CVE Tools
Track your stack

March 2007

640 CVEs published, +1% on February 2007 and +8% on March 2006. CISA added 0 to KEV.

2007 month by month

2007, month by month. Point at another month to read it.
2007: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2007January 2007: 730 CVEsFebruary 2007: 633 CVEsMarch 2007: 640 CVEsApril 2007: 632 CVEsMay 2007: 575 CVEsJune 2007: 583 CVEsJuly 2007: 594 CVEsAugust 2007: 533 CVEsSeptember 2007: 453 CVEsOctober 2007: 984 CVEsNovember 2007: 486 CVEsDecember 2007: 449 CVEs7,292+5%
Critical
12520% of the 632 with a CVSS score
Added to CISA KEV
0None of this month's own CVEs is in KEV yet
Vendors
382548 products
Top weakness
Memory Buffer BoundsCWE-119 · 22 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1PHPPHP, Com Extensions393nonenew
  2. 2MicrosoftWindows Vista, Windows Xp, Windows 2003 Server256nonenew
  3. 3AppleMac OS X, Mac OS X Server, Quicktime205nonenew
  4. 4Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux145nonenew
  5. 5IBMWebsphere Application Server, Lotus Domino, DB2122nonenew
  6. 6JoomlaBsq Sitestats, Car Manager, Nfn Address Book92nonenew
  7. 7LinuxLinux Kernel80nonenew
  8. 8OracleApex, Database Server, Oracle10g80nonenew
  9. 9MozillaFirefox, Seamonkey, Thunderbird71nonenew
  10. 10WordPressWordPress70nonenew
  11. 11MamboFlatmenu, Mambo, Mambo Open Source62nonenew
  12. 12RadscanNetwork Audio System, Conquest61nonenew
  13. 13SunJava System Web Server, Sunos, Java Dynamic Management Kit60nonenew
  14. 14W-agoraW-agora60nonenew
  15. 15BroadcomBrightstor Arcserve Backup, Etrust Intrusion Detection, Etrust Admin51nonenew
  16. 16KdeKonqueror, K-mail50nonenew
  17. 17MadwifiMadwifi50nonenew
  18. 18NovellAccess Manager, Bordermanager, Imanager52nonenew
  19. 19PhpbbDimension, Import Tools, Insert User52nonenew
  20. 20ScriptmagixScriptmagix Faq Builder, Scriptmagix Jokes, Scriptmagix Lyrics50nonenew
  21. 21Sql-ledgerSql-ledger52nonenew
  22. 22Active Web SoftwaresActive Auction House, Active Link Engine, Active Newsletter40nonenew
  23. 23ApacheHTTP Server, Mod Perl, Mod Python40nonenew
  24. 24AvayaS8700, S8300, S850041nonenew
  25. 25CanonicalUbuntu Linux, Ubuntu41nonenew

Severity

How this month's CVEs score on CVSS; 8 have no score yet. Severity is not exploitation.

  • Critical12520%
  • High20432%
  • Medium28745%
  • Low163%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. WordPress7#10
  2. Mambo6#11
  3. Radscan6#12
  4. W-agora6#14
  5. Madwifi5#17
  6. Phpbb5#19
  7. Scriptmagix5#20
  8. Sql-ledger5#21
  9. Ledgersmb4#29
  10. Phpnuke4#31

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-119Memory Buffer Bounds22new
  2. CWE-94Code Injection21new
  3. CWE-79XSS16new
  4. CWE-20Improper Input Validation14new
  5. CWE-89SQL Injection10new
  6. CWE-2649new
  7. CWE-1897new
  8. CWE-200Information Exposure5new
  9. CWE-22Path Traversal4new
  10. CWE-3994new
  11. CWE-352CSRF3new
  12. CWE-162new
  13. CWE-287Improper Authentication2new
  14. CWE-120Buffer Overflow1new
  15. CWE-134Format String1new
  16. CWE-190Integer Overflow1new
  17. CWE-362Race Condition1new
  18. CWE-400Resource Consumption1new
  19. CWE-476NULL Pointer Dereference1new
  20. CWE-502Deserialization1new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store