CVE-2007-0617: Earthlink Total Access

Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days.

The SpamBlocker.dll ActiveX control in Earthlink TotalAccess is marked "safe for scripting," which allows remote attackers to add arbitrary e-mail addresses and domains to the spam blocker whitelist via the (1) AddSenderToWhitelist and (2) AddDomainToWhitelist functions.

Affected products

• Earthlink Total Access: any version

Published 2007-01-31. Last modified 2026-06-16.