Skip to content
brandefense.io
Request A Demo
Vulnerability Intelligence · Emerging

Emerging Threats, Before They Hit KEV.

Not on KEV yet, but the exploit signals say watch it: a high EPSS forecast or a weaponized exploit.

Synced hourly · figures as of Oct 20, 2026
AnyCriticalHighMediumLowAny signalExploit codeRansomwareOverdue
3,918 vulnerabilities · highest exploit probability first
  • CVE-2007-2815Critical 10.0
    The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL configuration, which allows remote attackers to bypass NTLM and basic authentication mechanisms and access private web directories via the…
    microsoft · internet information services
    EPSS73%
    1 exploit
    Published May 22, 2007
  • CVE-2007-2793High 7.5
    PHP remote file inclusion vulnerability in ImageImageMagick.php in Geeklog 2.x allows remote attackers to execute arbitrary PHP code via a URL in the glConf[path_system] parameter.
    geeklog · geeklog
    EPSS64%
    ·
    Published May 21, 2007
  • CVE-2007-1689Critical 10.0
    Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Security 2004 allows remote attackers to execute arbitrary code via long arguments to the (1) Get and (2) Set functions.
    symantec · norton personal firewall
    EPSS65%
    2 exploits
    Published May 16, 2007
  • CVE-2007-2707Medium 6.8
    PHP remote file inclusion vulnerability in linksnet_linkslog_rss.php in Linksnet Newsfeed 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the dirpath_linksnet_newsfeed parameter.
    linksnet · newsfeed
    EPSS68%
    ·
    Published May 16, 2007
  • CVE-2007-2711Critical 10.0
    Stack-based buffer overflow in TinyIdentD 2.2 and earlier allows remote attackers to execute arbitrary code via a long string to TCP port 113.
    tinyirc · tinyidentd
    EPSS63%
    2 exploits
    Published May 16, 2007
  • CVE-2007-2708High 7.5
    PHP remote file inclusion vulnerability in newsadmin.php in Feindt Computerservice News (News-Script) 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the action parameter.
    feindt computerservice · news-script
    EPSS63%
    ·
    Published May 16, 2007
  • CVE-2007-2446Critical 10.0
    Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary code via crafted MS-RPC requests involving (1) DFSEnum (netdfs_io_dfs_EnumInfo_d), (2) RFNPCNEX (smb_io_notify_option_type_data), (3)…
    samba · samba
    EPSS78%
    7 exploits
    Published May 14, 2007
  • CVE-2007-2447Medium 6.0
    The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharacters involving the (1) SamrChangePassword function, when the "username map script" smb.conf option is enabled, and allows remote…
    samba · samba
    EPSS50%
    2 exploits
    Published May 14, 2007
  • CVE-2007-2676High 7.5
    PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine (OTE) 0.7.8 allows remote attackers to execute arbitrary PHP code via a URL in the ote_home parameter.
    open translation engine · open translation engine
    EPSS71%
    ·
    Published May 14, 2007
  • CVE-2007-2607High 7.5
    PHP remote file inclusion vulnerability in views/print/printbar.php in LaVague 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the views_path parameter.
    lavague · lavague
    EPSS71%
    ·
    Published May 11, 2007
  • CVE-2007-2545High 7.5
    Multiple PHP remote file inclusion vulnerabilities in Persism CMS 0.9.2 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the system[path] parameter to (1) blocks/headerfile.php, (2) files/blocks/latest_files.php, (3) filters/headerfile.php, (4)…
    persism cms · persism cms
    EPSS69%
    ·
    Published May 8, 2007
  • CVE-2007-2508Critical 10.0
    Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the…
    trend micro · serverprotect
    EPSS77%
    5 exploits
    Published May 8, 2007
  • CVE-2007-0940Critical 9.3
    Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control (CAPICOM.dll) in Microsoft CAPICOM and BizTalk Server 2004 SP1 and SP2 allows remote attackers to execute arbitrary code via unspecified vectors, aka the "CAPICOM.Certificates…
    microsoft · biztalk server
    EPSS76%
    ·
    Published May 8, 2007
  • CVE-2007-0213Critical 10.0
    Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, which allows remote attackers to execute arbitrary code via a crafted base64-encoded MIME e-mail message.
    microsoft · exchange server
    EPSS66%
    1 exploit
    Published May 8, 2007
  • CVE-2007-2485Critical 9.8
    Myflash < 1.11 - Remote File Inclusion
    ruben boelinger · myflash
    EPSS55%
    ·
    Published Apr 30, 2007
  • CVE-2007-2426Critical 9.8
    MySliderGallery <= 1.2.1 - Remote File Inclusion
    wildbits · mygallery
    EPSS63%
    ·
    Published Apr 28, 2007
  • CVE-2007-2139Critical 10.0
    Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve Media Server, as used in BrightStor ARCserve Backup 9.01 through 11.5 SP2, BrightStor Enterprise Backup 10.5, Server Protection Suite 2, and Business Protection…
    broadcom · brightstor arcserve backup
    EPSS78%
    2 exploits
    Published Apr 25, 2007
  • CVE-2007-2193Critical 9.3
