CVE-2007-0543

Severity: critical (CVSS 9.4 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-01-29 · updated 2026-06-16

Description

ZixForum 1.14 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for Zixforum.mdb. NOTE: a followup post suggests that this issue only occurs if the administrator does not properly follow installation directions.

Affected products

Zixforum: through 1.14

References

http://securityreason.com/securityalert/2189
http://www.securityfocus.com/archive/1/457950/100/0/threaded
http://www.securityfocus.com/archive/1/458135/100/100/threaded
http://securityreason.com/securityalert/2189
http://www.securityfocus.com/archive/1/457950/100/0/threaded
http://www.securityfocus.com/archive/1/458135/100/100/threaded

Get alerted when CVE-2007-0543 or the next vulnerability affects your stack