February 2007
February 2007 closed with 633 published CVEs. 85 criticals, microsoft led volume, mostly via internet explorer. Biggest breakout: cisco at ×7.0 their 12-month median. Top weakness class — CWE-94 (25 CVE). 10 vendors cracked the top-100 for the first time.
Time to exploit
How fast the community ships detection after a CVE drops.
KEV pressure, no Nuclei coverage
February 2007 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 1microsoft35 CVE
What's spreading where in February 2007
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — February 2007
Breakout vendors
CVE count ≥3× their own 12-period median.
- 7.0×cisco21 CVE
- 4.0×hp8 CVE
- 3.5×gentoo foundation inc.7 CVE
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #4web-app.org15 CVE
- #12headstart solutions5 CVE
- #13jupiter cms5 CVE
- #15meetinghouse5 CVE
- #18webspell5 CVE
- #19atrium software4 CVE
- #21lovecms4 CVE
- #24scriptsez.net4 CVE
- #25smb4k4 CVE
- #26virtualsystem4 CVE
Top vendors
Ranked by distinct CVE count this period.
- 35 CVE13 critCVSS 8.0KEV 1PoC 3internet explorer (10) · ie (9) · windows xp (6)
- 23 CVE3 critCVSS 6.5PoC 3firefox (21) · seamonkey (13) · thunderbird (5)
- 21 CVE4 critCVSS 7.8×7.0firewall services module (7) · trust agent (5) · secure services client (5)
- 15 CVECVSS 5.5NEWwebapp (15)
- 8 CVECVSS 6.4PoC 3mac os x (3) · safari (2) · mac os x server (2)
- 8 CVE3 critCVSS 7.6×4.0PoC 1hp-ux (2) · tru64 (2) · serviceguard for linux (1)
- 8 CVECVSS 6.5PoC 1db2 (3) · aix (2) · db2 universal database (2)
- 8 CVE1 critCVSS 6.8php (8)
- 7 CVECVSS 5.0×3.5gentoo linux (7)
- 6 CVE1 critCVSS 6.3ubuntu linux (6)
- 6 CVE3 critCVSS 8.7serverprotect (4) · pc-cillin internet security (2) · client-server-messaging security (2)
- 5 CVECVSS 5.9NEWPoC 2deskpro (5)
- 5 CVECVSS 6.9NEWPoC 4jupiter cms (5)
- 5 CVECVSS 3.7PoC 1linux kernel (5)
- 5 CVECVSS 7.0NEWaegis secureconnect client (5)
- 5 CVE1 critCVSS 6.3solaris (4) · sunos (3)
- 5 CVE1 critCVSS 7.5secure linux (5)
- 5 CVE1 critCVSS 7.1NEWPoC 2webspell (5)
- 4 CVECVSS 7.1NEWmercur messaging 2005 (4)
- 4 CVECVSS 6.8debian linux (4)
- 4 CVECVSS 5.1NEWPoC 1lovecms (4)
- 4 CVE1 critCVSS 7.4mailenable professional (2) · mailenable (1) · mailenable enterprise (1)
- 4 CVECVSS 5.7PoC 1mediawiki (4)
- 4 CVE1 critCVSS 6.3NEWPoC 1e-dating system (3) · virtual calendar (1)
- 4 CVECVSS 3.3NEWsmb4k (4)
- 4 CVE3 critCVSS 9.0NEWPoC 3vs-news-system (2) · vs-link-partner (1) · htaccess passwort generator (1)
- 4 CVECVSS 4.5NEWwireshark (4)
- 3 CVECVSS 4.3coldfusion (3) · jrun (1)
- 3 CVECVSS 7.5PoC 1brightstor arcserve backup laptops desktops (2) · business protection suite (2) · desktop management suite (2)
- 3 CVECVSS 6.3NEWcomodo firewall pro (3)
- 3 CVECVSS 6.0PoC 1coppermine photo gallery (3)
