Skip to content
OpenAdvisories

Archive

February 2007

Vulnerabilities first published in this month (UTC), newest first.

← January 2007 2007 / February March 2007 →
  1. 115
  2. 29
  3. 327
  4. 413
  5. 5 
  6. 638
  7. 741
  8. 834
  9. 920
  10. 10 
  11. 111
  12. 1244
  13. 1329
  14. 1422
  15. 1525
  16. 1634
  17. 17 
  18. 18 
  19. 192
  20. 207
  21. 2150
  22. 2224
  23. 2328
  24. 2423
  25. 25 
  26. 2635
  27. 2769
  28. 2840
All Critical High Medium Low Exploited only Public exploit

630 results · Feed

  • Unscored —
    CVE-2007-0684 Public exploit

    PHP remote file inclusion vulnerability in portal.php in Cerulean Portal System 0.7b allows remote attackers to execute…

  • High 8.8
    CVE-2007-0671 Exploited EPSS 44%

    Unspecified vulnerability in Microsoft Excel 2000, XP, 2003, and 2004 for Mac, and possibly other Office products, allo…

    KEV Aug 12, 2025
  • Unscored —
    CVE-2007-0680 Public exploit

    PHP remote file inclusion vulnerability in includes/functions.php in Phpbb Tweaked 3 and earlier allows remote attacker…

  • Unscored —
    CVE-2007-0679 Public exploit

    PHP remote file inclusion vulnerability in lang/leslangues.php in Nicolas Grandjean PHPMyRing 4.1.3b and earlier allows…

  • Unscored —
    CVE-2007-0673

    LGSERVER.EXE in BrightStor ARCserve Backup for Laptops & Desktops r11.1 allows remote attackers to cause a denial of se…

  • Unscored —
    CVE-2007-0670

    Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands…

  • Unscored —
    CVE-2007-0668

    The Loopback Filesystem (LOFS) in Sun Solaris 10 allows local users in a non-global zone to move and rename files in a …

  • Unscored —
    CVE-2007-0665

    Format string vulnerability in the SCP module in Ipswitch WS_FTP 2007 Professional might allow remote attackers to exec…

  • Unscored —
    CVE-2007-0666

    Ipswitch WS_FTP Server 5.04 allows FTP site administrators to execute arbitrary code on the system via a long input str…

  • Unscored —
    CVE-2007-0667

    The redirect function in Form.pm for (1) LedgerSMB before 1.1.5 and (2) SQL-Ledger allows remote authenticated users to…

    sql-ledger sql-ledger Debian Ubuntu
  • Unscored —
    CVE-2007-0458

    Unspecified vulnerability in the HTTP dissector in Wireshark (formerly Ethereal) 0.99.3 and 0.99.4 allows remote attack…

    wireshark Debian
  • Unscored —
    CVE-2007-0459

    packet-tcp.c in the TCP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.4 allows remote attackers to cau…

    wireshark Debian
  • Unscored —
    CVE-2007-0456

    Unspecified vulnerability in the LLT dissector in Wireshark (formerly Ethereal) 0.99.3 and 0.99.4 allows remote attacke…

    wireshark Debian
  • Unscored —
    CVE-2007-0457

    Unspecified vulnerability in the IEEE 802.11 dissector in Wireshark (formerly Ethereal) 0.10.14 through 0.99.4 allows r…

    wireshark Debian
  • Unscored —
    CVE-2007-0664

    thttpd before 2.25b-r6 in Gentoo Linux is started from the system root directory (/) by the Gentoo baselayout 1.12.6 pa…

  • Unscored —
    CVE-2007-0659

    download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary…

  • Unscored —
    CVE-2007-0657

    Unspecified vulnerability in Nexuiz 2.2.2 allows remote attackers to read and overwrite arbitrary files via the gamedir…

    nexuiz Debian
  • Unscored —
    CVE-2007-0658

    The (1) Textimage 4.7.x before 4.7-1.2 and 5.x before 5.x-1.1 module for Drupal and the (2) Captcha 4.7.x before 4.7-1.…

    Web / CMS
  • Unscored —
    CVE-2007-0662 Public exploit

    PHP remote file inclusion vulnerability in includes/usercp_viewprofile.php in Hailboards 1.2.0 allows remote attackers …

  • Unscored —
    CVE-2007-0663 Public exploit

    SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to ex…

  • Medium —
    CVE-2007-0660

    DotNetNuke Vulnerable to XSS in Pass-Through Values

    Cross-site scripting (XSS) vulnerability in the IFrame module before 03.02.01 for DotNetNuke (DNN) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "Pass through values."

    DotNetNuke.Core NuGet
  • Unscored —
    CVE-2007-0661

    Intel Enterprise Southbridge 2 Baseboard Management Controller (BMC), Intel Server Boards 5000XAL, S5000PAL, S5000PSL, …

  • Unscored —
    CVE-2007-0656 Public exploit EPSS 16%

    PHP remote file inclusion vulnerability in includes/functions.php in phpBB2-MODificat 0.2.0 and earlier allows remote a…

  • Unscored —
    CVE-2007-0650

    Buffer overflow in the open_sty function in mkind.c for makeindex 2.14 in teTeX might allow user-assisted remote attack…

  • Unscored —
    CVE-2007-0648

    Cisco IOS after 12.3(14)T, 12.3(8)YC1, 12.3(8)YG, and 12.4, with voice support and without Session Initiated Protocol (…

  • Unscored —
    CVE-2007-0649 Public exploit

    Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overw…

  • Unscored —
    CVE-2007-0644 Public exploit

    Format string vulnerability in Apple Safari 2.0.4 (419.3) allows remote user-assisted attackers to cause a denial of se…

  • Unscored —
    CVE-2007-0647 Public exploit

    Format string vulnerability in Help Viewer 3.0.0 allows remote user-assisted attackers to cause a denial of service (cr…

  • Unscored —
    CVE-2007-0646 Public exploit EPSS 10%

    Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-a…

  • Unscored —
    CVE-2007-0645 Public exploit

    Format string vulnerability in iPhoto 6.0.5 allows remote user-assisted attackers to cause a denial of service (crash) …