Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
3,918 vulnerabilities · highest exploit probability first
  • CVE-2007-3386Medium 4.3
    tomcat host manager xss
    apache · tomcat
    EPSS59%
    1 exploit
    Published Aug 14, 2007
  • CVE-2007-4320High 7.5
    PHP remote file inclusion vulnerability in admin/addons/archive/archive.php in Ncaster 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in the adminfolder parameter.
    ncaster · ncaster
    EPSS72%
    ·
    Published Aug 13, 2007
  • CVE-2007-4313Medium 6.8
    PHP remote file inclusion vulnerability in public_includes/pub_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter, a different vector than CVE-2006-2392, CVE-2006-3076, and…
    php blue dragon · php blue dragon cms
    EPSS69%
    ·
    Published Aug 13, 2007
  • CVE-2007-4279High 7.5
    PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter.
    frontaccounting · frontaccounting
    EPSS75%
    ·
    Published Aug 9, 2007
  • CVE-2007-3872Medium 6.8
    Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and possibly earlier versions, allow remote attackers to execute arbitrary code via certain crafted requests.
    hp · openview operations
    EPSS30%
    2 exploits
    Published Aug 9, 2007
  • CVE-2007-4232Medium 6.8
    PHP remote file inclusion vulnerability in admin/inc/change_action.php in Andreas Robertz PHPNews 0.93 allows remote attackers to execute arbitrary PHP code via a URL in the format_menue parameter.
    andreas robertz · phpnews
    EPSS52%
    ·
    Published Aug 8, 2007
  • CVE-2007-3566High 7.5
    Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote attackers to execute arbitrary code via a long size value in a create request to port 3050/tcp.
    borland software · interbase
    EPSS66%
    2 exploits
    Published Jul 26, 2007
  • CVE-2007-4006Medium 6.8
    Buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 has unknown impact and remote attack vectors, aka ZD-00000034.
    mike dubman · windows rsh daemon
    EPSS34%
    3 exploits
    Published Jul 25, 2007
  • CVE-2007-3925Medium 6.5
    Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.
    ipswitch · imail server
    EPSS85%
    3 exploits
    Published Jul 20, 2007
  • CVE-2007-3798Critical 9.8
    Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value.
    tcpdump · tcpdump
    EPSS70%
    1 exploit
    Published Jul 16, 2007
  • CVE-2007-3813Medium 4.3
    PHP remote file inclusion vulnerability in include/user.php in the NoBoard BETA module for MKPortal allows remote attackers to execute arbitrary PHP code via a URL in the MK_PATH parameter.
    mkportal · noboard module
    EPSS59%
    ·
    Published Jul 16, 2007
  • CVE-2007-0042High 7.8
    Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to access configuration files and obtain sensitive information, and possibly bypass security mechanisms that try to constrain the…
    microsoft · .net framework
    EPSS76%
    1 exploit
    Published Jul 10, 2007
  • CVE-2007-3632Medium 6.8
    Multiple PHP remote file inclusion vulnerabilities in LimeSurvey (aka PHPSurveyor) 1.49RC2 allow remote attackers to execute arbitrary PHP code via a URL in the homedir parameter to (1) OLE/PPS/File.php, (2) OLE/PPS/Root.php, (3) Spreadsheet/Excel/Writer.php, or (4) OLE/PPS.php…
    limesurvey · limesurvey
    EPSS62%
    ·
    Published Jul 9, 2007
  • CVE-2007-3614High 7.5
    Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 through 7.5, allow remote attackers to execute arbitrary code via (1) a certain cookie value; (2) a certain additional parameter, related to sapdbwa_GetQueryString; and other…
    sap · sap db
    EPSS70%
    4 exploits
    Published Jul 6, 2007
  • CVE-2007-3605High 7.6
    Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP SAP GUI allows remote attackers to execute arbitrary code via a long argument to the PrepareToPostHTML function.
    sap · enjoysap
    EPSS70%
    2 exploits
    Published Jul 6, 2007
  • CVE-2007-3522Medium 6.8
    Multiple PHP remote file inclusion vulnerabilities in sPHPell 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the SpellIncPath parameter to (1) spellcheckpageinc.php, (2) spellchecktext.php, (3) spellcheckwindow.php, or (4) spellcheckwindowframeset.php.
    sphpell · sphpell
    EPSS66%
    ·
    Published Jul 3, 2007
  • CVE-2007-3524Medium 6.8
    Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the level parameter to (1) admin/includes/author_panel_header.php or (2) admin/includes/admin_header.php.
    ripe website manager · ripe website manager
    EPSS64%
    ·
    Published Jul 3, 2007
  • CVE-2007-3431Medium 6.8
    PHP remote file inclusion vulnerability in cal.func.php in Valerio Capello Dagger - The Cutting Edge r23jan2007 allows remote attackers to execute arbitrary PHP code via a URL in the dir_edge_lang parameter.
