month report
January 2007
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
January 2007 closed with 730 published CVEs. 85 criticals, oracle led volume, mostly via application server. Biggest breakout: gentoo foundation inc. at ×4.0 their 12-month median. Top weakness class — CWE-119 (21 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
730
— MoM— YoY
Severity mix
85 / 288
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
1.0%
7 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
6992.8
n=7
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
—
n=0
Weakness × Vendor
What's spreading where in January 2007
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — January 2007
No CVE mentions in the news this month yet.
Breakout vendors
CVE count ≥3× their own 12-period median.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #12the address book8 CVE
- #16endonesia6 CVE
- #22bitweaver4 CVE
- #24easebay resources4 CVE
- #25f54 CVE
- #27igeneric4 CVE
- #28webroot software4 CVE
- #29212cafe3 CVE
- #31docman3 CVE
- #32ezboxx3 CVE
Top vendors
Ranked by distinct CVE count this period.
- 33 CVECVSS 5.0PoC 2application server (12) · database server (11) · collaboration suite (9)
- 28 CVE4 critCVSS 7.2×3.1PoC 9mac os x (20) · quicktime (4) · ichat (3)
- 24 CVE16 critCVSS 8.7PoC 5office (10) · works (6) · excel (5)
- 20 CVE1 critCVSS 6.0weblogic server (17) · aqualogic service bus (2) · jrockit (1)
- 13 CVE3 critCVSS 7.0network admission control manager and server system software (3) · secure access control server (3) · ios transmission control protocol (3)
- 12 CVE1 critCVSS 6.5solaris (5) · sunos (3) · java system access manager (1)
- 10 CVE6 critCVSS 9.0×3.3PoC 1brightstor enterprise backup (4) · brightstor arcserve backup (4) · widcomm bluetooth (3)
- 9 CVECVSS 6.6×3.0PoC 3joomla (7) · rs gallery2 (1) · be it easypartner component (1)
- 8 CVE1 critCVSS 5.7PoC 3acrobat reader (7) · acrobat (4) · acrobat 3d (3)
- 8 CVE4 critCVSS 7.7×4.0gentoo linux (8)
- 8 CVE1 critCVSS 4.8PoC 1hp-ux (2) · openview network node manager (2) · http server (1)
- 8 CVECVSS 6.4NEWPoC 3the address book (8)
- 8 CVECVSS 6.5Nuclei 7PoC 2wordpress (8)
- 7 CVECVSS 5.8drupal (3) · project (3) · project issue tracking module (3)
- 7 CVE1 critCVSS 6.8PoC 2phpmyadmin (7)
- 6 CVECVSS 6.3NEWPoC 5endonesia (6)
- 6 CVE1 critCVSS 6.0aix (4) · os 400 (2)
- 6 CVE1 critCVSS 5.0linux kernel (6)
- 6 CVECVSS 5.4PoC 1debian gnu/linux (6)
- 5 CVECVSS 6.7PoC 1aztek forum (5)
- 4 CVE1 critCVSS 7.5ftp server (4)
- 4 CVECVSS 5.9NEW×4.0PoC 2bitweaver (4)
- 4 CVECVSS 7.0cms made simple (4)
- 4 CVECVSS 7.2NEWlogin manager (2) · paypal subscription manager (2)
- 4 CVECVSS 6.5NEW×4.0firepass (3) · firepass 4100 (1)
- 4 CVECVSS 6.4hirdb datareplicator (1) · cosminexus application server version 5 (1) · cosminexus developer light version 6 (1)
- 4 CVECVSS 7.5NEWPoC 3ig shop (3) · ig calendar (1)
- 4 CVECVSS 6.3NEWspy sweeper (3) · spy sweeper enterprise (1)
- 3 CVECVSS 6.8NEW212cafeboard (2) · guestbook (1)
