CVE-2007-3754

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-09-27 · updated 2026-06-16
Weakness: CWE-287

Description

Mail in Apple iPhone 1.1.1, when using SSL, does not warn the user when the mail server changes or is not trusted, which might allow remote attackers to steal credentials and read email via a man-in-the-middle (MITM) attack.

Affected products

Apple Iphone: 1.0
Apple Iphone Os: 1.0.1, 1.0.2

References

http://docs.info.apple.com/article.html?artnum=306586
http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html
http://osvdb.org/38537
http://secunia.com/advisories/26983
http://securitytracker.com/id?1018752
http://www.securityfocus.com/bid/25856
http://www.vupen.com/english/advisories/2007/3287
https://exchange.xforce.ibmcloud.com/vulnerabilities/36845
http://docs.info.apple.com/article.html?artnum=306586
http://lists.apple.com/archives/security-announce/2007/Sep/msg00001.html
http://osvdb.org/38537
http://secunia.com/advisories/26983

Get alerted when CVE-2007-3754 or the next vulnerability affects your stack