CVE-2007-3407: Sergey Lyubka Simple Httpd

Medium severity, CVSS 5.0. EPSS: 8.4% chance of exploitation in the next 30 days.

Sergey Lyubka Simple HTTPD (shttpd) 1.38 allows remote attackers to obtain sensitive information (script source code) via a URL with a trailing encoded space (%20).

Affected products

• Sergey Lyubka Simple Httpd: version 1.38 only

Published 2007-06-26. Last modified 2026-06-16.