CVE-2007-5470
Microsoft Expression Media stores the catalog password in cleartext in the catalog IVC file,...
Microsoft Expression Media stores the catalog password in cleartext in the catalog IVC file, which allows local users to obtain sensitive information and gain access to the catalog by reading the IVC file.
Exploit likelihood
What each source reports
NVD Score used
Microsoft Expression Media stores the catalog password in cleartext in the catalog IVC file, which allows local users to obtain sensitive information and gain access to the catalog by reading the IVC file.
- Record
CVE-2007-5470- CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200, CWE-310
- Updated
- 2026-11-02
CVE List No score
Microsoft Expression Media stores the catalog password in cleartext in the catalog IVC file, which allows local users to obtain sensitive information and gain access to the catalog by reading the IVC file.
- Record
CVE-2007-5470- Updated
- 2026-11-02
EUVDEUVD-2007-5445 No score
Microsoft Expression Media stores the catalog password in cleartext in the catalog IVC file, which allows local users to obtain sensitive information and gain access to the catalog by reading the IVC file.
- Record
EUVD-2007-5445- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-28wv-jqvv-4p3g No score
Microsoft Expression Media stores the catalog password in cleartext in the catalog IVC file,...
Microsoft Expression Media stores the catalog password in cleartext in the catalog IVC file, which allows local users to obtain sensitive information and gain access to the catalog by reading the IVC file.
- Record
GHSA-28wv-jqvv-4p3g- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5470 is a low vulnerability (CVSS 2.1) in Microsoft Expression Media, published October 16, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.00%, the 80th percentile. No source names a fixed version.