- 3 CVECVSS 6.7audio module (1) · drupal (1) · getid3 (1)
- 3 CVECVSS 7.3NEWPoC 2asp hosting site (3)
- 3 CVECVSS 7.5joomla (3)
- 3 CVECVSS 5.6phpmyvisites (3)
- 3 CVECVSS 4.5NEWmoinmoin (3)
- 3 CVECVSS 5.2PoC 1opera browser (3)
- 3 CVECVSS 6.5phorum (3)
- 3 CVECVSS 5.4phpbb advanced guestbook (2) · phpbb (1)
- 3 CVECVSS 4.5moin (3)
- 3 CVE1 critCVSS 7.2NEWPoC 1portal search (3)
- 3 CVECVSS 5.4NEWPoC 1rigter portal system (3)
- 3 CVECVSS 6.3NEWsamba (3)
- 3 CVECVSS 7.4NEWsuper link exchange script (3)
- 3 CVECVSS 5.4NEWublog (1) · ublog reload (1) · uphotogallery (1)
- 3 CVECVSS 3.2NEWworkstation (3)
- 2 CVECVSS 5.0NEW3proxy (2)
- 2 CVECVSS 5.9NEWactivecalendar (2)
- 2 CVE1 critCVSS 8.8NEWPoC 1aktueldownload haber script (2)
- 2 CVECVSS 7.5NEWomniaccess wireless (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 35 | 13 | 1 | · | KEV 1PoC 3 | internet explorer (10) · ie (9) · windows xp (6) | — | |
| 2 | mozilla | 23 | 3 | · | · | PoC 3 | firefox (21) · seamonkey (13) · thunderbird (5) | — | |
| 3 | cisco | 21 | 4 | · | · | ×7.0 | firewall services module (7) · trust agent (5) · secure services client (5) | — | |
| 4 | web-app.org | 15 | · | · | · | NEW | webapp (15) | — | |
| 5 | apple | 8 | · | · | · | PoC 3 | mac os x (3) · safari (2) · mac os x server (2) | — | |
| 6 | hp | 8 | 3 | · | · | ×4.0PoC 1 | hp-ux (2) · tru64 (2) · serviceguard for linux (1) | — | |
| 7 | ibm | 8 | · | · | · | PoC 1 | db2 (3) · aix (2) · db2 universal database (2) | — | |
| 8 | php | 8 | 1 | · | · | php (8) | — | ||
| 9 | gentoo foundation inc. | 7 | · | · | · | ×3.5 | gentoo linux (7) | — | |
| 10 | canonical | 6 | 1 | · | · | ubuntu linux (6) | — | ||
| 11 | trendmicro | 6 | 3 | · | · | serverprotect (4) · pc-cillin internet security (2) · client-server-messaging security (2) | — | ||
| 12 | headstart solutions | 5 | · | · | · | NEWPoC 2 | deskpro (5) | — | |
| 13 | jupiter cms | 5 | · | · | · | NEWPoC 4 | jupiter cms (5) | — | |
| 14 | linux | 5 | · | · | · | PoC 1 | linux kernel (5) | — | |
| 15 | meetinghouse | 5 | · | · | · | NEW | aegis secureconnect client (5) | — | |
| 16 | sun | 5 | 1 | · | · | solaris (4) · sunos (3) | — | ||
| 17 | trustix | 5 | 1 | · | · | secure linux (5) | — | ||
| 18 | webspell | 5 | 1 | · | · | NEWPoC 2 | webspell (5) | — | |
| 19 | atrium software | 4 | · | · | · | NEW | mercur messaging 2005 (4) | — | |
| 20 | debian | 4 | · | · | · | debian linux (4) | — | ||
| 21 | lovecms | 4 | · | · | · | NEWPoC 1 | lovecms (4) | — | |
| 22 | mailenable | 4 | 1 | · | · | mailenable professional (2) · mailenable (1) · mailenable enterprise (1) | — | ||
| 23 | mediawiki | 4 | · | · | · | PoC 1 | mediawiki (4) | — | |
| 24 | scriptsez.net | 4 | 1 | · | · | NEWPoC 1 | e-dating system (3) · virtual calendar (1) | — | |
