CVE-2007-1178: Web-App.org Webapp

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

WebAPP before 0.9.9.5 does not check access in certain contexts related to (1) Calendar Administration, (2) Instant Messages Administration, and (3) the Image Uploader, which has unknown impact and attack vectors.

Affected products

• Web-App.org Webapp: up to and including 0.9.9.4

Published 2007-03-02. Last modified 2026-06-16.