CVE-2007-5000: Apache HTTP Server

Medium severity, CVSS 4.3. EPSS: 46.6% chance of exploitation in the next 30 days.

Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and 2.0.35 through 2.0.61 and the (2) mod_imagemap module in the Apache HTTP Server 2.2.0 through 2.2.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• Apache HTTP Server: from 1.3.0, up to and including 1.3.39; from 2.0.35, up to and including 2.0.61; from 2.2.0, up to and including 2.2.6
• Canonical Ubuntu Linux: version 6.06 only; version 6.10 only; version 7.04 only; version 7.10 only
• Fedoraproject Fedora: version 7 only; version 8 only
• Opensuse Opensuse: version 10.2 only; version 10.3 only
• Oracle HTTP Server: version 10.1.3.5.0 only
• Suse Linux Enterprise Desktop: version 9 only
• Suse Linux Enterprise Server: version 9 only; version 10 only

Published 2007-12-13. Last modified 2026-06-16.