CVE-2007-2318: Filezilla

High severity, CVSS 9.3. EPSS: 4.5% chance of exploitation in the next 30 days.

Multiple format string vulnerabilities in FileZilla before 2.2.32 allow remote attackers to execute arbitrary code via format string specifiers in (1) FTP server responses or (2) data sent by an FTP server. NOTE: some of these details are obtained from third party information.

Affected products

• Filezilla Filezilla: up to and including 2.2.31

Published 2007-04-26. Last modified 2026-06-16.