVE-2007-1559Critical 9.3
    Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via (1) unspecified long property values to SonicMediaPlayer.dll or (2) long arguments to unspecified methods in SonicMediaPlayer.dll.
    roxio · cineplayer
    EPSS32%
    3 exploits
    Published Apr 11, 2007
  • CVE-2007-1868Critical 10.0
    The management service in IBM Tivoli Provisioning Manager for OS Deployment before 5.1 Fix Pack 2 does not properly handle multipart/form-data in HTTP POST requests, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via crafted…
    ibm · tivoli provisioning manager os deployment
    EPSS59%
    2 exploits
    Published Apr 4, 2007
  • CVE-2007-1819Critical 9.3
    Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows remote attackers to execute arbitrary code via a long ProgColor property.
    hp · mercury quality center
    EPSS40%
    3 exploits
    Published Apr 2, 2007
  • CVE-2007-0038Critical 9.3
    Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (or later) anih block of a RIFF .ANI,…
    microsoft · windows 2000
    EPSS73%
    17 exploits
    Published Mar 30, 2007
  • CVE-2007-1765Critical 9.3
    Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and…
    microsoft · internet explorer
    EPSS55%
    12 exploits
    Published Mar 29, 2007
  • CVE-2007-1675Critical 10.0
    Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service via a long username.
    ibm · lotus domino
    EPSS61%
    3 exploits
    Published Mar 28, 2007
  • CVE-2007-1567Critical 10.0
    Stack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors, as demonstrated by warftp_165.tar by Immunity.
    war ftp daemon · war ftp daemon
    EPSS51%
    3 exploits
    Published Mar 21, 2007
  • CVE-2007-0348Critical 9.3
    Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) WinDVD 7.0.27.172, and possibly other products, allows remote attackers to execute arbitrary code via a long ApplicationType property.
    interactual technologies · interactual player
    EPSS37%
    2 exploits
    Published Mar 21, 2007
  • CVE-2007-1435Critical 10.0
    Buffer overflow in D-Link TFTP Server 1.0 allows remote attackers to cause a denial of service (crash) via a long (1) GET or (2) PUT request, which triggers memory corruption.
    d-link · tftp server
    EPSS46%
    3 exploits
    Published Mar 13, 2007
  • CVE-2007-1404High 7.3
    tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote attackers to cause a denial of service via a long UDP packet that is not properly handled in a recv_from call.
    prosysinfo · tftp server tftpdwin
    EPSS68%
    1 exploit
    Published Mar 10, 2007
  • CVE-2007-1373Critical 10.0
    Stack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier allows remote attackers to execute arbitrary code via a long LOGIN command.
    pmail · mercury mail transport system
    EPSS60%
    4 exploits
    Published Mar 9, 2007
  • CVE-2007-0774High 7.5
    Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitrary code via a long URL that…
    apache · tomcat jk web server connector
    EPSS82%
    3 exploits
    Published Mar 4, 2007
  • CVE-2007-1286Medium 6.8
    Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.
    php · php
    EPSS41%
    4 exploits
    Published Mar 2, 2007
Showing 2,051–2,100 of 2,494

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.