- 3 CVE2 critCVSS 9.1PoC 1protection suites (2) · host-based intrusion prevention system (1)
- 3 CVECVSS 6.4NEWdocman (3)
- 3 CVECVSS 7.4NEWezboxx portal system (2) · portal system beta (1)
- 3 CVECVSS 5.9NEWPoC 2formbankserver (3)
- 3 CVECVSS 6.8freebsd (3)
- 3 CVECVSS 6.7NEWdirect web remoting (3)
- 3 CVE1 critCVSS 7.3PoC 2mdpro (2) · mdforum (1)
- 3 CVECVSS 5.2NEWPoC 1rumpus ftp server (3)
- 3 CVECVSS 7.4mkportal (3)
- 3 CVECVSS 3.9opensuse (2) · suse linux enterprise (1)
- 3 CVE2 critCVSS 7.6PoC 1opera browser (3)
- 3 CVE3 critCVSS 10.0phpbb (3)
- 3 CVECVSS 7.0NEWPoC 3php-update (3)
- 3 CVECVSS 6.7NEWwebgui (3)
- 3 CVE1 critCVSS 7.6postnuke (3)
- 3 CVE1 critCVSS 7.7NEWxfree86 (2) · xfree86 x server (1)
- 3 CVE1 critCVSS 7.7NEWx.org (3)
- 2 CVECVSS 7.5NEWPoC 2alex guestbook (2)
- 2 CVECVSS 7.5NEWPoC 1asp edge (2)
- 2 CVE1 critCVSS 8.4ubuntu linux (2)
- 2 CVECVSS 5.9NEWshopping basket professional (1) · webform (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | oracle | 33 | · | · | · | PoC 2 | application server (12) · database server (11) · collaboration suite (9) | — | |
| 2 | apple | 28 | 4 | · | · | ×3.1PoC 9 | mac os x (20) · quicktime (4) · ichat (3) | — | |
| 3 | microsoft | 24 | 16 | · | · | PoC 5 | office (10) · works (6) · excel (5) | — | |
| 4 | bea | 20 | 1 | · | · | weblogic server (17) · aqualogic service bus (2) · jrockit (1) | — | ||
| 5 | cisco | 13 | 3 | · | · | network admission control manager and server system software (3) · secure access control server (3) · ios transmission control protocol (3) | — | ||
| 6 | sun | 12 | 1 | · | · | solaris (5) · sunos (3) · java system access manager (1) | — | ||
| 7 | broadcom | 10 | 6 | · | · | ×3.3PoC 1 | brightstor enterprise backup (4) · brightstor arcserve backup (4) · widcomm bluetooth (3) | — | |
| 8 | joomla | 9 | · | · | · | ×3.0PoC 3 | joomla (7) · rs gallery2 (1) · be it easypartner component (1) | — | |
| 9 | adobe | 8 | 1 | · | · | PoC 3 | acrobat reader (7) · acrobat (4) · acrobat 3d (3) | — | |
| 10 | gentoo foundation inc. | 8 | 4 | · | · | ×4.0 | gentoo linux (8) | — | |
| 11 | hp | 8 | 1 | · | · | PoC 1 | hp-ux (2) · openview network node manager (2) · http server (1) | — | |
| 12 | the address book | 8 | · | · | · | NEWPoC 3 | the address book (8) | — | |
| 13 | wordpress | 8 | · | · | 7 | Nuclei 7PoC 2 | wordpress (8) | — | |
| 14 | drupal | 7 | · | · | · | drupal (3) · project (3) · project issue tracking module (3) | — | ||
| 15 | phpmyadmin | 7 | 1 | · | · | PoC 2 | phpmyadmin (7) | — | |
| 16 | endonesia | 6 | · | · | · | NEWPoC 5 | endonesia (6) | — | |
| 17 | ibm | 6 | 1 | · | · | aix (4) · os 400 (2) | — | ||
| 18 | linux | 6 | 1 | · | · | linux kernel (6) | — | ||
| 19 | сообщество свободного программного обеспечения | 6 | · | · | · | PoC 1 | debian gnu/linux (6) | — | |
| 20 | aztek forum | 5 | · | · | · | PoC 1 | aztek forum (5) | — | |
| 21 | argosoft | 4 | 1 | · | · | ftp server (4) | — | ||
| 22 | bitweaver | 4 | · | · | · | NEW×4.0PoC 2 | bitweaver (4) | — | |
