TI-2007-00665 CVE-2007-0681 · GHSA-fqgj-553f-93gcprofile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords…Priority MEDIUM 50profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without providing the original password, and possibly perform other unauthorized actions, via modified values to…CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.054 · Published 2007-02-03 · No fix listed CWE-522