CVE-2007-3219: Invision Power Services Invision Power Board

High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days.

Unspecified vulnerability in sources/action_public/xmlout.php in Invision Power Board (IPB or IP.Board) 2.2.0 through 2.2.2 allows remote attackers to modify another user's profile data, such as an AIM screen name or Yahoo! identity.

Affected products

• Invision Power Services Invision Power Board: version 2.2 only; version 2.2.1 only; version 2.2.2 only

Published 2007-06-14. Last modified 2026-06-16.