Archive
7 February 2007
Vulnerabilities first published on this day (UTC), newest first.
41 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in FlashChat 4.7.8 allows remote attackers to inject arbitrary web script or H…
-
Unscored —CVE-2007-0827 Public exploit
The Alibaba Alipay PTA Module ActiveX control (PTA.DLL) allows remote attackers to execute arbitrary code via a JavaScr…
-
Unscored —CVE-2007-0825 Public exploit
FlashFXP 3.4.0 build 1145 allows remote servers to cause a denial of service (CPU consumption) via a response to a PWD …
-
Unscored —
avast! Server Edition before 4.7.726 does not demand a password in a certain intended context, even when a password has…
-
Unscored —
VMware Workstation 5.5.3 34685, when the "Enable copy and paste to and from this virtual machine" option is enabled, pr…
-
Unscored —CVE-2007-0826 Public exploit
SQL injection vulnerability in forum.asp in Kisisel Site 2007 allows remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2007-0828 Public exploit
PHP remote file inclusion vulnerability in affichearticles.php3 in MySQLNewsEngine allows remote attackers to execute a…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Atsphp 5.0.1 allow remote attackers to execute arbitrary PHP code…
-
Unscored —CVE-2007-0824 Public exploit
PHP remote file inclusion vulnerability in inhalt.php in LightRO CMS 1.0 allows remote attackers to execute arbitrary P…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Admin Control Panel (AdminCP) in Jelsoft vBulletin 3.6.4 all…
-
Unscored —
VMware Workstation 5.5.3 34685 does not immediately change the availability of a shared clipboard when the "Enable copy…
-
Unscored —
Headstart Solutions DeskPRO does not require authentication for certain files and directories associated with administr…
-
Unscored —
SQL injection in torrents.php in BtitTracker 1.3.2 and earlier allows remote attackers to execute arbitrary SQL command…
-
Unscored —
Headstart Solutions DeskPRO stores sensitive information under the web root with insufficient access control, which all…
-
Unscored —CVE-2005-4827 EPSS 12%
Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy a…
-
Unscored —CVE-2007-0820 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to execute arbi…
-
Unscored —
umount, when running with the Linux 2.6.15 kernel on Slackware Linux 10.2, allows local users to trigger a NULL derefer…
-
Unscored —CVE-2007-0821 Public exploit
Multiple directory traversal vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers to read arbitrary fil…
-
Unscored —
xterm on Slackware Linux 10.2 stores information that had been displayed for a different user account using the same xt…
-
Unscored —
Multiple buffer overflows in SmartFTP 1.0.973, and other versions before 1.0.976, allow remote attackers to execute arb…
-
Medium —
Jetty Uses Predictable Session Identifiers
Jetty before 4.2.27, 5.1 before 5.1.12, 6.0 before 6.0.2, and 6.1 before 6.1.0pre3 generates predictable session identifiers using java.util.random, which makes it easier for remote attackers to guess a session identifier through brute force attacks, bypass a…
-
Unscored —
Opera 9.10 Final allows remote attackers to bypass the Fraud Protection mechanism by adding certain characters to the e…
-
Unscored —
Mozilla Firefox 2.0, possibly only when running on Windows, allows remote attackers to bypass the Phishing Protection m…
-
Unscored —CVE-2007-0810 Public exploit
PHP remote file inclusion vulnerability in MVCnPHP/BaseView.php in GeekLog 2 and earlier allows remote attackers to exe…
-
Unscored —
The RPC Server service (catirpc.exe) in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 SP2 and earli…
-
Unscored —
Cross-site scripting (XSS) vulnerability in images_archive.asp in Uapplication Uphotogallery 1.1 allows remote authenti…
-
Unscored —
Cross-zone vulnerability in Mozilla Firefox 1.5.0.9 considers blocked popups to have an internal zone origin, which all…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Adrenalin's ASP Chat allow remote attackers to inject arbitrary …
-
Unscored —CVE-2007-0804 Public exploit
Directory traversal vulnerability in admin/subpages.php in GGCMS 1.1.0 RC1 and earlier allows remote attackers to injec…
-
Unscored —
The nsExternalAppHandler::SetUpTempFile function in Mozilla Firefox 1.5.0.9 creates temporary files with predictable fi…
-
Unscored —CVE-2007-0812 Public exploit
SQL injection vulnerability in pms.php in Woltlab Burning Board (wBB) Lite 1.0.2pl3e and earlier allows remote authenti…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Home production MySearchEngine allows remote attackers to inject arbitrary …
-
Unscored —
Mozilla Firefox 2.0.0.1 allows remote attackers to bypass the Phishing Protection mechanism by adding certain character…
-
Unscored —
Les News 2.2 allows remote attackers to bypass authentication and gain administrative access via a direct request for a…
-
Unscored —
Multiple buffer overflows in STLport before 5.0.3 allow remote attackers to execute arbitrary code via unspecified vect…
-
Unscored —
PHP remote file inclusion vulnerability in Mina Ajans Script allows remote attackers to execute arbitrary PHP code via …
-
Unscored —CVE-2007-0805 Public exploit
The ps (/usr/ucb/ps) command on HP Tru64 UNIX 5.1 1885 allows local users to obtain sensitive information, including en…
-
Unscored —CVE-2007-0809 Public exploit
PHP remote file inclusion vulnerability in includes/class_template.php in Categories hierarchy (aka CH or mod-CH) 2.1.2…
-
Unscored —
Cross-site scripting (XSS) vulnerability in info.php in flashChat 4.7.8 allows remote attackers to inject arbitrary web…
-
Unscored —
Microsoft Internet Explorer 6.0 SP1 on Windows 2000, and 6.0 SP2 on Windows XP, allows remote attackers to cause a deni…