https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2002-1455.htmlhttps://patchthecve.com/cve/CVE-2002-1455.htmlTue, 16 Jun 2026 21:59:21 +0000MEDIUM 4.3: Multiple cross-site scripting (XSS) vulnerabilities in OmniHTTPd allow remote attackers to insert script or HTML into web pages via (1) test.php, (2) test.shtml, or (3) redir.exe.https://patchthecve.com/cve/CVE-2002-1035.htmlhttps://patchthecve.com/cve/CVE-2002-1035.htmlTue, 16 Jun 2026 21:58:36 +0000MEDIUM 5.0: Omnicron OmniHTTPd 2.09 allows remote attackers to cause a denial of service (crash) via an HTTP request with a long, malformed HTTP 1version number.https://patchthecve.com/cve/CVE-2001-0778.htmlhttps://patchthecve.com/cve/CVE-2001-0778.htmlTue, 16 Jun 2026 21:54:56 +0000MEDIUM 5.0: OmniHTTPd 2.0.8 and earlier allow remote attackers to obtain source code via a GET request with the URL-encoded symbol for a space (%20).https://patchthecve.com/cve/CVE-2001-0777.htmlhttps://patchthecve.com/cve/CVE-2001-0777.htmlTue, 16 Jun 2026 21:54:56 +0000MEDIUM 5.0: Omnicron OmniHTTPd 2.0.8 allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests for PHP scripts.https://patchthecve.com/cve/CVE-2001-0613.htmlhttps://patchthecve.com/cve/CVE-2001-0613.htmlTue, 16 Jun 2026 21:54:38 +0000MEDIUM 5.0: Omnicron Technologies OmniHTTPD Professional 2.08 and earlier allows a remote attacker to create a denial of service via a long POST URL request.https://patchthecve.com/cve/CVE-2001-0114.htmlhttps://patchthecve.com/cve/CVE-2001-0114.htmlTue, 16 Jun 2026 21:53:40 +0000MEDIUM 5.0: statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to overwrite arbitrary files via the cgidir parameter.https://patchthecve.com/cve/CVE-2001-0113.htmlhttps://patchthecve.com/cve/CVE-2001-0113.htmlTue, 16 Jun 2026 21:53:40 +0000HIGH 10.0: statsconfig.pl in OmniHTTPd 2.07 allows remote attackers to execute arbitrary commands via the mostbrowsers parameter, whose value is used as part of a generated Perl script.