CVE-2007-0872: Plain Old Webserver

Medium severity, CVSS 5.0. EPSS: 3.6% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the Plain Old Webserver (POW) add-on before 0.0.9 for Mozilla Firefox allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

Affected products

• Plain Old Webserver Plain Old Webserver: version 0.0.7 only; version 0.0.8 only

Published 2007-02-12. Last modified 2026-06-16.