VULNERABILITY INTELLIGENCE
CVE-2007-3871
CVSS score5 MEDIUM
EPSS probability1.65%
CISA KEVNot currently listed
Published2007-09-12
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Description
Stampit Web uses guessable id values for online stamp purchases, which allows remote attackers to cause a denial of service (stamp invalidation) via a SOAP request with an id value for a stamp that has not yet been printed.