Archive
February 2007
Vulnerabilities first published in this month (UTC), newest first.
630 results · Feed
-
Unscored —
axigen 1.2.6 through 2.0.0b1 does not properly parse login credentials, which allows remote attackers to cause a denial…
-
Unscored —CVE-2007-0886 Public exploit
Heap-based buffer underflow in axigen 1.2.6 through 2.0.0b1 allows remote attackers to cause a denial of service (appli…
-
Unscored —
MediaWiki before 1.9.2 allows remote attackers to obtain sensitive information via a direct request to (1) Simple.deps.…
-
Unscored —
CRLF injection vulnerability in phpMyVisites before 2.2 allows remote attackers to inject arbitrary HTTP headers and co…
-
Unscored —
Kiwi CatTools before 3.2.0 beta uses weak encryption ("reversible encoding") for passwords, account names, and IP addre…
-
Unscored —
Buffer overflow in SmidgeonSoft PEBrowse Professional 8.2.1.0 allows user-assisted remote attackers to execute arbitrar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in jira/secure/BrowseProject.jspa in Rainbow with the Zen (Rainbow.Zen) extens…
-
Unscored —
Capital Request Forms stores sensitive information under the web root with insufficient access control, which allows re…
-
Unscored —
Buffer overflow in GraphicsMagick and ImageMagick allows user-assisted remote attackers to cause a denial of service an…
-
Unscored —
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterp…
-
Unscored —CVE-2007-0883 Public exploit
Directory traversal vulnerability in portalgroups/portalgroups/getfile.cgi in IP3 NetAccess before firmware 4.1.9.6 all…
-
Unscored —
Buffer overflow in Roaring Penguin MIMEDefang 2.59 and 2.60 allows remote attackers to cause a denial of service (appli…
-
Unscored —CVE-2007-0881 Public exploit
PHP remote file inclusion vulnerability in the Seitenschutz plugin for OPENi-CMS 1.0 allows remote attackers to execute…
-
Unscored —CVE-2007-0878 EPSS 21%
Unspecified vulnerability in Microsoft Internet Explorer on Windows Mobile 5.0 allows remote attackers to cause a denia…
-
Unscored —
Directory traversal vulnerability in avatar.php in PhpMyChat Plus 1.9 and earlier allows remote attackers to read arbit…
-
Unscored —
Cross-site scripting (XSS) vulnerability in add_comment.php in Wheatblog (wB) 1.1 allows remote attackers to inject arb…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Quick Digital Image Gallery (Qdig) 1.2.9.3 and devel-20060624 allows remote…
-
Unscored —CVE-2007-0873 Public exploit
nabopoll 1.1.2 allows remote attackers to bypass authentication and access certain administrative functionality via a d…
-
Unscored —CVE-2007-0872 Public exploit
Directory traversal vulnerability in the Plain Old Webserver (POW) add-on before 0.0.9 for Mozilla Firefox allows remot…
-
Unscored —
SQL injection vulnerability in install.php in mcRefer allows remote attackers to execute arbitrary SQL commands via uns…
-
Unscored —
Unspecified vulnerability in March Networks DVR 3000 and 4000 Digital Video Recorders allows attackers to cause an unsp…
-
Unscored —CVE-2007-0871 Public exploit
Unrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers to upload arbitrary P…
-
Unscored —
Allons_voter 1.0 allows remote attackers to bypass authentication and access certain administrative functionality via a…
-
Unscored —
Headstart Solutions DeskPRO allows remote attackers to obtain the full path via direct requests to (1) email/mail.php, …
-
Unscored —
install/loader_help.php in Headstart Solutions DeskPRO allows remote attackers to obtain configuration information via …
-
Unscored —
attachment.php in Headstart Solutions DeskPRO allows remote attackers to read all uploaded files by providing the file …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in warforge.NEWS 1.0 allow remote attackers to inject arbitrary HTM…
-
Unscored —
Unrestricted file upload vulnerability in add.asp in OzzyWork Gallery, possibly 2.0 and earlier, allows remote attacker…
-
Unscored —CVE-2006-6995 Public exploit
mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername…
-
Unscored —
Multiple SQL injection vulnerabilities in pages/addcomment2.php in Neuron Blog 1.1 allow remote attackers to inject arb…
-
Unscored —
Unspecified vulnerability in a cryptographic feature in MailEnable Standard Edition before 1.93, Professional Edition b…
-
Unscored —
Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in the wrong place, which c…
-
Unscored —CVE-2007-0870 EPSS 22%
Unspecified vulnerability in Microsoft Word 2000 allows remote attackers to cause a denial of service (crash) via unkno…
-
Unscored —
Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attack…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Attachment Manager (admincp/attachment.php) in Jelsoft vBulletin 3.6.4 …
-
Unscored —CVE-2007-0867 Public exploit
PHP remote file inclusion vulnerability in classes/menu.php in Site-Assistant 0990 and earlier allows remote attackers …
-
Unscored —
Cross-domain vulnerability in FineBrowser Freeware 3.2.2 allows remote attackers to access restricted information from …
-
Unscored —
Cross-domain vulnerability in Slim Browser 4.07 build 100 allows remote attackers to access restricted information from…
-
Unscored —
Cross-domain vulnerability in GreenBrowser 3.4.0622 allows remote attackers to access restricted information from other…
-
Unscored —
Cross-domain vulnerability in NetCaptor 4.5.7 Personal Edition allows remote attackers to access restricted information…