Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2007-4225

18
FAUCET Score

CVE-2007-4225 describes a visual truncation vulnerability in KDE Konqueror 3.5.7. This flaw allows remote attackers to spoof the URL address bar by injecting a large amount of whitespace into the user/password portion of an HTTP URI. With a CVSS score of 6.8, this vulnerability has a medium attack complexity and could lead to partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
3.5.7CPE matchmatch criteria
cpe:2.3:a:kde:konqueror:3.5.7:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

6.8MEDIUM

AV:N/AC:M/Au:N/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Exploitability Score
8.6
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
1.96%
Probability of exploitation in next 30 days
EPSS Percentile
78.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-28
Model: v2026.06.15
This CVE's current EPSS score of 0.0196 is in the 62nd percentile among its peer group of 19,958 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Advisories (1)

redhatCVE-2007-4225

CVE-2007-4225

References

lists.grok.org.uk / pipermail/full-disclosure/2007-August/065101.html
secunia.com / advisories/26351
secunia.com / advisories/26612
secunia.com / advisories/26690
secunia.com / advisories/26720
secunia.com / advisories/27089
secunia.com / advisories/27096
securityreason.com / securityalert/2982
securitytracker.com / id
exchange.xforce.ibmcloud.com / vulnerabilities/35829
issues.rpath.com / browse/RPL-1615
redhat.com / archives/fedora-package-announce/2007-October/msg00022.html
redhat.com / archives/fedora-package-announce/2007-October/msg00084.html
kde.org / info/security/advisory-20070816-1.txt
mandriva.com / security/advisories
ubuntu.com / usn/usn-502-1
vupen.com / english/advisories/2007/2807