CVE-2007-3168

HighCVSS 7.8/10Last modified Jun 16, 2026

Description

A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions before 5.0, allows remote attackers to delete arbitrary files via the DeleteLocalFile method.

Metrics

CVSS 2.0 7.8/10AV:N/AC:M/Au:N/C:N/I:P/A:C

Affected software

No affected versions have been published.

Timeline

Published
Jun 11, 2007
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2007

CVE-2007-31699.3Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions beforCVE-2007-31704.3Multiple cross-site scripting (XSS) vulnerabilities in Uebimiau Webmail allow remote attackers to inject arbitrary web script or HTML via (1CVE-2007-31715.0Uebimiau Webmail allows remote attackers to obtain sensitive information via a request to demo/pop3/error.php with an invalid value of the (CVE-2007-31725.0Directory traversal vulnerability in demo/pop3/error.php in Uebimiau Webmail allows remote attackers to determine the existence of arbitraryCVE-2007-31735.0Almnzm allows remote attackers to obtain sensitive information via an activateorder request to index.php with an invalid orderid parameter, CVE-2007-31744.3Cross-site scripting (XSS) vulnerability in auth.w2b in W2B Online Banking allows remote attackers to inject arbitrary web script or HTML viCVE-2007-31757.5Multiple SQL injection vulnerabilities in W2B Online Banking allow remote attackers to execute arbitrary SQL commands via (1) the draft paraCVE-2007-31764.0Unspecified vulnerability in Ingate Firewall and SIParator before 4.5.2 allows remote authenticated users without full privileges to downloaCVE-2007-31775.0Ingate Firewall and SIParator before 4.5.2 allow remote attackers to bypass SIP authentication via a certain maddr parameter.CVE-2007-31787.5Multiple SQL injection vulnerabilities in Zindizayn Okul Web Sistemi 1.0 allow remote attackers to execute arbitrary SQL commands via the (1CVE-2007-31797.5Multiple SQL injection vulnerabilities in archives.php in Particle Blogger 1.2.1 and earlier allow remote attackers to execute arbitrary SQLCVE-2007-31809.4Buffer overflow in Help and Support Center before 4.4 C on HP Windows systems allows remote attackers to read or write arbitrary files via u
CVE-2007-3168: High severity, CVSS 7.8 | Vulnix