Skip to content
OpenAdvisories

Archive

3 February 2007

Vulnerabilities first published on this day (UTC), newest first.

27 results · Feed

  • Unscored —

    The writeFile function in core/smb4kfileio.cpp in Smb4K before 0.8.0 does not preserve /etc/sudoers permissions across …

  • Unscored —

    Multiple stack-based buffer overflows in utilities/smb4k_*.cpp in Smb4K before 0.8.0 allow local users, when present on…

  • Unscored —

    Multiple race conditions in Smb4K before 0.8.0 allow local users to (1) modify arbitrary files via unspecified manipula…

  • Unscored —

    Smb4K before 0.8.0 allow local users, when present on the Smb4K sudoers list, to kill arbitrary processes, related to a…

  • Unscored —

    Multiple SQL injection vulnerabilities in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC3 allow remote attackers t…

  • Unscored —

    Multiple SQL injection vulnerabilities in ACGVannu 1.3 and earlier allow remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2007-0697 Public exploit

    index2.php in ACGVannu 1.3 and earlier allows remote attackers to change the password or profile of a user via a modifi…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in error messages in Free LAN In(tra|ter)net Portal (FLIP) before 1.0-RC3 allo…

  • Unscored —
    CVE-2007-0682 Public exploit

    PHP remote file inclusion vulnerability in theme/include_mode/template.php in JV2 Folder Gallery 3.0.2 and earlier allo…

  • Unscored —
    CVE-2007-0675 EPSS 18%

    A certain ActiveX control in sapi.dll (aka the Speech API) in Speech Components in Microsoft Windows Vista, when the Sp…

  • Unscored —
    CVE-2007-0676 Public exploit

    SQL injection vulnerability in faq.php in ExoPHPDesk 1.2.1 and earlier allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2007-0687 Public exploit

    SQL injection vulnerability in i-search.php in Michelle's L2J Dropcalc 4 and earlier allows remote authenticated users …

  • Unscored —

    LGSERVER.EXE in BrightStor Mobile Backup 4.0 allows remote attackers to cause a denial of service (disk consumption and…

  • Unscored —
    CVE-2007-0688 Public exploit

    SQL injection vulnerability in oku.asp in Hunkaray Duyuru Scripti allows remote attackers to execute arbitrary SQL comm…

  • Unscored —
    CVE-2007-0681 Public exploit

    profile.php in ExtCalendar 2 and earlier allows remote attackers to change the passwords of arbitrary users without pro…

  • Unscored —

    Internet Explorer on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows attacker…

  • Unscored —
    CVE-2007-0683 Public exploit

    PHP remote file inclusion vulnerability in includes/functions.php in Omegaboard 1.0beta4 and earlier allows remote atta…

  • Unscored —
    CVE-2007-0674 EPSS 17%

    Pictures and Videos on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows user-a…

  • Unscored —
    CVE-2007-0678 Public exploit

    SQL injection vulnerability in windows.asp in Fullaspsite Asp Hosting Sitesi allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2007-0677 Public exploit

    PHP remote file inclusion vulnerability in fw/class.Quick_Config_Browser.php in Cadre PHP Framework 20020724 allows rem…

  • Unscored —
    CVE-2007-0686 Public exploit

    The Intel 2200BG 802.11 Wireless Mini-PCI driver 9.0.3.9 (w29n51.sys) allows remote attackers to cause a denial of serv…

  • Unscored —
    CVE-2007-0684 Public exploit

    PHP remote file inclusion vulnerability in portal.php in Cerulean Portal System 0.7b allows remote attackers to execute…

  • High 8.8
    CVE-2007-0671 Exploited EPSS 44%

    Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allo…

    KEV Aug 12, 2025
  • Unscored —
    CVE-2007-0680 Public exploit

    PHP remote file inclusion vulnerability in includes/functions.php in Phpbb Tweaked 3 and earlier allows remote attacker…

  • Unscored —
    CVE-2007-0679 Public exploit

    PHP remote file inclusion vulnerability in lang/leslangues.php in Nicolas Grandjean PHPMyRing 4.1.3b and earlier allows…

  • Unscored —

    LGSERVER.EXE in BrightStor ARCserve Backup for Laptops & Desktops r11.1 allows remote attackers to cause a denial of se…

  • Unscored —

    Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands…