← Vulnerability feed

Vulnerability record · CVE-2007-0330 · published 18 January 2007

CVE-2007-0330: Ipswitch ws ftp pro vulnerability

Ipswitch · Ws Ftp Pro

Buffer overflow in wsbho2k0.dll, as used by wsftpurl.exe, in Ipswitch WS_FTP 2007 Professional allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long ftp:// URL in an HTML document, and possibly other vectors.

7.5 CVSS 2.0 High EPSS 3.4% · top 11.5%
7.5CVSS 2.0 base score
3.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References
16 Jun 2026Last modified by NVD

Description

Buffer overflow in wsbho2k0.dll, as used by wsftpurl.exe, in Ipswitch WS_FTP 2007 Professional allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long ftp:// URL in an HTML document, and possibly other vectors.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/33476
http://securityreason.com/securityalert/2160
http://www.securityfocus.com/archive/1/456755/100/0/threaded
http://www.securityfocus.com/archive/1/456901/100/0/threaded
http://www.securityfocus.com/archive/1/457097/100/0/threaded
http://www.securityfocus.com/bid/22062
http://osvdb.org/33476
http://securityreason.com/securityalert/2160
http://www.securityfocus.com/archive/1/456755/100/0/threaded
http://www.securityfocus.com/archive/1/456901/100/0/threaded
http://www.securityfocus.com/archive/1/457097/100/0/threaded
http://www.securityfocus.com/bid/22062

Track CVE-2007-0330 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2008-3734Ipswitch ws ftp home vulnerabilityFormat string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0 allows remote FTP servers to cause a denial of serv…EPSS 14%7.5CVE-2004-1884Ipswitch ws ftp pro vulnerabilityIpswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers to gain access.EPSS 5.8%7.5CVE-2002-1851Ipswitch ws ftp pro vulnerabilityBuffer overflow in WS_FTP Pro 7.5 allows remote attackers to execute code on a client system via unknown attack vectors.EPSS 3.4%7.5CVE-1999-1078Ipswitch ws ftp pro vulnerabilityWS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain…EPSS 1.8%6.8CVE-2007-0665Ipswitch ws ftp pro vulnerabilityFormat string vulnerability in the SCP module in Ipswitch WS_FTP 2007 Professional might allow remote attackers to execute arbitrary commands via for…EPSS 3.3%

Source: NIST National Vulnerability Database (record CVE-2007-0330), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.