Skip to content
OpenAdvisories

Archive

15 February 2007

Vulnerabilities first published on this day (UTC), newest first.

← January 2007 2007 / February /15 March 2007 →
  1. 115
  2. 29
  3. 327
  4. 413
  5. 5 
  6. 638
  7. 741
  8. 834
  9. 920
  10. 10 
  11. 111
  12. 1244
  13. 1329
  14. 1422
  15. 1525
  16. 1634
  17. 17 
  18. 18 
  19. 192
  20. 207
  21. 2150
  22. 2224
  23. 2328
  24. 2423
  25. 25 
  26. 2635
  27. 2769
  28. 2840
All Critical High Medium Low Exploited only Public exploit

25 results · Feed

  • Unscored —
    CVE-2007-0324

    Multiple buffer overflows in the LizardTech DjVu Browser Plug-in before 6.1.1 allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2007-0651

    Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to in…

  • Unscored —
    CVE-2007-0652

    Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows remote attackers to modif…

  • Unscored —
    CVE-2007-0958

    Linux kernel 2.6.x before 2.6.20 allows local users to read unreadable binaries by using the interpreter (PT_INTERP) fu…

  • Unscored —
    CVE-2006-7011

    PHP remote file inclusion vulnerability in adminips.php in Develooping Flash Chat allows remote attackers to execute ar…

  • Unscored —
    CVE-2006-7013

    QueryString.php in Simple Machines Forum (SMF) 1.0.7 and earlier, and 1.1rc2 and earlier, allows remote attackers to mo…

  • Unscored —
    CVE-2006-7023

    Multiple cross-site scripting (XSS) vulnerabilities in fx-APP 0.0.8.1 allow remote attackers to inject arbitrary HTML o…

  • Unscored —
    CVE-2006-7012 Public exploit

    scart.cgi in SCart 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the page param…

  • Unscored —
    CVE-2006-7019

    phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary code via crafted argume…

  • Unscored —
    CVE-2006-7020

    CRLF injection vulnerability in (1) include/inc_act/act_formmailer.php and possibly (2) sample_ext_php/mail_file_form.p…

  • Unscored —
    CVE-2006-7017 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Indexu 5.0.1 allow remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2006-7022

    The Tools module in fx-APP 0.0.8.1 allows remote attackers to misrepresent the contents of a web page via an arbitrary …

  • Unscored —
    CVE-2006-7014

    admin.php in BloggIT 1.01 and earlier does not properly establish a user session, which allows remote attackers to gain…

  • Unscored —
    CVE-2006-7015

    PHP remote file inclusion vulnerability in admin.jobline.php in Jobline 1.1.1 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2006-7021 Public exploit

    PHP remote file inclusion vulnerability in manager/tools/link/dbinstall.php in Plume CMS 1.1.3 allows remote attackers …

  • Unscored —
    CVE-2006-7016

    phpjobboard allows remote attackers to bypass authentication and gain administrator privileges via a direct request to …

  • Unscored —
    CVE-2006-7024 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Harpia CMS 1.0.5 and earlier allow remote attackers to execute ar…

  • Unscored —
    CVE-2006-7018

    phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary code via a crafted argu…

  • Unscored —
    CVE-2007-0953

    Cross-site scripting (XSS) vulnerability in search.pl in @Mail 4.61 and earlier allows remote attackers to inject arbit…

  • Unscored —
    CVE-2007-0955 Public exploit

    The NTLM_UnPack_Type3 function in MENTLM.dll in MailEnable Professional 2.35 and earlier allows remote attackers to cau…

  • Unscored —
    CVE-2007-0952

    Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Virtual Calendar allow remote attackers to inject …

  • Unscored —
    CVE-2007-0950 Public exploit

    Cross-site scripting (XSS) vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to inj…

  • Unscored —
    CVE-2007-0949 Public exploit EPSS 16%

    Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers …

  • Unscored —
    CVE-2007-0954

    MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and at…

  • Unscored —
    CVE-2007-0951 Public exploit

    SQL injection vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to execute arbitrar…