month report
May 2007
Data as of Jun 11, 2026, 06:04 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
May 2007 closed with 575 published CVEs. 111 criticals, microsoft led volume, mostly via internet explorer. Top weakness class — CWE-119 (20 CVE). 10 vendors cracked the top-100 for the first time.
Total CVEs
575
— MoM— YoY
Severity mix
111 / 236
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
1.6%
9 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
6882.2
n=9
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
—
n=0
Weakness × Vendor
What's spreading where in May 2007
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
Most discussed CVEs — May 2007
No CVE mentions in the news this month yet.
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #5php10 CVE
- #10jetbox7 CVE
- #14lead technologies6 CVE
- #15vmware6 CVE
- #20ruben boelinger5 CVE
- #21symantec5 CVE
- #23avast4 CVE
- #25office ocx4 CVE
- #26turnkey web tools4 CVE
- #27wikkawiki4 CVE
Top vendors
Ranked by distinct CVE count this period.
- 26 CVE14 critCVSS 8.0PoC 3internet explorer (8) · exchange server (4) · office (4)
- 15 CVE8 critCVSS 7.5PoC 1mac os x (7) · mac os x server (5) · quicktime (3)
- 11 CVE2 critCVSS 6.4sunos (3) · jre (3) · sdk (3)
- 10 CVECVSS 5.7PoC 1weblogic server (9) · weblogic integration (1) · weblogic workshop (1)
- 10 CVE2 critCVSS 5.6NEWPoC 1php (10)
- 9 CVE2 critCVSS 7.8PoC 1pix (4) · adaptive security appliance software (4) · ios (3)
- 8 CVECVSS 4.9PoC 1debian linux (8)
- 8 CVECVSS 5.1PoC 1linux kernel (8)
- 7 CVECVSS 4.4PoC 1tomcat (6) · tomcat jk web server connector (1)
- 7 CVECVSS 5.6NEWPoC 2jetbox cms (7)
- 7 CVE1 critCVSS 6.5PoC 2red hat enterprise linux (5) · enterprise linux (1) · enterprise linux server (1)
- 7 CVECVSS 5.2PoC 2debian gnu/linux (7)
- 6 CVE2 critCVSS 8.0PoC 1tru64 (2) · openvms (1) · procurve switch 9300m (1)
- 6 CVE3 critCVSS 8.5NEWPoC 3leadtools raster dialog file object (2) · leadtools jpeg 2000 (1) · leadtools isis activex control (1)
- 6 CVECVSS 7.3NEWworkstation (6) · server (1)
- 5 CVECVSS 5.7PoC 1ubuntu linux (5)
- 5 CVECVSS 5.1vbulletin (5)
- 5 CVECVSS 4.6PoC 1org.apache.tomcat:tomcat (4) · org.apache.tomcat:jsp-api (1) · org.apache.tomcat:servlet-api (1)
- 5 CVECVSS 4.1PoC 1mysql (3) · weblogic portal (2)
- 5 CVECVSS 6.9NEWNuclei 5PoC 5wordtube (2) · wp-table (2) · myflash (1)
- 5 CVE2 critCVSS 8.1NEWnorton internet security (2) · enterprise security manager (1) · discovery (1)
- 4 CVE3 critCVSS 9.4PoC 4template seller (2) · e-friends (1) · live support (1)
- 4 CVE2 critCVSS 8.3NEWPoC 1avast antivirus (3) · avast\! antivirus (1) · avast antivirus home (1)
- 4 CVE1 critCVSS 8.1f-secure anti-virus (3) · f-secure anti-virus client security (3) · f-secure anti-virus linux client security (3)
- 4 CVE2 critCVSS 8.7NEWPoC 2excel viewer ocx (1) · office viewer ocx (1) · powerpoint viewer ocx (1)
- 4 CVECVSS 6.4NEWsunshop shopping cart (4)
- 4 CVECVSS 6.3NEWwikkawiki (4)
- 4 CVECVSS 7.5NEWPoC 3flashgames module (1) · myconference module (1) · wfquotes module (1)
- 3 CVECVSS 6.9NEWacp3 (3)
