month report
March 2007
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
March 2007 closed with 640 published CVEs. 125 criticals, php led volume, mostly via php. Top weakness class — CWE-119 (22 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
640
— MoM— YoY
Severity mix
125 / 204
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.8%
5 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
6941.0
n=5
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
—
n=0
Weakness × Vendor
What's spreading where in March 2007
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — March 2007
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #10wordpress7 CVE
- #11mambo6 CVE
- #12radscan6 CVE
- #14w-agora6 CVE
- #17madwifi5 CVE
- #19phpbb5 CVE
- #20scriptmagix5 CVE
- #21sql-ledger5 CVE
- #29ledgersmb4 CVE
- #31phpnuke4 CVE
Top vendors
Ranked by distinct CVE count this period.
- 39 CVE3 critCVSS 6.6PoC 22php (38) · com extensions (1)
- 25 CVE6 critCVSS 7.1PoC 4windows vista (13) · windows xp (5) · windows 2003 server (4)
- 20 CVE5 critCVSS 6.9mac os x (9) · mac os x server (8) · quicktime (8)
- 14 CVE5 critCVSS 6.8PoC 4debian gnu/linux (14)
- 12 CVE2 critCVSS 5.9PoC 1websphere application server (6) · lotus domino (3) · db2 (1)
- 9 CVE2 critCVSS 7.7PoC 4bsq sitestats (5) · car manager (1) · nfn address book (1)
- 8 CVECVSS 5.9PoC 1linux kernel (8)
- 8 CVECVSS 5.2PoC 1apex (2) · database server (2) · oracle10g (1)
- 7 CVE1 critCVSS 7.0PoC 1firefox (6) · seamonkey (2) · thunderbird (1)
- 7 CVECVSS 5.6NEWNuclei 5PoC 3wordpress (7)
- 6 CVE2 critCVSS 7.6NEWPoC 4flatmenu (1) · mambo (1) · mambo open source (1)
- 6 CVE1 critCVSS 6.6NEWPoC 4network audio system (5) · conquest (1)
- 6 CVECVSS 6.5java system web server (2) · sunos (1) · java dynamic management kit (1)
- 6 CVECVSS 5.2NEWPoC 1w-agora (6)
- 5 CVE1 critCVSS 6.2brightstor arcserve backup (3) · etrust intrusion detection (1) · etrust admin (1)
- 5 CVECVSS 5.9PoC 1konqueror (3) · k-mail (2)
- 5 CVECVSS 7.5NEWmadwifi (5)
- 5 CVE2 critCVSS 8.0PoC 2access manager (1) · bordermanager (1) · imanager (1)
- 5 CVE2 critCVSS 8.2NEWPoC 2dimension (1) · import tools (1) · insert user (1)
- 5 CVECVSS 7.5NEWPoC 5scriptmagix faq builder (1) · scriptmagix jokes (1) · scriptmagix lyrics (1)
- 5 CVE2 critCVSS 7.7NEWsql-ledger (5)
- 4 CVECVSS 7.5PoC 4active auction house (1) · active link engine (1) · active newsletter (1)
- 4 CVECVSS 5.5http server (1) · mod perl (1) · mod python (1)
- 4 CVE1 critCVSS 6.2s8700 (2) · s8300 (2) · s8500 (2)
- 4 CVE1 critCVSS 6.7PoC 1ubuntu linux (4) · ubuntu (1)
- 4 CVE1 critCVSS 5.8network analysis module (2) · catalyst 7600 ws-x6380-nam (1) · ciscoworks (1)
- 4 CVECVSS 5.4imce module (2) · nodefamily (1) · drupal project issue tracking (1)
- 4 CVECVSS 5.5PoC 1horde application framework (2) · imp (2) · groupware (1)
- 4 CVE2 critCVSS 7.7NEWledgersmb (4)
- 4 CVE1 critCVSS 7.4PoC 1virex (2) · protectionpilot (1) · epolicy orchestrator (1)
- 4 CVECVSS 5.7NEWPoC 2php-nuke (4)
- 4 CVECVSS 5.4PoC 1red hat enterprise linux (3) · enterprise linux workstation (2) · enterprise linux desktop (2)
