Vulnerabilities (CVE)

Filtered by vendor Apple Subscribe
Filtered by product Iphone
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-3755 1 Apple 2 Iphone, Iphone Os 2023-12-10 4.3 MEDIUM N/A
Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make calls to arbitrary telephone numbers via a "tel:" link, which does not prompt the user before dialing the number.
CVE-2007-5858 1 Apple 5 Iphone, Iphone Os, Ipod Touch and 2 more 2023-12-10 4.3 MEDIUM N/A
WebKit in Safari in Apple Mac OS X 10.4.11 and 10.5.1, iPhone 1.0 through 1.1.2, and iPod touch 1.1 through 1.1.2 allows remote attackers to "navigate the subframes of any other page," which can be leveraged to conduct cross-site scripting (XSS) attacks and obtain sensitive information.
CVE-2007-3759 1 Apple 3 Iphone, Iphone Os, Safari 2023-12-10 6.8 MEDIUM N/A
Safari in Apple iPhone 1.1.1, when requested to disable Javascript, does not disable it until Safari is restarted, which might leave Safari open to attacks that the user does not expect.