What’s Vulnerable › Vulnerabilities

CVE-2007-3871

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2007-09-12 · updated 2026-06-16

Description

Stampit Web uses guessable id values for online stamp purchases, which allows remote attackers to cause a denial of service (stamp invalidation) via a SOAP request with an id value for a stamp that has not yet been printed.

Affected products

• Deutsche Post Stampit Web: 1.0

References

• http://seclists.org/fulldisclosure/2007/Aug/0441.html
• http://securityreason.com/securityalert/3129
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36365
• https://www.cynops.de/advisories/CVE-2007-3871-signed.txt
• https://www.cynops.de/advisories/CVE-2007-3871.txt
• https://www.klink.name/security/aklink-sa-2007-003-stampit-web-dos.txt
• http://seclists.org/fulldisclosure/2007/Aug/0441.html
• http://securityreason.com/securityalert/3129
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36365
• https://www.cynops.de/advisories/CVE-2007-3871-signed.txt
• https://www.cynops.de/advisories/CVE-2007-3871.txt
• https://www.klink.name/security/aklink-sa-2007-003-stampit-web-dos.txt

Get alerted when CVE-2007-3871 or the next vulnerability affects your stack