CVE-2007-1169: Trend Micro Serverprotect

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

The web interface in Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 accepts logon requests through unencrypted HTTP, which might allow remote attackers to obtain credentials by sniffing the network.

Affected products

• Trend Micro Serverprotect: version 1.25_2007-02-16 only

Published 2007-03-02. Last modified 2026-06-16.