CVE-2007-0148: omnigroup omniweb

EPSS trend

Probability

6.44%

Chance of exploitation in the next 30 days

Percentile

94%

Versus all other CVEs

30-day change

+0.16 pp

From 6.27% on 19-09-2026

19-09-202619-10-2026

EPSS score

6.44%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databasedososxVerified
OmniWeb 5.5.1 - JavaScript alert() Remote Format String (PoC)
Maturity: poc

References

11 links

www.omnigroup.com/applications/omniweb/releasenotes/X Refsource CONFIRMPatch
www.securityfocus.com/bid/21911VDB EntryX Refsource BID
www.exploit-db.com/exploits/3098ExploitX Refsource EXPLOIT DB
secunia.com/advisories/23624Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
blog.omnigroup.com/2007/01/07/omniweb-552-now-available-and-more-secure/X Refsource CONFIRM
www.vupen.com/english/advisories/2007/0075VDB EntryX Refsource VUPEN
exchange.xforce.ibmcloud.com/vulnerabilities/31324VDB EntryX Refsource XF
projects.info-pull.com/moab/MOAB-07-01-2007.htmlX Refsource MISCVendor Advisory
www.securityfocus.com/archive/1/456578/100/0/threadedMailing ListX Refsource BUGTRAQ
osvdb.org/31222VDB EntryX Refsource OSVDB

Show all 11 references

www.digitalmunition.com/DMA%5B2007-0107a%5D.txtX Refsource MISC

Related vulnerabilities

CVE-2007-0342applemac_os_x+34.55%19y ago18-01-2007 02:00WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service (null dereference and application crash) via a TD element with a large number in the ROWSPAN attribute, as demonstrated by a crash of OmniWeb 5.5.3 on Mac OS X 10.4.8, a different vulnerability than CVE-2006-2019.CVE-2005-0233mozillacamino+520.40%21y ago07-02-2005 05:00The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.CVE-2005-0238debianepiphany-browser+41.55%21y ago07-02-2005 05:00The International Domain Name (IDN) support in Epiphany allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.CVE-2005-0236omnigroupomniweb1.00%21y ago07-02-2005 05:00The International Domain Name (IDN) support in Omniweb 5 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which facilitates phishing attacks.CVE-2005-0976applesafari+21.82%21y ago18-04-2005 04:00AppleWebKit (WebCore and WebKit), as used in multiple products such as Safari 1.2 and OmniGroup OmniWeb 5.1, allows remote attackers to read arbitrary files via the XMLHttpRequest Javascript component, as demonstrated using automatically mounted disk images and file:// URLs.

All vulnerabilities inomniweb

CVE-2007-0148: omnigroup omniweb

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References