- 3 CVECVSS 4.5acrobat reader (2) · coldfusion (1) · jrun (1)
- 3 CVECVSS 7.5NEWPoC 3ajauction (1) · aj classifieds (1) · ajdating (1)
- 3 CVECVSS 7.7NEWasterisk (3)
- 3 CVE3 critCVSS 10.0NEWPoC 2mercur imapd (2) · mercur mailserver (1) · mercur messaging 2005 (1)
- 3 CVECVSS 6.9NEWaudins audiens (3)
- 3 CVECVSS 5.6NEWPoC 2sitex (3)
- 3 CVECVSS 6.3NEWPoC 2call-center-software (3)
- 3 CVE1 critCVSS 7.6PoC 1debian linux (2) · apache (1)
- 3 CVECVSS 5.6gentoo linux (3)
- 3 CVECVSS 5.5gnumail (1) · gpgme (1) · libtool-ltdl (1)
- 3 CVECVSS 6.4NEWgrayscale blog (3)
- 3 CVECVSS 5.9PoC 2vbulletin (3)
- 3 CVECVSS 6.4opera browser (3)
- 3 CVECVSS 6.2phpx (3)
- 3 CVECVSS 5.4NEWrealguestbook (3)
- 3 CVE1 critCVSS 3.2PoC 1norton personal firewall (2) · mail security (1) · norton antispam (1)
- 3 CVECVSS 6.6NEWPoC 1bug tracking system (3)
- 3 CVECVSS 6.7NEWweekly drawing contest (3)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | php | 39 | 3 | · | · | PoC 22 | php (38) · com extensions (1) | — | |
| 2 | microsoft | 25 | 6 | · | · | PoC 4 | windows vista (13) · windows xp (5) · windows 2003 server (4) | — | |
| 3 | apple | 20 | 5 | · | · | mac os x (9) · mac os x server (8) · quicktime (8) | — | ||
| 4 | сообщество свободного программного обеспечения | 14 | 5 | · | · | PoC 4 | debian gnu/linux (14) | — | |
| 5 | ibm | 12 | 2 | · | · | PoC 1 | websphere application server (6) · lotus domino (3) · db2 (1) | — | |
| 6 | joomla | 9 | 2 | · | · | PoC 4 | bsq sitestats (5) · car manager (1) · nfn address book (1) | — | |
| 7 | linux | 8 | · | · | · | PoC 1 | linux kernel (8) | — | |
| 8 | oracle | 8 | · | · | · | PoC 1 | apex (2) · database server (2) · oracle10g (1) | — | |
| 9 | mozilla | 7 | 1 | · | · | PoC 1 | firefox (6) · seamonkey (2) · thunderbird (1) | — | |
| 10 | wordpress | 7 | · | · | 5 | NEWNuclei 5PoC 3 | wordpress (7) | — | |
| 11 | mambo | 6 | 2 | · | · | NEWPoC 4 | flatmenu (1) · mambo (1) · mambo open source (1) | — | |
| 12 | radscan | 6 | 1 | · | · | NEWPoC 4 | network audio system (5) · conquest (1) | — | |
| 13 | sun | 6 | · | · | · | java system web server (2) · sunos (1) · java dynamic management kit (1) | — | ||
| 14 | w-agora | 6 | · | · | · | NEWPoC 1 | w-agora (6) | — | |
| 15 | broadcom | 5 | 1 | · | · | brightstor arcserve backup (3) · etrust intrusion detection (1) · etrust admin (1) | — | ||
| 16 | kde | 5 | · | · | · | PoC 1 | konqueror (3) · k-mail (2) | — | |
| 17 | madwifi | 5 | · | · | · | NEW | madwifi (5) | — | |
| 18 | novell | 5 | 2 | · | · | PoC 2 | access manager (1) · bordermanager (1) · imanager (1) | — | |
| 19 | phpbb | 5 | 2 | · | · | NEWPoC 2 | dimension (1) · import tools (1) · insert user (1) | — | |
| 20 | scriptmagix | 5 | · | · | · | NEWPoC 5 | scriptmagix faq builder (1) · scriptmagix jokes (1) · scriptmagix lyrics (1) | — | |
| 21 | sql-ledger | 5 | 2 | · | · | NEW | sql-ledger (5) | — | |
| 22 | active web softwares | 4 | · | · | · | PoC 4 | active auction house (1) · active link engine (1) · active newsletter (1) | — | |
