CVE-2007-3601: Vtiger CRM

Low severity, CVSS 2.1. EPSS: 0.8% chance of exploitation in the next 30 days.

vtiger CRM before 5.0.3, when a migrated build is used, allows remote authenticated users to read certain other users' calendar activities via a (1) home page or (2) event list view.

Affected products

• Vtiger Vtiger CRM: up to and including 5.0.2

Published 2007-07-06. Last modified 2026-06-16.