CVE-2007-0658: The (1) Textimage 4.7.x before 4.7-1.2 and 5.x before 5.x-1.1 module for Drupal and the (2) Captcha 4.7.x b...

Security readout for executives and security teams

This is a legacy Drupal module issue that can let a remote attacker get past CAPTCHA checks. The likely business impact is automated spam, fake submissions, or account abuse on old Drupal forms that depend on these modules. Exposure is most likely on legacy Drupal 4.7 or 5 installations using the Textimage or Captcha contributed modules at the vulnerable versions. Current assets are only relevant if these obsolete modules remain deployed or preserved in old environments. Prioritize if legacy Drupal forms are internet-facing or handle registration, comments, contact forms, or other abuse-prone workflows. For modern Drupal estates without these modules, urgency is low. Mitigation focus: Inventory Drupal sites for Textimage and Captcha module versions.; Upgrade affected modules to 4.7-1.2, 5.x-1.1, or later vendor-supported releases.; Disable or remove unused CAPTCHA-related contributed modules..

Prepared

Jun 29, 2026, 07:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.