CVE-2007-3871: Deutsche Post Stampit Web

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

Stampit Web uses guessable id values for online stamp purchases, which allows remote attackers to cause a denial of service (stamp invalidation) via a SOAP request with an id value for a stamp that has not yet been printed.

Affected products

Published 2007-09-12. Last modified 2026-06-16.