CVE-2007-2815 in the critical feed json
The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT AC…
published 2007-05-22 19 y ago modified 2026-06-16 4 mo ago also EUVD-2007-2807
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 73.4%
- EPSS 73.4% chance of exploitation in 30 days, percentile 99.4%
- public exploits
- 1
- Exploit-DB
Summary
The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL configuration, which allows remote attackers to bypass NTLM and basic authentication mechanisms and access private web directories via the CiWebhitsfile parameter to null.htw.
Timeline
- Published
- First public exploit (EDB-4016)
Exploit prediction
73.35% chance of exploitation in the next 30 days, higher than 99.4% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-4016 Microsoft IIS 5.1 - Hit Highlighting Authentication Bypass remote, 2007-05-31
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-264 Permissions, Privileges, and Access Controls
References
-
support.microsoft.com
/kb/328832
vendor-advisory
-
osvdb.org
/41091
vdb-entry
-
securityreason.com
/securityalert/2725
third-party-advisory
-
securityfocus.com
/archive/1/469238/100/0/threaded
mailing-list
-
securityfocus.com
/bid/24105
vdb-entry
Sources
- CVE List CVE-2007-2815
- NVD CVE-2007-2815
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.