    Stack-based buffer overflow in the ID_X.apl plugin in ACDSee 9.0 Build 108, Pro 8.1 Build 99, and Photo Editor 4.0 Build 195 allows user-assisted remote attackers to execute arbitrary code via a crafted XPM file with a long section string.
    acd systems · acdsee
    EPSS37%
    2 exploits
    Published Apr 24, 2007
  • CVE-2007-2175High 7.6
    Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows remote attackers to execute arbitrary code via parameters to the toQTPointer method in quicktime.util.QTHandleRef, which can be used to modify arbitrary memory…
    apple · safari
    EPSS84%
    4 exploits
    Published Apr 24, 2007
  • CVE-2007-1674Critical 10.0
    Stack-based buffer overflow in the Alert Service (aolnsrvr.exe) in LANDesk Management Suite 8.7 allows remote attackers to execute arbitrary code via a crafted packet to port 65535/UDP.
    landesk · landesk management suite
    EPSS73%
    3 exploits
    Published Apr 18, 2007
  • CVE-2007-1748Critical 10.0
    Stack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service in Microsoft Windows 2000 Server SP 4, Server 2003 SP 1, and Server 2003 SP 2 allows remote attackers to execute arbitrary code via a long zone name containing character constants…
    microsoft · windows 2000
    EPSS78%
    7 exploits
    Published Apr 13, 2007
  • CVE-2007-1559Critical 9.3
    Multiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow remote attackers to execute arbitrary code via (1) unspecified long property values to SonicMediaPlayer.dll or (2) long arguments to unspecified methods in SonicMediaPlayer.dll.
    roxio · cineplayer
    EPSS32%
    3 exploits
    Published Apr 11, 2007
  • CVE-2007-1868Critical 10.0
    The management service in IBM Tivoli Provisioning Manager for OS Deployment before 5.1 Fix Pack 2 does not properly handle multipart/form-data in HTTP POST requests, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via crafted…
    ibm · tivoli provisioning manager os deployment
    EPSS59%
    2 exploits
    Published Apr 4, 2007
  • CVE-2007-1819Critical 9.3
    Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality Center 9.0 before Patch 12.1, and 8.2 SP1 before Patch 32, allows remote attackers to execute arbitrary code via a long ProgColor property.
    hp · mercury quality center
    EPSS40%
    3 exploits
    Published Apr 2, 2007
  • CVE-2007-0038Critical 9.3
    Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a large length value in the second (or later) anih block of a RIFF .ANI,…
    microsoft · windows 2000
    EPSS73%
    17 exploits
    Published Mar 30, 2007
  • CVE-2007-1765Critical 9.3
    Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of service (persistent reboot) via a malformed ANI file, which results in memory corruption when processing cursors, animated cursors, and…
    microsoft · internet explorer
    EPSS55%
    12 exploits
    Published Mar 29, 2007
  • CVE-2007-1675Critical 10.0
    Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a denial of service via a long username.
    ibm · lotus domino
    EPSS61%
    3 exploits
    Published Mar 28, 2007
  • CVE-2007-1697Critical 10.0
    PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CssFile parameter.
    philex · philex
    EPSS73%
    ·
    Published Mar 26, 2007
  • CVE-2007-1579Critical 10.0
    Stack-based buffer overflow in Atrium MERCUR IMAPD allows remote attackers to have an unknown impact via a certain SUBSCRIBE command.
    atrium software · mercur imapd
    EPSS57%
    ·
    Published Mar 21, 2007
  • CVE-2007-1567Critical 10.0
    Stack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors, as demonstrated by warftp_165.tar by Immunity.
    war ftp daemon · war ftp daemon
    EPSS51%
    3 exploits
    Published Mar 21, 2007
  • CVE-2007-0348Critical 9.3
    Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) WinDVD 7.0.27.172, and possibly other products, allows remote attackers to execute arbitrary code via a long ApplicationType property.
    interactual technologies · interactual player
    EPSS37%
    2 exploits
    Published Mar 21, 2007
  • CVE-2007-1435Critical 10.0
    Buffer overflow in D-Link TFTP Server 1.0 allows remote attackers to cause a denial of service (crash) via a long (1) GET or (2) PUT request, which triggers memory corruption.
    d-link · tftp server
    EPSS46%
    3 exploits
    Published Mar 13, 2007
  • CVE-2007-1404High 7.3
    tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote attackers to cause a denial of service via a long UDP packet that is not properly handled in a recv_from call.
    prosysinfo · tftp server tftpdwin
    EPSS68%
    1 exploit
    Published Mar 10, 2007
  • CVE-2007-1373Critical 10.0
    Stack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier allows remote attackers to execute arbitrary code via a long LOGIN command.
    pmail · mercury mail transport system
    EPSS60%
    4 exploits
    Published Mar 9, 2007
  • CVE-2007-0774High 7.5
    Stack-based buffer overflow in the map_uri_to_worker function (native/common/jk_uri_worker_map.c) in mod_jk.so for Apache Tomcat JK Web Server Connector 1.2.19 and 1.2.20, as used in Tomcat 4.1.34 and 5.5.20, allows remote attackers to execute arbitrary code via a long URL that…
