CVE-2007-3071: Digital River Esellerate SDK

High severity, CVSS 9.3. EPSS: 5.8% chance of exploitation in the next 30 days.

Buffer overflow in the GetWebStoreURL function in a certain ActiveX control in eSellerateControl365.dll 3.6.5.0 in eSellerate SDK allows user-assisted remote attackers to execute arbitrary code via a long first argument.

Affected products

Published 2007-06-06. Last modified 2026-06-16.