CVE-2007-2907: SSL-Explorer

Medium severity, CVSS 4.9. EPSS: 1.5% chance of exploitation in the next 30 days.

Unspecified vulnerability in SSL-Explorer before 0.2.13 allows remote authenticated users to enter redirect URLs containing (1) JavaScript or (2) HTTP headers via an unspecified vector, possibly the forwardTo parameter to redirect.do. NOTE: the impact might be cross-site scripting (XSS) or HTTP request smuggling.

Affected products

• SSL-Explorer SSL-Explorer: up to and including 0.2.12

Published 2007-05-30. Last modified 2026-06-16.