| 23 | cmsmadesimple | 4 | · | · | · | cms made simple (4) | — | ||
| 24 | easebay resources | 4 | · | · | · | NEW | login manager (2) · paypal subscription manager (2) | — | |
| 25 | f5 | 4 | · | · | · | NEW×4.0 | firepass (3) · firepass 4100 (1) | — | |
| 26 | hitachi | 4 | · | · | · | hirdb datareplicator (1) · cosminexus application server version 5 (1) · cosminexus developer light version 6 (1) | — | ||
| 27 | igeneric | 4 | · | · | · | NEWPoC 3 | ig shop (3) · ig calendar (1) | — | |
| 28 | webroot software | 4 | · | · | · | NEW | spy sweeper (3) · spy sweeper enterprise (1) | — | |
| 29 | 212cafe | 3 | · | · | · | NEW | 212cafeboard (2) · guestbook (1) | — | |
| 30 | ca | 3 | 2 | · | · | PoC 1 | protection suites (2) · host-based intrusion prevention system (1) | — | |
| 31 | docman | 3 | · | · | · | NEW | docman (3) | — | |
| 32 | ezboxx | 3 | · | · | · | NEW | ezboxx portal system (2) · portal system beta (1) | — | |
| 33 | fersch | 3 | · | · | · | NEWPoC 2 | formbankserver (3) | — | |
| 34 | freebsd | 3 | · | · | · | freebsd (3) | — | ||
| 35 | getahead | 3 | · | · | · | NEW | direct web remoting (3) | — | |
| 36 | maxdev | 3 | 1 | · | · | PoC 2 | mdpro (2) · mdforum (1) | — | |
| 37 | maxum development corporation | 3 | · | · | · | NEWPoC 1 | rumpus ftp server (3) | — | |
| 38 | mkportal | 3 | · | · | · | mkportal (3) | — | ||
| 39 | novell inc. | 3 | · | · | · | opensuse (2) · suse linux enterprise (1) | — | ||
| 40 | opera | 3 | 2 | · | · | PoC 1 | opera browser (3) | — | |
| 41 | phpbb group | 3 | 3 | · | · | phpbb (3) | — | ||
| 42 | php-update | 3 | · | · | · | NEWPoC 3 | php-update (3) | — | |
| 43 | plain black | 3 | · | · | · | NEW | webgui (3) | — | |
| 44 | postnuke software foundation | 3 | 1 | · | · | postnuke (3) | — | ||
| 45 | xfree86 project | 3 | 1 | · | · | NEW | xfree86 (2) · xfree86 x server (1) | — | |
| 46 | x.org | 3 | 1 | · | · | NEW | x.org (3) | — | |
| 47 | alexphpteam | 2 | · | · | · | NEWPoC 2 | alex guestbook (2) | — | |
| 48 | asp edge | 2 | · | · | · | NEWPoC 1 | asp edge (2) | — | |
| 49 | canonical | 2 | 1 | · | · | ubuntu linux (2) | — | ||
| 50 | cgi-rescue | 2 | · | · | · | NEW | shopping basket professional (1) · webform (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Web & CMS Plugins218 CVE12 crit132 vendorsCVSS 7.5the address book (8) · wordpress (8) · joomla (7)
- Operating Systems78 CVE54 crit25 vendorsCVSS 8.7gentoo linux (8) · debian gnu/linux (6) · linux kernel (6)
- Enterprise Software60 CVE7 crit18 vendorsCVSS 7.2weblogic server (17) · aqualogic service bus (2) · ezboxx portal system (2)
- Databases41 CVE1 crit3 vendorsCVSS 6.8application server (12) · database server (11) · collaboration suite (9)
- 5 crit19 vendorsCVSS 8.2ios transmission control protocol (3) · network admission control manager and server system software (3) · secure access control server (3)
- Consumer Software37 CVE66 crit41 vendorsCVSS 10.0acrobat reader (7) · acrobat (4) · acrobat 3d (3)
- Mobile Apps32 CVE7 crit5 vendorsCVSS 7.2mac os x (20) · quicktime (4) · ichat (3)
