CVE-2007-0610: Cross-site scripting (XSS) vulnerability in the mailform feature in CMSimple 2.7 fix1 allows remote attacke...

Security readout for executives and security teams

CMSimple 2.7 fix1 has a reported mailform XSS issue where attacker-controlled sender data may render as script or HTML in a user's browser. Business impact depends on whether this old CMS version is still public-facing. The CVE explicitly says the provenance is unknown and details come only from third-party information. Exposure is most likely limited to organizations still running CMSimple 2.7 fix1 with the mailform feature reachable by users or the internet. Evidence is insufficient to infer other affected versions or products. Handle as a targeted legacy-web risk. It does not justify emergency response from the supplied evidence, but internet-facing CMSimple 2.7 fix1 sites should be found and remediated promptly. Mitigation focus: Inventory public sites for CMSimple 2.7 fix1 usage.; Check CMSimple or trusted vendor guidance for fixed versions or mitigations.; Disable or restrict the mailform if remediation cannot be confirmed..

Prepared

Jun 29, 2026, 07:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.