HP Photo Digital Imaging Activex Control vulnerabilities

2 CVEs affecting HP Photo Digital Imaging Activex Control, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2007-3649, published 2007-07-10.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2007-3487, published 2007-06-29. Medium severity, CVSS 6.4. EPSS: 8.8% chance of exploitation in the next 30 days. Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard (HP) Photo Digital Imaging allows remote attackers to create or overwrite arbitrary files via the…
• CVE-2007-3649, published 2007-07-10. Medium severity, CVSS 6.8. EPSS: 4.6% chance of exploitation in the next 30 days. Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard (HP) Digital Imaging allows remote attackers to create or overwrite arbitrary files via…