CVE-2007-5000: Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through...

Security readout for executives and security teams

This is an older cross-site scripting issue in Apache HTTP Server image-map modules. If an exposed site still runs the listed Apache versions with these modules, an attacker may cause a visitor’s browser to run attacker-controlled script or HTML. The bundle provides no CVSS score and no KEV evidence of active exploitation. Likely exposure is legacy public web servers using Apache HTTP Server with mod_imap or mod_imagemap enabled. Modern, patched Apache deployments are less likely exposed, but old appliances, embedded stacks, and unsupported distribution packages should be checked. Treat this as a legacy exposure cleanup item unless affected internet-facing Apache servers are confirmed. Prioritize asset discovery and patch status over emergency response because the bundle provides no active exploitation evidence. Mitigation focus: Inventory Apache HTTP Server versions against the affected ranges.; Check whether mod_imap or mod_imagemap is enabled.; Review vendor advisories for fixed httpd packages or supported guidance..

Prepared

Jun 28, 2026, 19:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.