CVE-2007-3215

CVE-2007-3215 is a medium-severity vulnerability in Phpmailer with a CVSS 2.0 base score of 6.8. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

• Severity: Medium (CVSS 2.0 base score 6.8)
• EPSS exploit prediction: 2% (82nd percentile)
• Actively exploited: Not listed in CISA KEV
• Affected product: Phpmailer
• Published: 2007-06-14
• Last modified: 2026-06-16

Description

PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php.

Frequently asked questions

What is CVE-2007-3215?

PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php.

How severe is CVE-2007-3215?

CVE-2007-3215 has a CVSS 2.0 base score of 6.8, rated medium severity.

Is CVE-2007-3215 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (82nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-3215?

CVE-2007-3215 primarily affects Phpmailer. In total, 5 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2007-3215?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2007-3215 published?

CVE-2007-3215 was published on 2007-06-14 and last updated on 2026-06-16.

References

• http://larholm.com/2007/06/11/phpmailer-0day-remote-execution/
• http://osvdb.org/37206
• http://osvdb.org/76139
• http://seclists.org/fulldisclosure/2011/Oct/223
• http://secunia.com/advisories/25626
• http://secunia.com/advisories/25755
• http://secunia.com/advisories/25758
• http://securityreason.com/securityalert/2802
• http://sourceforge.net/project/shownotes.php?release_id=517428&group_id=157374
• http://www.debian.org/security/2007/dsa-1315
• http://www.securityfocus.com/archive/1/471065/100/0/threaded
• http://www.securityfocus.com/bid/24417
• http://www.vupen.com/english/advisories/2007/2161
• http://www.vupen.com/english/advisories/2007/2267
• http://yehg.net/lab/pr0js/advisories/%5BvTiger_5.2.1%5D_rce
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34818
• https://sourceforge.net/tracker/index.php?func=detail&aid=1734811&group_id=26031&atid=385707

Affected products (5)

• cpe:2.3:a:phpmailer:phpmailer:1.7:*:*:*:*:*:*:*
• cpe:2.3:a:phpmailer:phpmailer:1.7.1:*:*:*:*:*:*:*
• cpe:2.3:a:phpmailer:phpmailer:1.7.2:*:*:*:*:*:*:*
• cpe:2.3:a:phpmailer:phpmailer:1.7.3:*:*:*:*:*:*:*
• cpe:2.3:a:phpmailer:phpmailer:1.73:*:*:*:*:*:*:*

More vulnerabilities in Phpmailer

• CVE-2005-1807 — Medium (CVSS 5.0): The Data function in class.smtp.php in PHPMailer 1.7.2 and earlier allows remote attackers to cause a denial of service…

All CVEs affecting Phpmailer →