CVE-2008-7037: Itn News Gadget

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

The Sidebar gadget in ITN News Gadget (aka ITN Hub Gadget) 1.06 for Windows Vista, and possibly other versions before 1.23, allows remote web servers or man-in-the-middle attackers to execute arbitrary commands via script in a short_title response.

Affected products

• Itn Itn News Gadget: version 1.06 only

Published 2009-08-24. Last modified 2026-06-16.