May 2007
575 CVEs published, −9% on April 2007 and −8% on May 2006. CISA added 0 to KEV.
2007 month by month
| Year | Jan | Feb | Mar | Apr | May | Jun | Jul | Aug | Sep | Oct | Nov | Dec | Year total |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 2007 | January 2007: 730 CVEs | February 2007: 633 CVEs | March 2007: 640 CVEs | April 2007: 632 CVEs | May 2007: 575 CVEs | June 2007: 583 CVEs | July 2007: 594 CVEs | August 2007: 533 CVEs | September 2007: 453 CVEs | October 2007: 984 CVEs | November 2007: 486 CVEs | December 2007: 449 CVEs | 7,292+5% |
- Critical
- 11119% of the 570 with a CVSS score
- Added to CISA KEV
- 0None of this month's own CVEs is in KEV yet
- Vendors
- 377534 products
- Top weakness
- Memory Buffer BoundsCWE-119 · 20 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1MicrosoftInternet Explorer, Exchange Server, Office2614nonenew
- 2AppleMac OS X, Mac OS X Server, Quicktime158nonenew
- 3SunSunos, Jre, Sdk112nonenew
- 4BeaWeblogic Server, Weblogic Integration, Weblogic Workshop100nonenew
- 5PHPPHP102nonenew
- 6CiscoPix, Adaptive Security Appliance Software, IOS92nonenew
- 7DebianDebian Linux80nonenew
- 8LinuxLinux Kernel80nonenew
- 9ApacheTomcat, Tomcat Jk Web Server Connector70nonenew
- 10JetboxJetbox CMS70nonenew
- 11Red HatRed Hat Enterprise Linux, Enterprise Linux, Enterprise Linux Server71nonenew
- 12Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux70nonenew
- 13HPTRU64, Openvms, Procurve Switch 9300m62nonenew
- 14Lead TechnologiesLeadtools Raster Dialog File Object, Leadtools Jpeg 2000, Leadtools Isis Activex Control63nonenew
- 15VMwareWorkstation, Server60nonenew
- 16CanonicalUbuntu Linux50nonenew
- 17JelsoftVbulletin50nonenew
- 18MavenOrg.apache.tomcat:tomcat, Org.apache.tomcat:jsp-api, Org.apache.tomcat:servlet-api50nonenew
- 19OracleMySQL, Weblogic Portal50nonenew
- 20Ruben BoelingerWordtube, Wp-table, Myflash50nonenew
- 21SymantecNorton Internet Security, Enterprise Security Manager, Discovery52nonenew
- 22AlstrasoftTemplate Seller, E-friends, Live Support43nonenew
- 23AvastAvast Antivirus, Avast\! Antivirus, Avast Antivirus Home42nonenew
- 24F-secureF-secure Anti-virus, F-secure Anti-virus Client Security, F-secure Anti-virus Linux Client Security41nonenew
- 25Office OcxExcel Viewer Ocx, Office Viewer Ocx, Powerpoint Viewer Ocx42nonenew
Severity
How this month's CVEs score on CVSS; 5 have no score yet. Severity is not exploitation.
- Critical111
- High236
- Medium205
- Low18
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-119Memory Buffer Bounds20
- CWE-94Code Injection11
- CWE-79XSS10
- CWE-20Improper Input Validation8
- CWE-200Information Exposure7
- CWE-3997
- CWE-89SQL Injection5
- CWE-2644
- CWE-287Improper Authentication4
- CWE-134Format String2
- CWE-1892
- CWE-120Buffer Overflow1
- CWE-190Integer Overflow1
- CWE-22Path Traversal1
- CWE-2551
- CWE-269Improper Privilege Mgmt1
- CWE-352CSRF1
- CWE-362Race Condition1
- CWE-3691
- CWE-400Resource Consumption1
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Web & CMS Plugins13024% of sector-tagged CVEs
- Operating Systems7213% of sector-tagged CVEs
- OSS Libraries468% of sector-tagged CVEs
- Enterprise Software458% of sector-tagged CVEs
- Security Products356% of sector-tagged CVEs
- Consumer Software326% of sector-tagged CVEs
- Networking Infrastructure265% of sector-tagged CVEs
- Cloud & SaaS234% of sector-tagged CVEs
- 6 smaller sectors51
- Not yet classified85
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 119Memory Buffer Bounds | 94Code Injection | 79XSS | 20Improper Input Validation | 200Information Exposure | 399 | 89SQL Injection | 264 | 287Improper Authentication | 134Format String |
|---|---|---|---|---|---|---|---|---|---|---|
| Microsoft | 1 | 2 | 4 | 3 | 1 | |||||
| Apple | 1 | 1 | ||||||||
| Sun | 1 | 1 | ||||||||
| Bea | ||||||||||
| PHP | 2 | 1 | 1 | |||||||
| Cisco | ||||||||||
| Debian | 1 | |||||||||
| Linux | 1 | 1 | ||||||||
| Apache | 2 | 1 | ||||||||
| Jetbox | ||||||||||
| HP | 1 | |||||||||
| Lead Technologies | 1 |