    apache · tomcat jk web server connector
    EPSS82%
    3 exploits
    Published Mar 4, 2007
  • CVE-2007-1286Medium 6.8
    Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unserialize function, which triggers the overflow in the ZVAL reference counter.
    php · php
    EPSS41%
    4 exploits
    Published Mar 2, 2007
  • CVE-2007-1061Medium 6.8
    SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" block is enabled, allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header (HTTP_REFERER variable).
    francisco burzi · php-nuke
    EPSS62%
    2 exploits
    Published Feb 21, 2007
  • CVE-2007-1036High 7.5
    The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attackers to bypass authentication and gain administrative access via direct requests.
    jboss · jboss application server
    EPSS82%
    4 exploits
    Published Feb 21, 2007
  • CVE-2007-1070Critical 10.0
    Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62, allow remote attackers to execute arbitrary code via crafted RPC requests to TmRpcSrv.dll that trigger overflows when calling the (1)…
    trend micro · serverprotect
    EPSS73%
    3 exploits
    Published Feb 21, 2007
  • CVE-2007-0325Critical 9.3
    Multiple buffer overflows in the Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control in OfficeScanSetupINI.dll, as used in OfficeScan 7.0 before Build 1344, OfficeScan 7.3 before Build 1241, and Client / Server / Messaging Security 3.0 before Build 1197, allow…
    trend micro · client-server-messaging security
    EPSS35%
    2 exploits
    Published Feb 20, 2007
  • CVE-2006-5276Critical 10.0
    Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; allows remote attackers to execute arbitrary code via crafted SMB traffic.
    snort · snort
    EPSS79%
    4 exploits
    Published Feb 19, 2007
  • CVE-2007-0217Critical 10.0
    The wininet.dll FTP client code in Microsoft Internet Explorer 5.01 and 6 might allow remote attackers to execute arbitrary code via an FTP server response of a specific length that causes a terminating null byte to be written outside of a buffer, which causes heap corruption.
    microsoft · internet explorer
    EPSS58%
    1 exploit
    Published Feb 13, 2007
  • CVE-2007-0882Critical 10.0
    Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts,…
    oracle · solaris
    EPSS98%
    4 exploits
    Published Feb 12, 2007
  • CVE-2007-0785High 7.5
    PHP remote file inclusion vulnerability in previewtheme.php in Flipsource Flip 2.01-final 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the inc_path parameter.
    flipsource · flip
    EPSS69%
    ·
    Published Feb 6, 2007
  • CVE-2007-0009Medium 6.8
    NSS: SSLv2 protocol buffer overflows
    mozilla · firefox
    EPSS51%
    ·
    Published Feb 1, 2007
  • CVE-2007-0584High 7.5
    PHP remote file inclusion vulnerability in membres/membreManager.php in PhP Generic Library & Framework for comm (g-neric) allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter.
    g-neric · php generic library and framework
    EPSS70%
    ·
    Published Jan 30, 2007
  • CVE-2007-0018Critical 9.3
    Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function.
    americanshareware · mp3 wav converter
    EPSS36%
    4 exploits
    Published Jan 24, 2007
  • CVE-2007-0449Critical 10.0
    Multiple buffer overflows in LGSERVER.EXE in CA BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.1 SP1, Mobile Backup r4.0, Desktop and Business Protection Suite r2, and Desktop Management Suite (DMS) r11.0 and r11.1 allow remote attackers to execute…
    broadcom · business protection suite
    EPSS79%
    5 exploits
    Published Jan 23, 2007
  • CVE-2007-0169High 7.5
    Multiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5, Enterprise Backup 10.5, and CA Server/Business Protection Suite r2 allow remote attackers to execute arbitrary code via RPC requests with crafted data for opnums (1) 0x2F and (2)…
    broadcom · brightstor arcserve backup
    EPSS71%
    2 exploits
    Published Jan 11, 2007
  • CVE-2007-0046High 7.5
    Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to execute arbitrary code by causing an error via a javascript: URI call to document.write in the (1) FDF, (2) XML, or (3) XFDF AJAX request…
    adobe · acrobat reader
    EPSS57%
    1 exploit
    Published Jan 3, 2007
Showing 3,451–3,500 of 3,918

Note on years: years refer to the date the CVE record was published, not the year in its identifier. Some records are published or republished years later, so an older-looking ID such as a 2016 CVE can appear under a recent year.

FAQ

Common Questions.

Which Of These Are On Your Attack Surface?

Brandefense maps every internet-facing asset you own and flags the exploited CVEs on it the hour they are listed.

How The Scoring WorksRequest A Demo

About this list. Not on the KEV catalog yet, but either the EPSS forecast is 50% or higher or a weaponized exploit exists. The signals say watch it; the evidence does not yet justify a listing.

Figures as of Oct 20, 2026. Compiled by Brandefense technologies from public vulnerability catalogs; scoring as described in How it works.

To report an error, contact Brandefense.