CVE-2007-1160: Webspell

High severity, CVSS 10.0. EPSS: 2.7% chance of exploitation in the next 30 days.

webSPELL 4.0, and possibly later versions, allows remote attackers to bypass authentication via a ws_auth cookie, a different vulnerability than CVE-2006-4782.

Affected products

• Webspell Webspell: version 4.0 only

Published 2007-03-02. Last modified 2026-06-16.