CVE-2007-3500: Xeforum

High severity, CVSS 10.0. EPSS: 3.3% chance of exploitation in the next 30 days.

Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie.

Affected products

• Xeforum Xeforum: any version

Published 2007-06-29. Last modified 2026-06-16.