← Vulnerability feed

Vulnerability record · CVE-2007-0665 · published 2 February 2007

CVE-2007-0665: Ipswitch ws ftp pro vulnerability

Ipswitch · Ws Ftp Pro

Format string vulnerability in the SCP module in Ipswitch WS_FTP 2007 Professional might allow remote attackers to execute arbitrary commands via format string specifiers in the filename, related to the SHELL WS_FTP script command.

6.8 CVSS 2.0 Medium EPSS 3.3% · top 12.0%
6.8CVSS 2.0 base score
3.3%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
8References
16 Jun 2026Last modified by NVD

Description

Format string vulnerability in the SCP module in Ipswitch WS_FTP 2007 Professional might allow remote attackers to execute arbitrary commands via format string specifiers in the filename, related to the SHELL WS_FTP script command.

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://osvdb.org/33602
http://www.securityfocus.com/archive/1/458293/100/0/threaded
http://www.securityfocus.com/bid/22275 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/31865
http://osvdb.org/33602
http://www.securityfocus.com/archive/1/458293/100/0/threaded
http://www.securityfocus.com/bid/22275 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/31865

Track CVE-2007-0665 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.3CVE-2008-3734Ipswitch ws ftp home vulnerabilityFormat string vulnerability in Ipswitch WS_FTP Home 2007.0.0.2 and WS_FTP Professional 2007.1.0.0 allows remote FTP servers to cause a denial of serv…EPSS 14%7.5CVE-2007-0330Ipswitch ws ftp pro vulnerabilityBuffer overflow in wsbho2k0.dll, as used by wsftpurl.exe, in Ipswitch WS_FTP 2007 Professional allows remote attackers to cause a denial of service (…EPSS 3.4%7.5CVE-2004-1884Ipswitch ws ftp pro vulnerabilityIpswitch WS_FTP Server 4.0.2 has a backdoor XXSESS_MGRYY username with a default password, which allows remote attackers to gain access.EPSS 5.8%7.5CVE-2002-1851Ipswitch ws ftp pro vulnerabilityBuffer overflow in WS_FTP Pro 7.5 allows remote attackers to execute code on a client system via unknown attack vectors.EPSS 3.4%7.5CVE-1999-1078Ipswitch ws ftp pro vulnerabilityWS_FTP Pro 6.0 uses weak encryption for passwords in its initialization files, which allows remote attackers to easily decrypt the passwords and gain…EPSS 1.8%

Source: NIST National Vulnerability Database (record CVE-2007-0665), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.