CVE-2007-5000

State: Published
Severity: Not scored
Published: Dec 13, 2007
Updated: Aug 7, 2024
Reserved: Sep 20, 2007

Description

Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

RHSA-2008:0005vendor-advisory
ADV-2008-0178vdb-entry
1019093vdb-entry
28922third-party-advisory
39134vdb-entry
28749third-party-advisory
SSA:2008-045-02vendor-advisory
29988third-party-advisory
apache-modimap-xss(39001)vdb-entry
SSRT090208vendor-advisory
28375third-party-advisory
28750third-party-advisory
ADV-2008-1623vdb-entry
29806third-party-advisory
apache-modimagemap-xss(39002)vdb-entry
20080716 rPSA-2008-0035-1 httpd mod_sslmailing-list
FEDORA-2008-1695vendor-advisory
PK58024vendor-advisory
28046third-party-advisory
28526third-party-advisory
http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html
RHSA-2008:0006vendor-advisory
31142third-party-advisory
ADV-2008-0924vdb-entry
233623vendor-advisory
RHSA-2008:0007vendor-advisory
http://httpd.apache.org/security/vulnerabilities_20.html
TA08-150Athird-party-advisory
RHSA-2008:0008vendor-advisory
FEDORA-2008-1711vendor-advisory
ADV-2008-0084vdb-entry
ADV-2007-4301vdb-entry
ADV-2008-0398vdb-entry
RHSA-2008:0009vendor-advisory
MDVSA-2008:014vendor-advisory
26838vdb-entry
29420third-party-advisory
http://httpd.apache.org/security/vulnerabilities_22.html
APPLE-SA-2008-03-18vendor-advisory
30430third-party-advisory
oval:org.mitre.oval:def:9539vdb-entrysignature
APPLE-SA-2008-05-28vendor-advisory
28525third-party-advisory
http://support.avaya.com/elmodocs2/security/ASA-2008-032.htm
ADV-2008-0809vdb-entry
20090821 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Servermailing-list
28081third-party-advisory
28467third-party-advisory
SSRT080059vendor-advisory
PK65782vendor-advisory
28196third-party-advisory
RHSA-2008:0004vendor-advisory
[security-announce] 20090820 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Servermailing-list
28607third-party-advisory
SUSE-SA:2008:021vendor-advisory
30356third-party-advisory
http://httpd.apache.org/security/vulnerabilities_13.html
PK63273vendor-advisory
MDVSA-2008:015vendor-advisory
http://docs.info.apple.com/article.html?artnum=307562
28073third-party-advisory
28471third-party-advisory
ADV-2007-4202vdb-entry
SSRT080010vendor-advisory
ADV-2008-1697vdb-entry
RHSA-2008:0261vendor-advisory
USN-575-1vendor-advisory
PK58074vendor-advisory
29640third-party-advisory
32800third-party-advisory
28977third-party-advisory
ADV-2007-4201vdb-entry
ADV-2008-1875vdb-entry
30732third-party-advisory
ADV-2008-1224vdb-entry
http://www.fujitsu.com/global/support/software/security/products-f/interstage-200801e.html
MDVSA-2008:016vendor-advisory
[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20210330 svn commit: r1073139 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/json/mailing-list
[httpd-cvs] 20210330 svn commit: r1888194 [5/13] - /httpd/site/trunk/content/security/json/mailing-list
[httpd-cvs] 20210330 svn commit: r1073140 [1/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20210330 svn commit: r1073140 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20210330 svn commit: r1073139 [5/13] - in /websites/staging/httpd/trunk/content: ./ security/json/mailing-list
[httpd-cvs] 20210330 svn commit: r1073140 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20210330 svn commit: r1073143 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/mailing-list
[httpd-cvs] 20210330 svn commit: r1073149 [5/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/mailing-list
[httpd-cvs] 20210330 svn commit: r1073146 [2/3] - in /websites/staging/httpd/trunk/content: ./ security/cvejsontohtml.py security/vulnerabilities-httpd.xml security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list
[httpd-cvs] 20210330 svn commit: r1073149 [1/13] - in /websites/staging/httpd/trunk/content: ./ security/ security/json/mailing-list
[httpd-cvs] 20210606 svn commit: r1075470 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/json/CVE-2020-13938.json security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.htmlmailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.