- 3 CVECVSS 5.5NEWadvanced guestbook (3)
- 3 CVE1 critCVSS 6.5NEWresin (3)
- 3 CVE2 critCVSS 8.4trillian pro (2) · trillian (1)
- 3 CVECVSS 6.4NEWPoC 3dokeos (2) · open source learning and knowledge management tool (1)
- 3 CVECVSS 5.1NEWphpchain (2) · dvddb (1)
- 3 CVE1 critCVSS 6.7NEWmadwifi (3)
- 3 CVECVSS 4.8mysql (3)
- 3 CVECVSS 6.1NEWPoC 2intellisync mobile suite (3) · groupwise mobile server (3) · intellisync wireless email express (3)
- 3 CVE2 critCVSS 8.8securelogin (2) · netmail (1)
- 3 CVE1 critCVSS 8.4NEWPoC 2precisionid barcode (3)
- 3 CVECVSS 3.8NEWqemu (3)
- 3 CVE1 critCVSS 7.7NEWPoC 1samba (3)
- 3 CVECVSS 4.6NEWsonicbb (3)
- 3 CVECVSS 5.6NEWsquirrelmail (3)
- 3 CVE3 critCVSS 10.0serverprotect (3)
- 3 CVE1 critCVSS 7.9NEWPoC 3tutorialcms (3)
- 2 CVECVSS 7.5NEWPoC 22z project (2)
- 2 CVE1 critCVSS 8.3NEWadempiere (2)
- 2 CVECVSS 5.4robohelp server (1) · creative suite (1) · robohelp (1)
- 2 CVECVSS 7.2NEWPoC 1aforum (2)
- 2 CVECVSS 6.8NEWaiocp (2)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | microsoft | 26 | 14 | · | · | PoC 3 | internet explorer (8) · exchange server (4) · office (4) | — | |
| 2 | apple | 15 | 8 | · | · | PoC 1 | mac os x (7) · mac os x server (5) · quicktime (3) | — | |
| 3 | sun | 11 | 2 | · | · | sunos (3) · jre (3) · sdk (3) | — | ||
| 4 | bea | 10 | · | · | · | PoC 1 | weblogic server (9) · weblogic integration (1) · weblogic workshop (1) | — | |
| 5 | php | 10 | 2 | · | · | NEWPoC 1 | php (10) | — | |
| 6 | cisco | 9 | 2 | · | · | PoC 1 | pix (4) · adaptive security appliance software (4) · ios (3) | — | |
| 7 | debian | 8 | · | · | · | PoC 1 | debian linux (8) | — | |
| 8 | linux | 8 | · | · | · | PoC 1 | linux kernel (8) | — | |
| 9 | apache | 7 | · | · | · | PoC 1 | tomcat (6) · tomcat jk web server connector (1) | — | |
| 10 | jetbox | 7 | · | · | · | NEWPoC 2 | jetbox cms (7) | — | |
| 11 | redhat | 7 | 1 | · | · | PoC 2 | red hat enterprise linux (5) · enterprise linux (1) · enterprise linux server (1) | — | |
| 12 | сообщество свободного программного обеспечения | 7 | · | · | · | PoC 2 | debian gnu/linux (7) | — | |
| 13 | hp | 6 | 2 | · | · | PoC 1 | tru64 (2) · openvms (1) · procurve switch 9300m (1) | — | |
| 14 | lead technologies | 6 | 3 | · | · | NEWPoC 3 | leadtools raster dialog file object (2) · leadtools jpeg 2000 (1) · leadtools isis activex control (1) | — | |
| 15 | vmware | 6 | · | · | · | NEW | workstation (6) · server (1) | — | |
| 16 | canonical | 5 | · | · | · | PoC 1 | ubuntu linux (5) | — | |
| 17 | jelsoft | 5 | · | · | · | vbulletin (5) | — | ||
| 18 | maven | 5 | · | · | · | PoC 1 | org.apache.tomcat:tomcat (4) · org.apache.tomcat:jsp-api (1) · org.apache.tomcat:servlet-api (1) | — | |
| 19 | oracle | 5 | · | · | · | PoC 1 | mysql (3) · weblogic portal (2) | — | |
| 20 | ruben boelinger | 5 | · | · | 5 | NEWNuclei 5PoC 5 | wordtube (2) · wp-table (2) · myflash (1) | — | |
| 21 | symantec | 5 | 2 | · | · | NEW | norton internet security (2) · enterprise security manager (1) · discovery (1) | — | |
| 22 | alstrasoft | 4 | 3 | · | · | PoC 4 | template seller (2) · e-friends (1) · live support (1) | — | |
