CVE-2007-1168
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote...
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
Exploit likelihood
What each source reports
NVD Score used
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
- Record
CVE-2007-1168- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
- Record
CVE-2007-1168- Updated
- 2026-11-02
EUVDEUVD-2007-1165 No score
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
- Record
EUVD-2007-1165- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-34jj-j7vv-x8fp No score
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote...
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
- Record
GHSA-34jj-j7vv-x8fp- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1168 is a high vulnerability (CVSS 7.5) in Trend Micro Serverprotect, published February 28, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.52%, the 84th percentile. No source names a fixed version.
References
trendmicro.com/download/product.asp?productid=20
vupen.com/english/advisories/2007/0691
securityfocus.com/bid/22662
securitytracker.com/id?1017685
secunia.com/advisories/24264
labs.idefense.com/intelligence/vulnerabilities/display.php?id=477
nvd.nist.gov/vuln/detail/CVE-2007-1168
github.com/advisories/GHSA-34jj-j7vv-x8fp