CVE Tools
Track your stack

July 2007

594 CVEs published, +2% on June 2007 and +11% on July 2006. CISA added 0 to KEV.

2007 month by month

2007, month by month. Point at another month to read it.
2007: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2007January 2007: 730 CVEsFebruary 2007: 633 CVEsMarch 2007: 640 CVEsApril 2007: 632 CVEsMay 2007: 575 CVEsJune 2007: 583 CVEsJuly 2007: 594 CVEsAugust 2007: 533 CVEsSeptember 2007: 453 CVEsOctober 2007: 984 CVEsNovember 2007: 486 CVEsDecember 2007: 449 CVEs7,292+5%
Critical
7513% of the 587 with a CVSS score
Added to CISA KEV
0None of this month's own CVEs is in KEV yet
Vendors
310517 products
Top weakness
Memory Buffer BoundsCWE-119 · 22 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1MicrosoftInternet Explorer, .net Framework, Excel268nonenew
  2. 2OracleDatabase Server, Application Server, Collaboration Suite190nonenew
  3. 3MozillaFirefox, Thunderbird, Seamonkey156nonenew
  4. 4AppleQuicktime, Safari, Cups138nonenew
  5. 5AlstrasoftVideo Share Enterprise, Affiliate Network Pro, Askme Pro110nonenew
  6. 6EzEz Publish101nonenew
  7. 7SunJre, Jdk, Sdk102nonenew
  8. 8Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux100nonenew
  9. 9Gentoo Foundation Inc.Gentoo Linux92nonenew
  10. 10IBMAix, Proventia Network Ips GX5008, Proventia Network Ips GX510892nonenew
  11. 11SapEnjoysap, Internet Communication Manager, Internet Graphics Server91nonenew
  12. 12VtigerVtiger Crm90nonenew
  13. 13CiscoUnified Communications Manager, Unified Callmanager, Wireless Lan Controller Software72nonenew
  14. 14LinuxLinux Kernel70nonenew
  15. 15SquirrelmailGpg Plugin, Squirrelmail71nonenew
  16. 16SymantecClient Security, Norton Antivirus, Norton Ghost70nonenew
  17. 17BroadcomUnicenter Network and Systems Management, Brightstor Arcserve Backup, Brightstor Enterprise Backup64nonenew
  18. 18CitrixAccess Gateway, Endpoint Analysis Client, Metaframe Presentation Server61nonenew
  19. 19DrupalDrupal, Logintoboggan Module, Forward Module60nonenew
  20. 20FreebsdFreebsd, Libarchive62nonenew
  21. 21Asp IndirAlisveris Sitesi Script, Dora Emlak, Cvmatik50nonenew
  22. 22CodewidgetsOnline Event Registration Template, Threaded Discussion Forum Application, Pay Roll - Time Sheet50nonenew
  23. 23HitachiCosminexus Application Server, Ucosminexus Application Server, Cosminexus Developer51nonenew
  24. 24HPOpenvms, Instant Support, Cluster Object Manager50nonenew
  25. 25IpswitchImail Server, Ipswitch Collaboration Suite, Imserver51nonenew

Severity

How this month's CVEs score on CVSS; 7 have no score yet. Severity is not exploitation.

  • Critical7513%
  • High19533%
  • Medium29049%
  • Low275%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Ez10#6
  2. Sap9#11
  3. Vtiger9#12
  4. Squirrelmail7#15
  5. Symantec7#16
  6. Citrix6#18
  7. Drupal6#19
  8. Asp Indir5#21
  9. Codewidgets5#22
  10. Lighttpd5#26

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-119Memory Buffer Bounds22new
  2. CWE-89SQL Injection13new
  3. CWE-26411new
  4. CWE-79XSS11new
  5. CWE-20Improper Input Validation7new
  6. CWE-22Path Traversal7new
  7. CWE-3995new
  8. CWE-94Code Injection5new
  9. CWE-200Information Exposure4new
  10. CWE-287Improper Authentication4new
  11. CWE-1893new
  12. CWE-190Integer Overflow3new
  13. CWE-162new
  14. CWE-191new
  15. CWE-2521new
  16. CWE-2551new
  17. CWE-3101new
  18. CWE-352CSRF1new
  19. CWE-362Race Condition1new
  20. CWE-3691new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store