CVE-2007-3296: Xunlei Web Thunderbolt

High severity, CVSS 9.3. EPSS: 1.8% chance of exploitation in the next 30 days.

The ThunderServer.webThunder.1 ActiveX control in xunlei Web Thunderbolt 1.7.3.109 allows remote attackers to download arbitrary files and conduct other unauthorized actions by invoking dangerous methods.

Affected products

• Xunlei Web Thunderbolt: version 1.7.3.109 only

Published 2007-06-20. Last modified 2026-06-16.