| 25 | smb4k | 4 | · | · | · | NEW | smb4k (4) | — | |
| 26 | virtualsystem | 4 | 3 | · | · | NEWPoC 3 | vs-news-system (2) · vs-link-partner (1) · htaccess passwort generator (1) | — | |
| 27 | wireshark | 4 | · | · | · | NEW | wireshark (4) | — | |
| 28 | adobe | 3 | · | · | · | coldfusion (3) · jrun (1) | — | ||
| 29 | broadcom | 3 | · | · | · | PoC 1 | brightstor arcserve backup laptops desktops (2) · business protection suite (2) · desktop management suite (2) | — | |
| 30 | comodo | 3 | · | · | · | NEW | comodo firewall pro (3) | — | |
| 31 | coppermine | 3 | · | · | · | PoC 1 | coppermine photo gallery (3) | — | |
| 32 | drupal | 3 | · | · | · | audio module (1) · drupal (1) · getid3 (1) | — | ||
| 33 | fullaspsite | 3 | · | · | · | NEWPoC 2 | asp hosting site (3) | — | |
| 34 | joomla | 3 | · | · | · | joomla (3) | — | ||
| 35 | matthieu aubry | 3 | · | · | · | phpmyvisites (3) | — | ||
| 36 | moinmoin | 3 | · | · | · | NEW | moinmoin (3) | — | |
| 37 | opera | 3 | · | · | · | PoC 1 | opera browser (3) | — | |
| 38 | phorum | 3 | · | · | · | phorum (3) | — | ||
| 39 | phpbb group | 3 | · | · | · | phpbb advanced guestbook (2) · phpbb (1) | — | ||
| 40 | pypi | 3 | · | · | · | moin (3) | — | ||
| 41 | radical technologies | 3 | 1 | · | · | NEWPoC 1 | portal search (3) | — | |
| 42 | rigter portal system | 3 | · | · | · | NEWPoC 1 | rigter portal system (3) | — | |
| 43 | samba | 3 | · | · | · | NEW | samba (3) | — | |
| 44 | super link exchange script | 3 | · | · | · | NEW | super link exchange script (3) | — | |
| 45 | uapplication | 3 | · | · | · | NEW | ublog (1) · ublog reload (1) · uphotogallery (1) | — | |
| 46 | vmware | 3 | · | · | · | NEW | workstation (3) | — | |
| 47 | 3proxy | 2 | · | · | · | NEW | 3proxy (2) | — | |
| 48 | activecalendar | 2 | · | · | · | NEW | activecalendar (2) | — | |
| 49 | aktueldownload | 2 | 1 | · | · | NEWPoC 1 | aktueldownload haber script (2) | — | |
| 50 | alcatel-lucent | 2 | · | · | · | NEW | omniaccess wireless (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Web & CMS Plugins171 CVE16 crit109 vendorsCVSS 7.4webspell (5) · mediawiki (4) · joomla (3)
- Operating Systems67 CVE36 crit14 KEV17 vendorsCVSS 8.0internet explorer (10) · ie (9) · windows 2003 server (6)
- Consumer Software59 CVE10 crit28 vendorsCVSS 6.5firefox (21) · seamonkey (13) · thunderbird (5)
- Enterprise Software53 CVE12 crit26 vendorsCVSS 7.3deskpro (6) · db2 (3) · acgvannu (2)
- OSS Libraries41 CVE3 crit16 vendorsCVSS 7.1webapp (15) · jboss (1) · jboss application server (1)
- Security Products35 CVE34 crit17 vendorsCVSS 9.3secure linux (5) · serverprotect (4) · comodo firewall pro (3)
- 11 crit12 vendorsCVSS 7.8firewall services module (7) · secure services client (5) · security agent (5)
