CVE-2007-3008: Mbedthis Software Mbedthis Appweb HTTP Server

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote information leaks and cross-site tracing (XST) attacks, a related issue to CVE-2004-2320 and CVE-2005-3398.

Affected products

• Mbedthis Software Mbedthis Appweb HTTP Server: version 2.0.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.0.5 only; …

Published 2007-06-04. Last modified 2026-06-16.