| 23 | apache | 4 | · | · | · | http server (1) · mod perl (1) · mod python (1) | — | ||
| 24 | avaya | 4 | 1 | · | · | s8700 (2) · s8300 (2) · s8500 (2) | — | ||
| 25 | canonical | 4 | 1 | · | · | PoC 1 | ubuntu linux (4) · ubuntu (1) | — | |
| 26 | cisco | 4 | 1 | · | · | network analysis module (2) · catalyst 7600 ws-x6380-nam (1) · ciscoworks (1) | — | ||
| 27 | drupal | 4 | · | · | · | imce module (2) · nodefamily (1) · drupal project issue tracking (1) | — | ||
| 28 | horde | 4 | · | · | · | PoC 1 | horde application framework (2) · imp (2) · groupware (1) | — | |
| 29 | ledgersmb | 4 | 2 | · | · | NEW | ledgersmb (4) | — | |
| 30 | mcafee | 4 | 1 | · | · | PoC 1 | virex (2) · protectionpilot (1) · epolicy orchestrator (1) | — | |
| 31 | phpnuke | 4 | · | · | · | NEWPoC 2 | php-nuke (4) | — | |
| 32 | redhat | 4 | · | · | · | PoC 1 | red hat enterprise linux (3) · enterprise linux workstation (2) · enterprise linux desktop (2) | — | |
| 33 | adobe | 3 | · | · | · | acrobat reader (2) · coldfusion (1) · jrun (1) | — | ||
| 34 | aj square | 3 | · | · | · | NEWPoC 3 | ajauction (1) · aj classifieds (1) · ajdating (1) | — | |
| 35 | asterisk | 3 | · | · | · | NEW | asterisk (3) | — | |
| 36 | atrium software | 3 | 3 | · | · | NEWPoC 2 | mercur imapd (2) · mercur mailserver (1) · mercur messaging 2005 (1) | — | |
| 37 | audins audiens | 3 | · | · | · | NEW | audins audiens (3) | — | |
| 38 | bj sintay | 3 | · | · | · | NEWPoC 2 | sitex (3) | — | |
| 39 | call-center-software | 3 | · | · | · | NEWPoC 2 | call-center-software (3) | — | |
| 40 | debian | 3 | 1 | · | · | PoC 1 | debian linux (2) · apache (1) | — | |
| 41 | gentoo foundation inc. | 3 | · | · | · | gentoo linux (3) | — | ||
| 42 | gnu | 3 | · | · | · | gnumail (1) · gpgme (1) · libtool-ltdl (1) | — | ||
| 43 | grayscale | 3 | · | · | · | NEW | grayscale blog (3) | — | |
| 44 | jelsoft | 3 | · | · | · | PoC 2 | vbulletin (3) | — | |
| 45 | opera | 3 | · | · | · | opera browser (3) | — | ||
| 46 | phpx | 3 | · | · | · | phpx (3) | — | ||
| 47 | realguestbook | 3 | · | · | · | NEW | realguestbook (3) | — | |
| 48 | symantec | 3 | 1 | · | · | PoC 1 | norton personal firewall (2) · mail security (1) · norton antispam (1) | — | |
| 49 | tyger | 3 | · | · | · | NEWPoC 1 | bug tracking system (3) | — | |
| 50 | weekly drawing contest | 3 | · | · | · | NEW | weekly drawing contest (3) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Web & CMS Plugins153 CVE22 crit89 vendorsCVSS 7.5wordpress (7) · bsq sitestats (5) · php-nuke (4)
- Operating Systems77 CVE28 crit22 vendorsCVSS 7.2debian gnu/linux (14) · linux kernel (8) · ubuntu linux (4)
- OSS Libraries65 CVE10 crit18 vendorsCVSS 8.1php (38) · madwifi (5) · com extensions (1)
- Enterprise Software59 CVE16 crit31 vendorsCVSS 7.7websphere application server (6) · lotus domino (3) · flyspray (2)
- Consumer Software38 CVE12 crit25 vendorsCVSS 7.9acrobat reader (2) · inkscape (2) · openoffice (2)
- Communications28 CVE11 crit17 vendorsCVSS 7.8horde application framework (2) · imp (2) · mercur imapd (2)
