CVE-2007-5404
Layton HelpBox 3.7.1 generates different responses depending on whether or not a username is...
Layton HelpBox 3.7.1 generates different responses depending on whether or not a username is valid in a failed login attempt, which allows remote attackers to enumerate valid usernames.
Exploit likelihood
What each source reports
NVD Score used
Layton HelpBox 3.7.1 generates different responses depending on whether or not a username is valid in a failed login attempt, which allows remote attackers to enumerate valid usernames.
- Record
CVE-2007-5404- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:P/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Layton HelpBox 3.7.1 generates different responses depending on whether or not a username is valid in a failed login attempt, which allows remote attackers to enumerate valid usernames.
- Record
CVE-2007-5404- Updated
- 2026-11-02
EUVDEUVD-2007-5380 No score
Layton HelpBox 3.7.1 generates different responses depending on whether or not a username is valid in a failed login attempt, which allows remote attackers to enumerate valid usernames.
- Record
EUVD-2007-5380- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jfp6-96vh-f8h7 No score
Layton HelpBox 3.7.1 generates different responses depending on whether or not a username is...
Layton HelpBox 3.7.1 generates different responses depending on whether or not a username is valid in a failed login attempt, which allows remote attackers to enumerate valid usernames.
- Record
GHSA-jfp6-96vh-f8h7- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5404 is a medium vulnerability (CVSS 5.0) in Layton Technology Helpbox, published January 9, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.19%, the 67th percentile. No source names a fixed version.