Archive
21 February 2007
Vulnerabilities first published on this day (UTC), newest first.
50 results · Feed
-
Unscored —CVE-2007-1050 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in AbleDesign MyCalendar allow remote attackers to inj…
-
Unscored —CVE-2007-1057 Public exploit
The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.6.x through 1.9.2, when $wgUs…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in PBLang (PBL) 4.60 and earlier allows remote attackers to execut…
-
Unscored —
Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.17.183 and earlier uses a weak cryptographic hashing functi…
-
Unscored —CVE-2007-1058 Public exploit
SQL injection vulnerability in user_pages/page.asp in Online Web Building 2.0 allows remote attackers to execute arbitr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.9.x before 1.9.0rc2, and 1.8.…
-
Unscored —
VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in phpXmms 1.0 allow remote attackers to execute arbitrary PHP code …
-
Unscored —
Unspecified vulnerability in Distributed Checksum Clearinghouse (DCC) before 1.3.51 allows remote attackers to delete o…
-
Unscored —
Dem_trac allows remote attackers to read log file contents via a direct request for /anc_sit.txt.
-
Unscored —
Directory traversal vulnerability in news.php in Xpression News (X-News) 1.0.1, when magic_quotes_gpc is disabled, allo…
-
Unscored —CVE-2007-1044 Public exploit
Pearson Education PowerSchool 4.3.6 allows remote attackers to list the contents of the admin folder via a URI composed…
-
Unscored —
mAlbum 0.3 has default accounts (1) "login"/"pass" for its administrative account and (2) "dqsfg"/"sdfg", which allows …
-
Unscored —CVE-2007-1043 Public exploit
Ezboo webstats, possibly 3.0.3, allows remote attackers to bypass authentication and gain access via a direct request t…
-
Unscored —
Unspecified vulnerability in Peanut Knowledge Base (PeanutKB) 0.0.3 and earlier has unknown impact and attack vectors.
-
Unscored —
Shemes.com Grabit 1.5.3, and possibly earlier, allows remote attackers to cause a denial of service (application crash)…
-
Unscored —CVE-2007-1040 Public exploit
Directory traversal vulnerability in archives.php in Xpression News (X-News) 1.0.1 allows remote attackers to include a…
-
Unscored —CVE-2007-1041 Public exploit
Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute a…
-
Unscored —CVE-2007-1037 Public exploit
Stack-based buffer overflow in News File Grabber 4.1.0.1 and earlier allows remote attackers to execute arbitrary code …
-
Unscored —
PHP remote file inclusion vulnerability in admin_rebuild_search.php in phpbb_wordsearch allows remote attackers to exec…
-
Unscored —CVE-2007-1049 Public exploit
Cross-site scripting (XSS) vulnerability in the wp_explain_nonce function in the nonce AYS functionality (wp-includes/f…
-
Unscored —CVE-2007-1017 Public exploit
PHP remote file inclusion vulnerability in show_news_inc.php in VirtualSystem VS-News-System 1.2.1 and earlier allows r…
-
Unscored —CVE-2007-1019 Public exploit
SQL injection vulnerability in news.php in webSPELL 4.01.02, when register_globals is enabled, allows remote attackers …
-
Unscored —CVE-2007-1024 Public exploit
PHP remote file inclusion vulnerability in include.php in Meganoide's news 1.1.1 allows remote attackers to execute arb…
-
Unscored —CVE-2007-1026 Public exploit
SQL injection vulnerability in view.php in XLAtunes 0.1 and earlier allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2007-1023 Public exploit
SQL injection vulnerability in pop_profile.asp in Snitz Forums 2000 3.1 SR4 allows remote attackers to execute arbitrar…
-
Unscored —
Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance …
-
Unscored —CVE-2007-1020 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in CedStat 1.31 allows remote attackers to inject arbitrary web s…
-
Unscored —
Certain setuid DB2 binaries in IBM DB2 before 9 Fix Pack 2 for Linux and Unix allow local users to overwrite arbitrary …
-
Unscored —CVE-2007-1016 Public exploit
SQL injection vulnerability in Aktueldownload Haber script allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
Unspecified vulnerability in phpMyFAQ 1.6.9 and earlier, when register_globals is enabled, allows remote attackers to "…
-
Unscored —
PHP remote file inclusion vulnerability in tpl/header.php in VirtualSystem VS-News-System 1.2.1 and earlier, when regis…
-
Unscored —CVE-2007-1022 Public exploit
SQL injection vulnerability in h_goster.asp in Turuncu Portal 1.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which…
-
Unscored —CVE-2007-1010 Public exploit
Multiple PHP remote file inclusion vulnerabilities in ZebraFeeds 1.0, when register_globals is enabled, allow remote at…
-
Unscored —CVE-2007-1031 Public exploit
Directory traversal vulnerability in include/db_conn.php in SpoonLabs Vivvo Article Management CMS 3.4 allows remote at…
-
Unscored —CVE-2007-1025 Public exploit
PHP remote file inclusion vulnerability in inc/functions_inc.php in VS-Link-Partner 2.1 and earlier allows remote attac…
-
Unscored —CVE-2007-1029 Public exploit
Stack-based buffer overflow in the Connect method in the IMAP4 component in Quiksoft EasyMail Objects before 6.5 allows…
-
Unscored —CVE-2007-1013 Public exploit
PHP remote file inclusion vulnerability in generate.php in VirtualSystem Htaccess Passwort Generator 1.1 allows remote …