CVE-2007-2581: microsoft sharepoint_server Cross-site Scripting

EPSS trend

Probability

36.23%

Chance of exploitation in the next 30 days

Percentile

98%

Versus all other CVEs

30-day change

0.00 pp

From 36.23% on 19-09-2026

19-09-202619-10-2026

EPSS score

36.23%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

exploit-databaseremotewindowsVerified
Microsoft SharePoint Server 3.0 - Cross-Site Scripting
Maturity: weaponized

References

14 links

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2286VDB EntrySignatureX Refsource OVAL
www.securityfocus.com/bid/23832VDB EntryX Refsource BID
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-059Vendor AdvisoryX Refsource MS
securitytracker.com/id?1018789VDB EntryX Refsource SECTRACK
archives.neohapsis.com/archives/bugtraq/2007-05/0196.htmlMailing ListX Refsource BUGTRAQ
www.securityfocus.com/archive/1/482366/100/0/threadedVendor AdvisoryX Refsource HP
osvdb.org/37630VDB EntryX Refsource OSVDB
exchange.xforce.ibmcloud.com/vulnerabilities/34343VDB EntryX Refsource XF
www.securityfocus.com/archive/1/467738/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/27148Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Show all 14 references

www.vupen.com/english/advisories/2007/3439VDB EntryX Refsource VUPENVendor Advisory
securityreason.com/securityalert/2682Third Party AdvisoryX Refsource SREASON
www.securityfocus.com/archive/1/467749/100/0/threadedMailing ListX Refsource BUGTRAQ
www.us-cert.gov/cas/techalerts/TA07-282A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource

Related vulnerabilities

CVE-2003-0904microsoftexchange_server+28.16%22y ago08-01-2004 05:00Microsoft Exchange 2003 and Outlook Web Access (OWA), when configured to use NTLM authentication, does not properly reuse HTTP connections, which can cause OWA users to view mailboxes of other users when Kerberos has been disabled as an authentication method for IIS 6.0, e.g. when SharePoint Services 2.0 is installed.CVE-2013-1330microsoftoffice_web_apps+430.20%13y ago11-09-2013 10:00The default configuration of Microsoft SharePoint Portal Server 2003 SP3, SharePoint Server 2007 SP3 and 2010 SP1 and SP2, and Office Web Apps 2010 does not set the EnableViewStateMac attribute, which allows remote attackers to execute arbitrary code by leveraging an unassigned workflow, aka "MAC Disabled Vulnerability."CVE-2013-1315microsoftexcel+628.87%13y ago11-09-2013 10:00Microsoft SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013; Office Web Apps 2010; Excel 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Office for Mac 2011; Excel Viewer; and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."CVE-2013-0081microsoftsharepoint_foundation+376.17%13y ago11-09-2013 10:00Microsoft SharePoint Portal Server 2003 SP3 and SharePoint Server 2007 SP3, 2010 SP1 and SP2, and 2013 do not properly process unassigned workflows, which allows remote attackers to cause a denial of service (W3WP process hang) via a crafted URL, aka "SharePoint Denial of Service Vulnerability."CVE-2013-0006microsoftexpression_web+1028.08%13y ago09-01-2013 18:00Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML Integer Truncation Vulnerability."CVE-2013-0007microsoftexpression_web+1031.57%13y ago09-01-2013 18:00Microsoft XML Core Services (aka MSXML) 4.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "MSXML XSLT Vulnerability."

All vulnerabilities insharepoint_server sharepoint_services

CVE-2007-2581: microsoft sharepoint_server Cross-site Scripting

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References