- Communications27 CVE7 crit17 vendorsCVSS 8.8mercur messaging 2005 (4) · axigen mail server (2) · mailenable professional (2)
- Mobile Apps10 CVE3 vendorsCVSS 7.6mac os x (3) · mac os x server (2) · safari (2)
- Cloud & SaaS8 CVE4 vendorsCVSS 7.5workstation (3) · brightstor arcserve backup laptops desktops (2) · business protection suite (2)
- DevTools & CI6 CVE2 crit3 vendorsCVSS 7.9syscp (2) · webtester (2) · flexnet connect (1)
- Hardware Firmware5 CVE1 crit3 vendorsCVSS 6.32200bg proset wireless (1) · enterprise southbridge 2 bmc (1) · enterprise southbridge bmc (1)
- Databases4 CVE1 crit2 vendorsCVSS 7.8postgresql (2) · database server (1) · solaris (1)
- ICS / OT / IoT2 CVE2 vendorsCVSS 5.0install (1) · x-kryptor driver (1) · x-kryptor secure client (1)
- Unclassified86 CVE14 crit69 vendorsCVSS 7.3jupiter cms (5) · portal search (3) · aktueldownload haber script (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Web & CMS Plugins▸ 5 | 171 | 16 | · | 109 | 123 | 7.4 | webspell (5) · mediawiki (4) · joomla (3) |
| Operating Systems▸ 3 | 67 | 36 | 14 | 17 | 53 | 8.0 | internet explorer (10) · ie (9) · windows 2003 server (6) |
| Consumer Software▸ 5 | 59 | 10 | · | 28 | 38 | 6.5 | firefox (21) · seamonkey (13) · thunderbird (5) |
| Enterprise Software▸ 5 | 53 | 12 | · | 26 | 41 | 7.3 | deskpro (6) · db2 (3) · acgvannu (2) |
| OSS Libraries▸ 5 | 41 | 3 | · | 16 | 17 | 7.1 | webapp (15) · jboss (1) · jboss application server (1) |
| Security Products▸ 4 | 35 | 34 | · | 17 | 49 | 9.3 | secure linux (5) · serverprotect (4) · comodo firewall pro (3) |
| Networking Infrastructure▸ 6 | 34 | 11 | · | 12 | 27 | 7.8 | firewall services module (7) · secure services client (5) · security agent (5) |
| Communications▸ 3 | 27 | 7 | · | 17 | 20 | 8.8 | mercur messaging 2005 (4) · axigen mail server (2) · mailenable professional (2) |
| Mobile Apps▸ 2 | 10 | · | · | 3 | 9 | 7.6 | mac os x (3) · mac os x server (2) · safari (2) |
| Cloud & SaaS▸ 3 | 8 | · | · | 4 | 8 | 7.5 | workstation (3) · brightstor arcserve backup laptops desktops (2) · business protection suite (2) |
| DevTools & CI▸ 1 | 6 | 2 | · | 3 | 4 | 7.9 | syscp (2) · webtester (2) · flexnet connect (1) |
| Hardware Firmware▸ 2 | 5 | 1 | · | 3 | 12 | 6.3 | 2200bg proset wireless (1) · enterprise southbridge 2 bmc (1) · enterprise southbridge bmc (1) |
| Databases▸ 1 | 4 | 1 | · | 2 | 3 | 7.8 | postgresql (2) · database server (1) · solaris (1) |
| ICS / OT / IoT▸ 2 | 2 | · | · | 2 | 9 | 5.0 | install (1) · x-kryptor driver (1) · x-kryptor secure client (1) |
| Unclassified | 86 | 14 | · | 69 | 71 | 7.3 | jupiter cms (5) · portal search (3) · aktueldownload haber script (2) |
Which weaknesses hit which solution categories in February 2007
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.