CVE Tools
Track your stack

December 2007

449 CVEs published, −8% on November 2007 and −34% on December 2006. CISA added 0 to KEV.

2007 month by month

2007, month by month. Point at another month to read it.
2007: CVEs published per month
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2007January 2007: 730 CVEsFebruary 2007: 633 CVEsMarch 2007: 640 CVEsApril 2007: 632 CVEsMay 2007: 575 CVEsJune 2007: 583 CVEsJuly 2007: 594 CVEsAugust 2007: 533 CVEsSeptember 2007: 453 CVEsOctober 2007: 984 CVEsNovember 2007: 486 CVEsDecember 2007: 449 CVEs7,292+5%
Critical
7116% of the 436 with a CVSS score
Added to CISA KEV
0None of this month's own CVEs is in KEV yet
Vendors
256357 products
Top weakness
Memory Buffer BoundsCWE-119 · 69 CVEs

Who drove it

Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.

  1. 1AppleMac OS X, Mac OS X Server, Quicktime269nonenew
  2. 2MicrosoftInternet Explorer, Ie, Windows Vista177nonenew
  3. 3SunJava System Web Proxy Server, Java System Web Server, Solaris132nonenew
  4. 4HPQuick Launch Button, Info Center, Openview Network Node Manager127nonenew
  5. 5IBMHardware Management Console, Lotus Notes, Tivoli Netcool Security Manager123nonenew
  6. 6Hosting ControllerHosting Controller111nonenew
  7. 7Red HatEnterprise Linux, Red Hat Enterprise Linux, Enterprise Linux Desktop81nonenew
  8. 8Gentoo Foundation Inc.Gentoo Linux72nonenew
  9. 9Сообщество Свободного Программного ОбеспеченияDebian Gnu/linux73nonenew
  10. 10LinuxLinux Kernel60nonenew
  11. 11OracleMySQL, HTTP Server, Linux60nonenew
  12. 12RuncmsRuncms60nonenew
  13. 13AdobeFlash Player51nonenew
  14. 14Clam Anti-virusClamav51nonenew
  15. 15MavenOrg.mortbay.jetty:jetty, Org.apache.tomcat:tomcat-juli, Net.sf.robocode:robocode.core50nonenew
  16. 16MitKerberos 553nonenew
  17. 17OperaOpera Browser51nonenew
  18. 18WiresharkWireshark50nonenew
  19. 19XiglaAbsolute News Manager.net, Absolute Banner Manager.net50nonenew
  20. 20ApacheHTTP Server, Tomcat40nonenew
  21. 21BcoosBcoos, Event Calendar40nonenew
  22. 22CiscoCiscoworks Server, Firewall Services Module, Ip Phone 794041nonenew
  23. 23Real Time LogicBarracudadrive Web Server, Barracudadrive Web Server Home Server40nonenew
  24. 24AertherwideExiftags32nonenew
  25. 25BadblueBadblue30nonenew

Severity

How this month's CVEs score on CVSS; 13 have no score yet. Severity is not exploitation.

  • Critical7116%
  • High11426%
  • Medium23554%
  • Low164%

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Mit5#16
  2. Wireshark5#18
  3. Bcoos4#21
  4. Real Time Logic4#23
  5. Aertherwide3#24
  6. Badblue3#25
  7. Falcon3#31
  8. Flac3#32
  9. Flat PHP3#33
  10. Gadu-gadu3#34

What kind of weakness

Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.

  1. CWE-119Memory Buffer Bounds69new
  2. CWE-79XSS60new
  3. CWE-89SQL Injection59new
  4. CWE-26440new
  5. CWE-22Path Traversal35new
  6. CWE-20Improper Input Validation34new
  7. CWE-94Code Injection26new
  8. CWE-200Information Exposure18new
  9. CWE-18916new
  10. CWE-39916new
  11. CWE-287Improper Authentication9new
  12. CWE-168new
  13. CWE-2555new
  14. CWE-352CSRF5new
  15. CWE-3103new
  16. CWE-134Format String2new
  17. CWE-362Race Condition2new
  18. CWE-592new
  19. CWE-190Integer Overflow1new

Where it landed

The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.

Area is CVEs this month. Point at a sector to read it.

Which weakness, where

The top weakness classes against the vendors and the sectors that carried them.

Snapshot v1, computed Jun 11, 2026, 06:04 UTC. MethodologyAll months on record

Nuclei coverage and the detection gap are held back while the template mirror is repaired.

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store