CVE-2007-0928: Virtual Calendar

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

Virtual Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an encoded password via a direct request for pwd.txt.

Affected products

• Virtual Calendar Virtual Calendar: any version

Published 2007-02-14. Last modified 2026-06-16.