CVE-2007-3755: Apple iPhone

Medium severity, CVSS 4.3. EPSS: 2% chance of exploitation in the next 30 days.

Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link, which does not prompt the user before dialing the number.

Affected products

• Apple iPhone: version 1.0 only
• Apple iPhone OS: version 1.0.1 only; version 1.0.2 only

Published 2007-09-27. Last modified 2026-06-16.