Unrated severityNVD Advisory· Published Jan 29, 2007· Updated Jun 16, 2026

CVE-2007-0543

Description

ZixForum 1.14 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwords via a direct request for Zixforum.mdb. NOTE: a followup post suggests that this issue only occurs if the administrator does not properly follow installation directions.

Affected products

Zixforum/Zixforum
cpe:2.3:a:zixforum:zixforum:*:*:*:*:*:*:*:*
Range: <=1.14

Patches

Vulnerability mechanics

References

securityreason.com/securityalert/2189nvd
www.securityfocus.com/archive/1/457950/100/0/threadednvd
www.securityfocus.com/archive/1/458135/100/100/threadednvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000