CVE Tools
Track your stack

June 2007

583 CVEs published, +1% on May 2007 and −10% on June 2006. CISA added 0 to KEV.

2007 month by month

2007, month by month. Point at another month to read it.
2007: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2007January 2007: 730 CVEsFebruary 2007: 633 CVEsMarch 2007: 640 CVEsApril 2007: 632 CVEsMay 2007: 575 CVEsJune 2007: 583 CVEsJuly 2007: 594 CVEsAugust 2007: 533 CVEsSeptember 2007: 453 CVEsOctober 2007: 984 CVEsNovember 2007: 486 CVEsDecember 2007: 449 CVEs7,292+5%
Critical
9717% of the 575 with a CVSS score
Added to CISA KEV
0None of this month's own CVEs is in KEV yet
Vendors
317446 products
Top weakness
Memory Buffer BoundsCWE-119 · 25 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1MicrosoftInternet Explorer, Windows Xp, Windows 2003 Server3712nonenew
  2. 2SunSolaris, Sunos, Java System Directory Server163nonenew
  3. 3Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux162nonenew
  4. 4AppleSafari, Mac OS X, Mac OS X Server154nonenew
  5. 5IBMWebsphere Application Server, Aix, Websphere Portal124nonenew
  6. 6MozillaFirefox, Seamonkey, Thunderbird122nonenew
  7. 7Red HatEnterprise Linux Desktop, Red Hat Enterprise Linux, Enterprise Linux102nonenew
  8. 8Web-app.orgWebapp100nonenew
  9. 9ApacheHTTP Server, Tomcat, Myfaces Tomahawk80nonenew
  10. 10SymantecClient Security, Norton Antivirus, Reporting Server83nonenew
  11. 11XoopsArticles Module, Cjay Content Module, Horoscope Module80nonenew
  12. 12CanonicalUbuntu Linux72nonenew
  13. 13DebianDebian Linux72nonenew
  14. 14Avaya4602sw Ip Phone, One-x60nonenew
  15. 15Clam Anti-virusClamav51nonenew
  16. 16FirebirdsqlFirebird51nonenew
  17. 17Gentoo Foundation Inc.Gentoo Linux50nonenew
  18. 18HPSystem Management Homepage, Photo Digital Imaging Activex Control, Openvms52nonenew
  19. 19JffnmsJust For Fun Network Management System52nonenew
  20. 20PHPPHP50nonenew
  21. 21WiresharkWireshark50nonenew
  22. 22WordPressWordPress50nonenew
  23. 23Zoneo-softPhptraffica50nonenew
  24. 24Ао «ивк»Альт 8 Сп, Альт Сп 1050nonenew
  25. 25IngresDatabase Server43nonenew

Severity

How this month's CVEs score on CVSS; 8 have no score yet. Severity is not exploitation.

  • Critical9717%
  • High18232%
  • Medium27949%
  • Low173%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Web-app.org10#8
  2. Symantec8#10
  3. Xoops8#11
  4. Firebirdsql5#16
  5. Jffnms5#19
  6. PHP5#20
  7. Wireshark5#21
  8. WordPress5#22
  9. Zoneo-soft5#23
  10. Ао «ивк»5#24

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-119Memory Buffer Bounds25new
  2. CWE-79XSS18new
  3. CWE-26412new
  4. CWE-3998new
  5. CWE-89SQL Injection7new
  6. CWE-20Improper Input Validation6new
  7. CWE-1894new
  8. CWE-94Code Injection4new
  9. CWE-22Path Traversal3new
  10. CWE-287Improper Authentication3new
  11. CWE-362Race Condition3new
  12. CWE-200Information Exposure2new
  13. CWE-2552new
  14. CWE-161new
  15. CWE-1781new
  16. CWE-352CSRF1new
  17. CWE-3691new
  18. CWE-591new
  19. CWE-674Uncontrolled Recursion1new
  20. CWE-787Out-of-bounds Write1new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store