    valerio capello · dagger - the cutting edge
    EPSS71%
    ·
    Published Jun 26, 2007
  • CVE-2007-3435Critical 9.3
    Stack-based buffer overflow in the BeginPrint method in a certain ActiveX control in RKD Software (barcodetools.com) BarCodeAx.dll 4.9 allows remote attackers to execute arbitrary code via a long argument.
    rkd software · barcode activex
    EPSS35%
    2 exploits
    Published Jun 26, 2007
  • CVE-2007-3401High 7.5
    PHP remote file inclusion vulnerability in footer.inc.php in B1G b1gBB 2.24 allows remote attackers to execute arbitrary PHP code via a URL in the tfooter parameter.
    b1g · b1gbb
    EPSS74%
    ·
    Published Jun 26, 2007
  • CVE-2007-3370High 7.5
    Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrary PHP code via a URL in (1) the sunPath parameter to include.php or (2) the dir parameter to skin/board/default/doctype.php.
    kim kyoung min · sun board
    EPSS75%
    ·
    Published Jun 22, 2007
  • CVE-2007-3371High 7.5
    PHP remote file inclusion vulnerability in plugins/widgets/htmledit/htmledit.php in Powl 0.94 allows remote attackers to execute arbitrary PHP code via a URL in the _POWL[installPath] parameter.
    powl · powl
    EPSS71%
    ·
    Published Jun 22, 2007
  • CVE-2007-3358Medium 6.8
    PHP remote file inclusion vulnerability in html/load_lang.php in SerWeb 0.9.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _SERWEB[serwebdir] parameter.
    iptel · serweb
    EPSS68%
    ·
    Published Jun 22, 2007
  • CVE-2007-3325High 7.5
    PHP remote file inclusion vulnerability in lib/language.php in LAN Management System (LMS) 1.9.6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the _LIB_DIR parameter, a different vector than CVE-2007-1643 and CVE-2007-2205.
    lms · lan management system
    EPSS64%
    ·
    Published Jun 21, 2007
  • CVE-2007-3314Medium 6.8
    Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (English Trial), and 2.0 with Portable Executable Viewer 1.00 (English Trial), allows remote attackers to execute arbitrary code via a long PDB debug filename in a PE…
    altap · portable executable viewer
    EPSS43%
    2 exploits
    Published Jun 21, 2007
  • CVE-2007-3306High 7.5
    PHP remote file inclusion vulnerability in crontab/run_billing.php in MiniBill 1.2.5 allows remote attackers to execute arbitrary PHP code via a URL in the config[include_dir] parameter, a different vector than CVE-2006-4489.
    ultrize · minibill
    EPSS64%
    ·
    Published Jun 20, 2007
  • CVE-2007-3280Critical 9.0
    Database superuser can execute code on behalf of postgresql server
    postgresql · postgresql
    EPSS25%
    1 exploit
    Published Jun 19, 2007
  • CVE-2007-3236High 7.5
    PHP remote file inclusion vulnerability in footer.php in the Horoscope 1.0 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfig[root_path] parameter.
    xoops · horoscope module
    EPSS77%
    ·
    Published Jun 14, 2007
  • CVE-2007-3237Medium 6.8
    PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the TinyContent 1.5 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter.
    xoops · tinycontent module
    EPSS68%
    ·
    Published Jun 14, 2007
  • CVE-2007-3230Medium 6.8
    PHP remote file inclusion vulnerability in phphtml.php in Idan Sofer PHP::HTML 0.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the htmlclass_path parameter.
    simian systems inc · sitellite
    EPSS68%
    ·
    Published Jun 14, 2007
  • CVE-2007-3221Medium 6.8
    PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the XT-Conteudo module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter.
    xoops · xt-conteudo module
    EPSS68%
    ·
    Published Jun 14, 2007
  • CVE-2007-3228Medium 6.8
    PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite CMS 4.2.12 and earlier might allow remote attackers to execute arbitrary PHP code via a URL in the FORUM[LIB] parameter.
    simian systems inc · sitellite cms
    EPSS67%
    ·
    Published Jun 14, 2007
  • CVE-2007-3220Medium 6.8
    PHP remote file inclusion vulnerability in admin/editor2/spaw_control.class.php in the Cjay Content 3 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter.
    xoops · cjay content module
    EPSS63%
    ·
    Published Jun 14, 2007
  • CVE-2007-3216Critical 10.0
    Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.1 allow remote attackers to execute arbitrary code via crafted arguments to the (1) rxsAddNewUser, (2) rxsSetUserInfo, (3) rxsRenameUser, (4)…
    broadcom · brightstor arcserve backup laptops desktops
    EPSS59%
    6 exploits
    Published Jun 14, 2007
  • CVE-2007-1751Critical 9.3
    Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to access an uninitialized or deleted object, related to prototype variables and table cells, aka "Uninitialized Memory Corruption Vulnerability."
