CVE-2007-3871

no score yetEPSS 1.7%

Stampit Web uses guessable id values for online stamp purchases, which allows remote attackers to cause a denial of service (stamp invalidation) via a SOAP request with an id value for a stamp that has not yet been printed.

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
Published: 2007-09-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

deutsche_post:stampit_web

References

http://seclists.org/fulldisclosure/2007/Aug/0441.html
http://securityreason.com/securityalert/3129
https://exchange.xforce.ibmcloud.com/vulnerabilities/36365
https://www.cynops.de/advisories/CVE-2007-3871-signed.txt
https://www.cynops.de/advisories/CVE-2007-3871.txt

Check your stack JSON