CVE-2007-5404: Layton Technology Helpbox

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

Layton HelpBox 3.7.1 generates different responses depending on whether or not a username is valid in a failed login attempt, which allows remote attackers to enumerate valid usernames.

Affected products

Published 2008-01-09. Last modified 2026-06-16.