Archive
February 2007
Vulnerabilities first published in this month (UTC), newest first.
224 results · Clear filters · Feed
-
Unscored —CVE-2007-1041 Public exploit
Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute a…
-
Unscored —CVE-2007-1037 Public exploit
Stack-based buffer overflow in News File Grabber 4.1.0.1 and earlier allows remote attackers to execute arbitrary code …
-
Unscored —CVE-2007-1049 Public exploit
Cross-site scripting (XSS) vulnerability in the wp_explain_nonce function in the nonce AYS functionality (wp-includes/f…
-
Unscored —CVE-2007-1017 Public exploit
PHP remote file inclusion vulnerability in show_news_inc.php in VirtualSystem VS-News-System 1.2.1 and earlier allows r…
-
Unscored —CVE-2007-1019 Public exploit
SQL injection vulnerability in news.php in webSPELL 4.01.02, when register_globals is enabled, allows remote attackers …
-
Unscored —CVE-2007-1024 Public exploit
PHP remote file inclusion vulnerability in include.php in Meganoide's news 1.1.1 allows remote attackers to execute arb…
-
Unscored —CVE-2007-1026 Public exploit
SQL injection vulnerability in view.php in XLAtunes 0.1 and earlier allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2007-1023 Public exploit
SQL injection vulnerability in pop_profile.asp in Snitz Forums 2000 3.1 SR4 allows remote attackers to execute arbitrar…
-
Unscored —
Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance …
-
Unscored —CVE-2007-1020 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in CedStat 1.31 allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2007-1016 Public exploit
SQL injection vulnerability in Aktueldownload Haber script allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2007-1022 Public exploit
SQL injection vulnerability in h_goster.asp in Turuncu Portal 1.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which…
-
Unscored —CVE-2007-1010 Public exploit
Multiple PHP remote file inclusion vulnerabilities in ZebraFeeds 1.0, when register_globals is enabled, allow remote at…
-
Unscored —CVE-2007-1031 Public exploit
Directory traversal vulnerability in include/db_conn.php in SpoonLabs Vivvo Article Management CMS 3.4 allows remote at…
-
Unscored —CVE-2007-1025 Public exploit
PHP remote file inclusion vulnerability in inc/functions_inc.php in VS-Link-Partner 2.1 and earlier allows remote attac…
-
Unscored —CVE-2007-1029 Public exploit
Stack-based buffer overflow in the Connect method in the IMAP4 component in Quiksoft EasyMail Objects before 6.5 allows…
-
Unscored —CVE-2007-1013 Public exploit
PHP remote file inclusion vulnerability in generate.php in VirtualSystem Htaccess Passwort Generator 1.1 allows remote …
-
Unscored —CVE-2007-1015 Public exploit
SQL injection vulnerability in HaberDetay.asp in Aktueldownload Haber script allows remote attackers to execute arbitra…
-
Unscored —CVE-2007-1021 Public exploit
SQL injection vulnerability in inc_listnews.asp in CodeAvalanche News 1.x allows remote attackers to execute arbitrary …
-
Unscored —CVE-2007-1014 Public exploit
Stack-based buffer overflow in VicFTPS before 5.0 allows remote attackers to cause a denial of service (application cra…
-
Unscored —CVE-2007-1011 Public exploit
PHP remote file inclusion vulnerability in functions_inc.php in VS-Gastebuch 1.5.3 and earlier allows remote attackers …
-
Unscored —CVE-2007-1034 Public exploit
SQL injection vulnerability in the category file in modules.php in the Emporium 2.3.0 and earlier module for PHP-Nuke a…
-
Unscored —
Multiple buffer overflows in the Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control in OfficeScanSetupI…
-
Unscored —
Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire …
-
Unscored —CVE-2007-1008 Public exploit
Apple iTunes 7.0.2 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted…
-
Unscored —CVE-2007-0710 Public exploit
The Bonjour functionality in iChat in Apple Mac OS X 10.3.9 allows remote attackers to cause a denial of service (persi…
-
Unscored —CVE-2007-0982 Public exploit
Cross-site scripting (XSS) vulnerability in error.php in TaskFreak! 0.5.5 allows remote attackers to inject arbitrary w…
-
Unscored —CVE-2007-0984 Public exploit
SQL injection vulnerability in admin_poll.asp in PollMentor 2.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2007-0983 Public exploit
PHP remote file inclusion vulnerability in _admin/nav.php in AT Contenator 1.0 and earlier allows remote attackers to e…
-
Unscored —CVE-2007-0986 Public exploit
PHP remote file inclusion vulnerability in index.php in Jupiter CMS 1.1.5, when PHP 5.0.0 or later is used, allows remo…
-
Unscored —CVE-2007-0987 Public exploit
Directory traversal vulnerability in index.php in Jupiter CMS 1.1.5 allows remote attackers to include and execute arbi…
-
Unscored —CVE-2007-0985 Public exploit
SQL injection vulnerability in nickpage.php in phpCC 4.2 beta and earlier allows remote attackers to execute arbitrary …
-
Unscored —
IBM Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores HTTPPassword hashes from names.…
-
Unscored —CVE-2007-0972 Public exploit
Unrestricted file upload vulnerability in modules/emoticons.php in Jupiter CMS 1.1.5 allows remote attackers to upload …
-
Unscored —
Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8, allow rem…
-
Unscored —CVE-2007-0976 Public exploit
Buffer overflow in the ActSoft DVD-Tools ActiveX control (dvdtools.ocx) allows remote attackers to execute arbitrary co…
-
Unscored —CVE-2007-0970 Public exploit
Multiple SQL injection vulnerabilities in WebTester 5.0.20060927 and earlier allow remote attackers to execute arbitrar…
-
Unscored —CVE-2007-0971 Public exploit
Multiple SQL injection vulnerabilities in Jupiter CMS 1.1.5 allow remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2006-7012 Public exploit
scart.cgi in SCart 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the page param…