CVE-2007-3146: Zen Help Desk Software Zen Help Desk

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Zen Help Desk 2.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing a password via a direct request for ZenHelpDesk.mdb.

Affected products

• Zen Help Desk Software Zen Help Desk: version 2.1 only

Published 2007-06-11. Last modified 2026-06-16.