Skip to content
OpenAdvisories

Archive

19 January 2007

Vulnerabilities first published on this day (UTC), newest first.

57 results · Feed

  • Unscored —
    CVE-2003-1318 Public exploit

    Twilight Webserver 1.3.3.0 allows remote attackers to cause a denial of service (application crash) via a GET request f…

  • Unscored —
    CVE-2007-0353 Public exploit

    Cross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5 allows remote attackers …

  • Unscored —
    CVE-2007-0355 Public exploit

    Buffer overflow in the Apple Minimal SLP v2 Service Agent (slpd) in Mac OS X 10.4.11 and earlier, including 10.4.8, all…

  • Unscored —
    CVE-2007-0360 Public exploit

    PHP remote file inclusion vulnerability in lang/index.php in Oreon 1.2.3 RC4 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2007-0354 Public exploit

    SQL injection vulnerability in email.php in MGB OpenSource Guestbook 0.5.4.5 and earlier allows remote attackers to exe…

  • Unscored —
    CVE-2007-0356 Public exploit EPSS 18%

    The Common Controls Replacement Project (CCRP) FolderTreeview (FTV) ActiveX control (ccrpftv6.ocx) allows remote attack…

  • Unscored —
    CVE-2007-0359 Public exploit

    PHP remote file inclusion vulnerability in frontpage.php in Uberghey CMS 0.3.1 allows remote attackers to execute arbit…

  • Unscored —

    Multiple SQL injection vulnerabilities in (a) index.php and (b) dl.php in SmE FileMailer 1.21 and earlier allow remote …

  • Unscored —

    Unspecified vulnerability in the FTP server implementation in HP Jetdirect firmware x.20.nn through x.24.nn allows remo…

  • Unscored —

    Microsoft Windows XP and Windows Server 2003 do not properly handle user logoff, which might allow local users to gain …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in admin-search.php in (1) Openads for PostgreSQL (aka phpPgAds) before 2.0.10…

  • Unscored —
    CVE-2007-0357 Public exploit

    Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arb…

  • Unscored —
    CVE-2007-0352 Public exploit EPSS 37%

    Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbit…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the RSS feed component in FreshReader before 1.0.07010600 allows remote att…

  • Unscored —
    CVE-2007-0361 Public exploit

    PHP remote file inclusion vulnerability in mep/frame.php in PHPMyphorum 1.5a allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-6941 Public exploit

    index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to obtain sensitive information via an invalid actio…

  • Unscored —

    Directory traversal vulnerability in upgrade.php in nicecoder.com INDEXU 5.x allows remote attackers to include arbitra…