CVE-2007-0325: Trend Micro Client-Server-Messaging Security

High severity, CVSS 9.3. EPSS: 35.4% chance of exploitation in the next 30 days.

Multiple buffer overflows in the Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control in OfficeScanSetupINI.dll, as used in OfficeScan 7.0 before Build 1344, OfficeScan 7.3 before Build 1241, and Client / Server / Messaging Security 3.0 before Build 1197, allow remote attackers to execute arbitrary code via a crafted HTML document.

Affected products

• Trend Micro Client-Server-Messaging Security: version 3.0 only
• Trend Micro OfficeScan Corporate Edition: version 7.0 only; version 7.3 only

Published 2007-02-20. Last modified 2026-06-16.