| 23 | avast | 4 | 2 | · | · | NEWPoC 1 | avast antivirus (3) · avast\! antivirus (1) · avast antivirus home (1) | — | |
| 24 | f-secure | 4 | 1 | · | · | f-secure anti-virus (3) · f-secure anti-virus client security (3) · f-secure anti-virus linux client security (3) | — | ||
| 25 | office ocx | 4 | 2 | · | · | NEWPoC 2 | excel viewer ocx (1) · office viewer ocx (1) · powerpoint viewer ocx (1) | — | |
| 26 | turnkey web tools | 4 | · | · | · | NEW | sunshop shopping cart (4) | — | |
| 27 | wikkawiki | 4 | · | · | · | NEW | wikkawiki (4) | — | |
| 28 | xoops | 4 | · | · | · | NEWPoC 3 | flashgames module (1) · myconference module (1) · wfquotes module (1) | — | |
| 29 | acp3 | 3 | · | · | · | NEW | acp3 (3) | — | |
| 30 | advanced guestbook | 3 | · | · | · | NEW | advanced guestbook (3) | — | |
| 31 | caucho technology | 3 | 1 | · | · | NEW | resin (3) | — | |
| 32 | cerulean studios | 3 | 2 | · | · | trillian pro (2) · trillian (1) | — | ||
| 33 | dokeos | 3 | · | · | · | NEWPoC 3 | dokeos (2) · open source learning and knowledge management tool (1) | — | |
| 34 | globalmegacorp | 3 | · | · | · | NEW | phpchain (2) · dvddb (1) | — | |
| 35 | madwifi | 3 | 1 | · | · | NEW | madwifi (3) | — | |
| 36 | mysql | 3 | · | · | · | mysql (3) | — | ||
| 37 | nokia | 3 | · | · | · | NEWPoC 2 | intellisync mobile suite (3) · groupwise mobile server (3) · intellisync wireless email express (3) | — | |
| 38 | novell | 3 | 2 | · | · | securelogin (2) · netmail (1) | — | ||
| 39 | precisionid barcode | 3 | 1 | · | · | NEWPoC 2 | precisionid barcode (3) | — | |
| 40 | qemu | 3 | · | · | · | NEW | qemu (3) | — | |
| 41 | samba | 3 | 1 | · | · | NEWPoC 1 | samba (3) | — | |
| 42 | sonicbb | 3 | · | · | · | NEW | sonicbb (3) | — | |
| 43 | squirrelmail | 3 | · | · | · | NEW | squirrelmail (3) | — | |
| 44 | trendmicro | 3 | 3 | · | · | serverprotect (3) | — | ||
| 45 | wavelink media | 3 | 1 | · | · | NEWPoC 3 | tutorialcms (3) | — | |
| 46 | 2z project | 2 | · | · | · | NEWPoC 2 | 2z project (2) | — | |
| 47 | adempiere | 2 | 1 | · | · | NEW | adempiere (2) | — | |
| 48 | adobe | 2 | · | · | · | robohelp server (1) · creative suite (1) · robohelp (1) | — | ||
| 49 | agner fog | 2 | · | · | · | NEWPoC 1 | aforum (2) | — | |
| 50 | aiocp | 2 | · | · | · | NEW | aiocp (2) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- Web & CMS Plugins130 CVE8 crit80 vendorsCVSS 7.5jetbox cms (7) · tomcat (6) · wikkawiki (4)
- Operating Systems72 CVE30 crit21 vendorsCVSS 8.0debian linux (8) · linux kernel (8) · debian gnu/linux (7)
- OSS Libraries46 CVE12 crit19 vendorsCVSS 6.8php (11) · madwifi (3) · resin (3)
- Enterprise Software45 CVE8 crit24 vendorsCVSS 10.0tru64 (2) · acgvannu (1) · anti-virus for the enterprise (1)
- Security Products35 CVE21 crit20 vendorsCVSS 8.1avast antivirus (3) · f-secure anti-virus (3) · f-secure anti-virus client security (3)
- Consumer Software32 CVE10 crit24 vendorsCVSS 8.7digital music mentor (2) · firefly (2) · atomixmp3 (1)
- 5 crit14 vendorsCVSS 7.8adaptive security appliance software (4) · pix (4) · ios (3)
