CVE-2007-5982 — Multiple cross-site scripting (XSS) vulnerabilities in X7 Chat 2.0.4, 2.0.5, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the (1) room parameter to sources/frame.php, the (2) theme_c parameter to help/index.php, or the (3) INSTALL_X7CHATVERSION parameter to upgradev1.php

Back Back to CVE browser

MEDIUM

Multiple cross-site scripting (XSS) vulnerabilities in X7 Chat 2.0.4, 2.0.5, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the (1) room parameter to sources/frame.php, the (2) theme_c parameter to help/index.php, or the (3) INSTALL_X7CHATVERSION parameter to upgradev1.php

Published Nov 15, 2007

4.3

MEDIUM

CVSS 2.0

EPSS 3.05%

Description

Multiple cross-site scripting (XSS) vulnerabilities in X7 Chat 2.0.4, 2.0.5, and possibly other versions allow remote attackers to inject arbitrary web script or HTML via the (1) room parameter to sources/frame.php, the (2) theme_c parameter to help/index.php, or the (3) INSTALL_X7CHATVERSION parameter to upgradev1.php.

Affected products

Remediation

No remediation recorded yet.

Metrics

3.05% 0.03053

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 2, 2026.

EPSS probability 0.03053

Score over time

2022–2026

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (13 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 2, 2026	3.05% (0.03053)	87.13th	v5 (v2026.06.15)
Jun 15, 2026	3.05% (0.03053)	85.82th	v5 (v2026.06.15)
Apr 4, 2026	5.68% (0.05677)	90.37th	v4 (v2025.03.14)
Aug 18, 2025	1.83% (0.01834)	82.16th	v4 (v2025.03.14)
Mar 17, 2025	4.39% (0.04389)	88.23th	v4 (v2025.03.14)
Dec 12, 2024	0.66% (0.00659)	80.24th	v3 (v2023.03.01)
Jul 4, 2024	0.33% (0.00332)	71.30th	v3 (v2023.03.01)
Mar 11, 2024	0.34% (0.00339)	70.77th	v3 (v2023.03.01)
Feb 8, 2024	0.30% (0.00297)	68.53th	v3 (v2023.03.01)
Mar 7, 2023	0.30% (0.00297)	64.53th	v3 (v2023.03.01)
Mar 6, 2023	1.92% (0.01917)	78.00th	v2 (v2022.01.01)
Apr 1, 2022	1.92% (0.01917)	76.01th	v2 (v2022.01.01)
Feb 4, 2022	1.92% (0.01917)	55.17th	v2 (v2022.01.01)

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (5)

http://osvdb.org/38745
vdb-entryx_refsource_OSVDB
http://osvdb.org/38746
vdb-entryx_refsource_OSVDB
http://packetstorm.linuxsecurity.com/0711-exploits/x7-xss.txt
x_refsource_MISC
http://secunia.com/advisories/27677
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/26417
vdb-entryx_refsource_BIDExploit

Link	Providers	Tags
http://osvdb.org/38745		vdb-entryx_refsource_OSVDB
http://osvdb.org/38746		vdb-entryx_refsource_OSVDB
http://packetstorm.linuxsecurity.com/0711-exploits/x7-xss.txt		x_refsource_MISC
http://secunia.com/advisories/27677		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/26417		vdb-entryx_refsource_BIDExploit

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Nov 15, 2007

Updated Aug 7, 2024

Reserved Nov 14, 2007

Link CVE-2007-5982

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2007-5982

Red Hat

Severity n/a

Public date n/a

Links CVE-2007-5982