How severe is CVE-2007-0583?

CVE-2007-0583 has a CVSS 2.0 base score of 4.3, rated medium severity.

Is CVE-2007-0583 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (74th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-0583?

CVE-2007-0583 affects Http Commander. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2007-0583?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2007-0583 published?

CVE-2007-0583 was published on 2007-01-30 and last updated on 2026-06-16.

CVE-2007-0583

CVE-2007-0583 is a medium-severity vulnerability in Http Commander with a CVSS 2.0 base score of 4.3. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 4.3)
EPSS exploit prediction: 2% (74th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Http Commander
Published: 2007-01-30
Last modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in HTTP Commander 6.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) LogoffMessage parameter to logofflast.aspx or the (2) txtUsername parameter to Default.aspx. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.

Frequently asked questions

What is CVE-2007-0583?: Multiple cross-site scripting (XSS) vulnerabilities in HTTP Commander 6.0, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) LogoffMessage parameter to logofflast.aspx or the (2) txtUsername parameter to Default.aspx. NOTE: The provenance of this information is unknown; the details are obtained solely from third party information.
How severe is CVE-2007-0583?: CVE-2007-0583 has a CVSS 2.0 base score of 4.3, rated medium severity.
Is CVE-2007-0583 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (74th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2007-0583?: CVE-2007-0583 affects Http Commander. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2007-0583?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2007-0583 published?: CVE-2007-0583 was published on 2007-01-30 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:http_commander:http_commander:6.0:*:*:*:*:*:*:*

More vulnerabilities in Http Commander

CVE-2003-1166 — Medium (CVSS 5.0): Directory traversal vulnerability in (1) Openfile.aspx and (2) Html.aspx in HTTP Commander 4.0 allows remote attackers…

All CVEs affecting Http Commander →