CVE-2007-0617
earthlink total access: no CVSS score yet. EPSS 1.3% chance of exploitation in the next 30 days.
The SpamBlocker.dll ActiveX control in Earthlink TotalAccess is marked "safe for scripting," which allows remote attackers to add arbitrary e-mail addresses and domains to the spam blocker whitelist via the (1) AddSenderToWhitelist and (2) AddDomainToWhitelist functions.
- EPSS
- 1.3% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-11-01)
- Published
- Modified
- Record from
- the NVD, synced