CVE-2007-1498: McAfee Epolicy Orchestrator

High severity, CVSS 9.3. EPSS: 7.7% chance of exploitation in the next 30 days.

Multiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control (SiteManager.dll) in the ePO management console in McAfee ePolicy Orchestrator (ePO) before 3.6.1 Patch 1 and ProtectionPilot (PRP) before 1.5.0 HotFix allow remote attackers to execute arbitrary code via a long argument to the (1) ExportSiteList and (2) VerifyPackageCatalog functions, and (3) unspecified vectors involving a swprintf function call.

Affected products

• McAfee Epolicy Orchestrator: version 3.5.0 only; version 3.6.0 only; version 3.6.1 only
• McAfee Protectionpilot: version 1.1.1 only; version 1.5.0 only

Published 2007-03-16. Last modified 2026-06-16.