CVE-2007-5320: Pegasus Imaging Imagxpress

Medium severity, CVSS 4.0. EPSS: 6.5% chance of exploitation in the next 30 days.

Multiple absolute path traversal vulnerabilities in Pegasus Imaging ImagXpress 8.0 allow remote attackers to (1) delete arbitrary files via the CacheFile attribute in the ThumbnailXpres.1 ActiveX control (PegasusImaging.ActiveX.ThumnailXpress1.dll) or (2) overwrite arbitrary files via the CompactFile function in the ImagXpress.8 ActiveX control (PegasusImaging.ActiveX.ImagXpress8.dll).

Affected products

• Pegasus Imaging Imagxpress: version 8.0 only

Published 2007-10-09. Last modified 2026-06-16.