- Cloud & SaaS23 CVE9 crit10 vendorsCVSS 9.0workstation (6) · bochs (2) · parallels desktop (2)
- Communications16 CVE3 crit11 vendorsCVSS 10.0squirrelmail (3) · atmail webmail (1) · communigate pro (1)
- Mobile Apps15 CVE9 crit1 vendorsCVSS 7.5mac os x (7) · mac os x server (5) · quicktime (3)
- Databases8 CVE1 crit4 vendorsCVSS 9.3mysql (6) · weblogic portal (2) · firebird (1)
- DevTools & CI5 CVE1 crit4 vendorsCVSS 8.4aforum (2) · backup manager (1)
- ICS / OT / IoT5 CVE16 crit4 vendorsCVSS 9.4ademco atnbaseloader100 module (1) · b/m9000 vp (1) · centum vp (1)
- Hardware Firmware2 CVE1 crit2 vendorsCVSS 9.3network camera server vb100 (1) · network camera server vb101 (1) · network camera server vb150 (1)
- Unclassified85 CVE17 crit75 vendorsCVSS 7.5acp3 (3) · precisionid barcode (3) · 2z project (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| Web & CMS Plugins▸ 5 | 130 | 8 | · | 80 | 91 | 7.5 | jetbox cms (7) · tomcat (6) · wikkawiki (4) |
| Operating Systems▸ 3 | 72 | 30 | · | 21 | 58 | 8.0 | debian linux (8) · linux kernel (8) · debian gnu/linux (7) |
| OSS Libraries▸ 4 | 46 | 12 | · | 19 | 27 | 6.8 | php (11) · madwifi (3) · resin (3) |
| Enterprise Software▸ 6 | 45 | 8 | · | 24 | 39 | 10.0 | tru64 (2) · acgvannu (1) · anti-virus for the enterprise (1) |
| Security Products▸ 4 | 35 | 21 | · | 20 | 48 | 8.1 | avast antivirus (3) · f-secure anti-virus (3) · f-secure anti-virus client security (3) |
| Consumer Software▸ 5 | 32 | 10 | · | 24 | 30 | 8.7 | digital music mentor (2) · firefly (2) · atomixmp3 (1) |
| Networking Infrastructure▸ 6 | 26 | 5 | · | 14 | 29 | 7.8 | adaptive security appliance software (4) · pix (4) · ios (3) |
| Cloud & SaaS▸ 3 | 23 | 9 | · | 10 | 17 | 9.0 | workstation (6) · bochs (2) · parallels desktop (2) |
| Communications▸ 3 | 16 | 3 | · | 11 | 13 | 10.0 | squirrelmail (3) · atmail webmail (1) · communigate pro (1) |
| Mobile Apps▸ 1 | 15 | 9 | · | 1 | 5 | 7.5 | mac os x (7) · mac os x server (5) · quicktime (3) |
| Databases▸ 2 | 8 | 1 | · | 4 | 4 | 9.3 | mysql (6) · weblogic portal (2) · firebird (1) |
| DevTools & CI▸ 2 | 5 | 1 | · | 4 | 4 | 8.4 | aforum (2) · backup manager (1) |
| ICS / OT / IoT▸ 3 | 5 | 16 | · | 4 | 18 | 9.4 | ademco atnbaseloader100 module (1) · b/m9000 vp (1) · centum vp (1) |
| Hardware Firmware▸ 2 | 2 | 1 | · | 2 | 4 | 9.3 | network camera server vb100 (1) · network camera server vb101 (1) · network camera server vb150 (1) |
| Unclassified | 85 | 17 | · | 75 | 77 | 7.5 | acp3 (3) · precisionid barcode (3) · 2z project (2) |
Weakness × Sector
Which weaknesses hit which solution categories in May 2007
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
119Memory Buffer Bounds94Code Injection79XSS20Improper Input Validation200Information Exposure399CWE-39989SQL Injection264CWE-264287Improper Authentication134Format StringWeb & CMS Plugins4221212OSS Libraries101213211Consumer Software221231Operating Systems3221211Enterprise Software211Networking Infrastructure12211Security Products5111Cloud & SaaS2Communications12111Databases1