CVE-2007-5768: The Globe7 soft phone client 7.3 sends username and password information in cleartext, which allows remote...

Security readout for executives and security teams

Globe7 soft phone client 7.3 reportedly sends usernames and passwords without encryption over HTTP. Anyone able to observe that traffic could capture credentials. The record is old and sparse, with no CVSS score, no named patch, and no evidence of active exploitation in the provided sources. Exposure is most likely limited to environments still running or permitting Globe7 soft phone client 7.3, especially on shared, wireless, or otherwise untrusted networks. The provided affected metadata is incomplete, so confirm by asset inventory rather than relying on CPE matching. Treat this as a legacy credential-exposure risk. It is not supported by evidence of current exploitation, but any remaining use creates avoidable credential leakage. Priority should be removal or replacement during the next legacy application cleanup cycle, faster if used on untrusted networks. Mitigation focus: Identify and remove Globe7 soft phone client 7.3 where it remains installed.; Check vendor or archived advisory guidance for any supported upgrade or replacement path.; Prefer supported soft phone clients that encrypt authentication traffic..

Prepared

Jun 29, 2026, 01:47 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.