- Security Products23 CVE5 crit16 vendorsCVSS 8.1norton personal firewall (2) · virex (2) · client security (1)
- Mobile Apps21 CVE6 crit2 vendorsCVSS 7.1mac os x (9) · mac os x server (8) · quicktime (8)
- 15 crit15 vendorsCVSS 8.0network analysis module (2) · 7940 router (1) · 7960 router (1)
- Databases13 CVE6 vendorsCVSS 5.2apex (2) · database server (2) · mysql (2)
- Cloud & SaaS10 CVE2 crit6 vendorsCVSS 6.8brightstor arcserve backup (3) · etrust admin (1) · etrust intrusion detection (1)
- ICS / OT / IoT7 CVE1 crit2 vendorsCVSS 7.8network audio system (5) · conquest (1)
- Hardware Firmware4 CVE2 crit3 vendorsCVSS 10.0fence (1) · interstage application server (1) · interstage apworks (1)
- DevTools & CI2 CVE1 crit2 vendorsCVSS 7.2ida pro (1) · webmin (1)
- Unclassified92 CVE23 crit73 vendorsCVSS 7.2sitex (4) · abitwhizzy (2) · connectix boards (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Web & CMS Plugins▸ 6 | 153 | 22 | · | 89 | 114 | 7.5 | wordpress (7) · bsq sitestats (5) · php-nuke (4) |
| Operating Systems▸ 3 | 77 | 28 | · | 22 | 51 | 7.2 | debian gnu/linux (14) · linux kernel (8) · ubuntu linux (4) |
| OSS Libraries▸ 4 | 65 | 10 | · | 18 | 22 | 8.1 | php (38) · madwifi (5) · com extensions (1) |
| Enterprise Software▸ 6 | 59 | 16 | · | 31 | 47 | 7.7 | websphere application server (6) · lotus domino (3) · flyspray (2) |
| Consumer Software▸ 4 | 38 | 12 | · | 25 | 31 | 7.9 | acrobat reader (2) · inkscape (2) · openoffice (2) |
| Communications▸ 4 | 28 | 11 | · | 17 | 30 | 7.8 | horde application framework (2) · imp (2) · mercur imapd (2) |
| Security Products▸ 4 | 23 | 5 | · | 16 | 25 | 8.1 | norton personal firewall (2) · virex (2) · client security (1) |
| Mobile Apps▸ 2 | 21 | 6 | · | 2 | 7 | 7.1 | mac os x (9) · mac os x server (8) · quicktime (8) |
| Networking Infrastructure▸ 5 | 20 | 15 | · | 15 | 54 | 8.0 | network analysis module (2) · 7940 router (1) · 7960 router (1) |
| Databases▸ 2 | 13 | · | · | 6 | 10 | 5.2 | apex (2) · database server (2) · mysql (2) |
| Cloud & SaaS▸ 3 | 10 | 2 | · | 6 | 9 | 6.8 | brightstor arcserve backup (3) · etrust admin (1) · etrust intrusion detection (1) |
| ICS / OT / IoT▸ 2 | 7 | 1 | · | 2 | 3 | 7.8 | network audio system (5) · conquest (1) |
| Hardware Firmware▸ 2 | 4 | 2 | · | 3 | 6 | 10.0 | fence (1) · interstage application server (1) · interstage apworks (1) |
| DevTools & CI▸ 1 | 2 | 1 | · | 2 | 2 | 7.2 | ida pro (1) · webmin (1) |
| Unclassified | 92 | 23 | · | 73 | 76 | 7.2 | sitex (4) · abitwhizzy (2) · connectix boards (2) |
Weakness × Sector
Which weaknesses hit which solution categories in March 2007
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds94Code Injection79XSS20Improper Input Validation89SQL Injection264CWE-264189CWE-189200Information Exposure22Path Traversal399CWE-399Web & CMS Plugins96561111OSS Libraries631321Operating Systems7112412Enterprise Software321111Consumer Software74211312Communications11Networking Infrastructure11121Security Products1111Databases11ICS / OT / IoT2