    microsoft · internet explorer
    EPSS61%
    ·
    Published Jun 12, 2007
  • CVE-2007-2222Critical 9.3
    Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as used by Microsoft Internet Explorer 5.01, 6, and 7, allow remote attackers to execute arbitrary code via a crafted ActiveX object that triggers memory corruption,…
    microsoft · internet explorer
    EPSS55%
    2 exploits
    Published Jun 12, 2007
  • CVE-2007-3147Critical 9.3
    Buffer overflow in the Yahoo!
    yahoo · messenger
    EPSS40%
    3 exploits
    Published Jun 11, 2007
  • CVE-2007-2919Critical 9.3
    Multiple stack-based buffer overflows in the FViewerLoading ActiveX control (FlipViewerX.dll) in E-Book Systems FlipViewer before 4.1 allow remote attackers to cause a denial of service (crash) or execute arbitrary code via long (1) UID, (2) Opf, (3) PAGENO, (4) LaunchMode, (5)…
    e-book systems · flipviewer
    EPSS34%
    2 exploits
    Published Jun 6, 2007
  • CVE-2007-2864Critical 9.3
    Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allows remote attackers to execute arbitrary code via a large invalid value of the coffFiles field in a .CAB file.
    broadcom · anti-virus for the enterprise
    EPSS50%
    2 exploits
    Published Jun 6, 2007
  • CVE-2007-3057Medium 6.8
    PHP remote file inclusion vulnerability in include/wysiwyg/spaw_control.class.php in the icontent 4.5 module for XOOPS allows remote attackers to execute arbitrary PHP code via a URL in the spaw_root parameter.
    xoops · icontent module
    EPSS69%
    ·
    Published Jun 5, 2007
  • CVE-2007-3068Medium 6.8
    Stack-based buffer overflow in DVD X Player 4.1 Professional allows remote attackers to execute arbitrary code via a PLF playlist containing a long filename.
    dvd x studios · dvd x player
    EPSS33%
    4 exploits
    Published Jun 5, 2007
  • CVE-2007-2986High 7.5
    PHP remote file inclusion vulnerability in lib/live_status.lib.php in AdminBot MX 9.0.5 allows remote attackers to execute arbitrary PHP code via a URL in the ROOT parameter.
    nexen · adminbot mx
    EPSS64%
    ·
    Published Jun 1, 2007
  • CVE-2007-2987Critical 9.3
    Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to execute arbitrary code via unspecified vectors, possibly involving the (1) DebugMsgLog or (2) DoFileProperties methods.
    zenturi · zenturi programchecker
    EPSS34%
    4 exploits
    Published Jun 1, 2007
  • CVE-2007-2969High 7.5
    PHP remote file inclusion vulnerability in newsletter.php in WAnewsletter 2.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the waroot parameter.
    wanewsletter · wanewsletter
    EPSS62%
    ·
    Published May 31, 2007
  • CVE-2007-2918Medium 6.8
    Multiple stack-based buffer overflows in ActiveX controls (1) VibeC in (a) vibecontrol.dll, (2) CallManager and (3) ViewerClient in (b) StarClient.dll, (4) ComLink in (c) uicomlink.dll, and (5) WebCamXMP in (d) wcamxmp.dll in Logitech VideoCall allow remote attackers to cause a…
    logitech · videocall
    EPSS34%
    2 exploits
    Published May 31, 2007
  • CVE-2007-2937High 7.5
    PHP remote file inclusion vulnerability in admin/admin.php in TROforum 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the site_url parameter.
    troforum · troforum
    EPSS64%
    ·
    Published May 30, 2007
  • CVE-2007-2939Medium 6.8
    Multiple PHP remote file inclusion vulnerabilities in Mazen's PHP Chat 3.0.0 allow remote attackers to execute arbitrary PHP code via a URL in the basepath parameter to (1) ITX.php, (2) IT_Error.php, or (3) IT.php in include/pear/.
    mazens php chat · mazens php chat
    EPSS64%
    ·
    Published May 30, 2007
  • CVE-2007-2897High 7.5
    Microsoft Internet Information Services (IIS) 6.0 allows remote attackers to cause a denial of service (server instability or device hang), and possibly obtain sensitive information (device communication traffic); and might allow attackers with physical access to execute…
    microsoft · internet information server
    EPSS74%
    ·
    Published May 30, 2007
  • CVE-2007-2888High 7.6
    Stack-based buffer overflow in UltraISO 8.6.2.2011 and earlier allows user-assisted remote attackers to execute arbitrary code via a long FILE string (filename) in a .cue file, a related issue to CVE-2007-2761.
    ezb systems · ultraiso
    EPSS55%
    4 exploits
    Published May 29, 2007
  • CVE-2007-2386Critical 9.4
    Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service (application termination) or execute arbitrary code via a crafted UPnP Internet Gateway Device (IGD) packet.
    apple · mac os x
    EPSS50%
    2 exploits
    Published May 24, 2007
Showing 3,401–3,450 of 3,918

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.