- Security Products29 CVE1 crit19 vendorsCVSS 7.8spy sweeper (3) · web security (2) · bitdefender client (1)
- OSS Libraries19 CVE2 crit16 vendorsCVSS 9.3portix-php (2) · chmlib (1) · ed (1)
- Communications16 CVE2 crit11 vendorsCVSS 7.5ftp server (4) · fetchmail (2) · groupware (1)
- Cloud & SaaS13 CVE13 crit4 vendorsCVSS 8.9brightstor arcserve backup (4) · brightstor enterprise backup (4) · business protection suite (3)
- DevTools & CI8 CVE2 crit7 vendorsCVSS 9.3cvstrac (1) · gforge (1) · perforce client (1)
- ICS / OT / IoT2 CVE2 vendorsCVSS 7.5dialog wrapper module activex control (1)
- Hardware Firmware1 CVE1 vendorsCVSS 7.5la fonera (1)
- Unclassified95 CVE28 crit88 vendorsCVSS 7.3direct web remoting (3) · 212cafeboard (2) · enthusiast (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Web & CMS Plugins▸ 6 | 218 | 12 | · | 132 | 144 | 7.5 | the address book (8) · wordpress (8) · joomla (7) |
| Operating Systems▸ 3 | 78 | 54 | · | 25 | 63 | 8.7 | gentoo linux (8) · debian gnu/linux (6) · linux kernel (6) |
| Enterprise Software▸ 5 | 60 | 7 | · | 18 | 77 | 7.2 | weblogic server (17) · aqualogic service bus (2) · ezboxx portal system (2) |
| Databases▸ 2 | 41 | 1 | · | 3 | 11 | 6.8 | application server (12) · database server (11) · collaboration suite (9) |
| Networking Infrastructure▸ 5 | 39 | 5 | · | 19 | 30 | 8.2 | ios transmission control protocol (3) · network admission control manager and server system software (3) · secure access control server (3) |
| Consumer Software▸ 5 | 37 | 66 | · | 41 | 80 | 10.0 | acrobat reader (7) · acrobat (4) · acrobat 3d (3) |
| Mobile Apps▸ 3 | 32 | 7 | · | 5 | 18 | 7.2 | mac os x (20) · quicktime (4) · ichat (3) |
| Security Products▸ 5 | 29 | 1 | · | 19 | 21 | 7.8 | spy sweeper (3) · web security (2) · bitdefender client (1) |
| OSS Libraries▸ 5 | 19 | 2 | · | 16 | 16 | 9.3 | portix-php (2) · chmlib (1) · ed (1) |
| Communications▸ 3 | 16 | 2 | · | 11 | 12 | 7.5 | ftp server (4) · fetchmail (2) · groupware (1) |
| Cloud & SaaS▸ 2 | 13 | 13 | · | 4 | 14 | 8.9 | brightstor arcserve backup (4) · brightstor enterprise backup (4) · business protection suite (3) |
| DevTools & CI▸ 4 | 8 | 2 | · | 7 | 7 | 9.3 | cvstrac (1) · gforge (1) · perforce client (1) |
| ICS / OT / IoT▸ 2 | 2 | · | · | 2 | 6 | 7.5 | dialog wrapper module activex control (1) |
| Hardware Firmware▸ 1 | 1 | · | · | 1 | 1 | 7.5 | la fonera (1) |
| Unclassified | 95 | 28 | · | 88 | 108 | 7.3 | direct web remoting (3) · 212cafeboard (2) · enthusiast (2) |
Weakness × Sector
Which weaknesses hit which solution categories in January 2007
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds20Improper Input Validation79XSS94Code Injection89SQL Injection399CWE-399200Information Exposure134Format String189CWE-189264CWE-264Web & CMS Plugins146711Operating Systems532422Consumer Software57313121Enterprise Software112Networking Infrastructure2111OSS Libraries2111Databases212Security Products31Communications131Cloud & SaaS3