Archive
February 2007
Vulnerabilities first published in this month (UTC), newest first.
630 results · Feed
-
Unscored —
index.php in WebMplayer before 0.6.1-Alpha allows remote attackers to execute arbitrary code via shell metacharacters i…
-
Unscored —
PHP remote file inclusion vulnerability in function.php in arabhost allows remote attackers to execute arbitrary PHP co…
-
Unscored —CVE-2007-1152 Public exploit
Multiple directory traversal vulnerabilities in Pyrophobia 2.1.3.1 allow remote attackers to read arbitrary files via a…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in jmx-console/HtmlAdaptor in JBoss allows remote attackers to perform …
-
Unscored —
Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sendi…
-
Unscored —
Unspecified vulnerability in HP Tru64 UNIX 5.1B PK2(BL22) and PK3(BL24), and 5.1A PK6(BL24), when using IPsec/IKE (Inte…
-
Unscored —
Buffer overflow in NetScreen-Remote 8.0 allows remote attackers to cause a denial of service and possibly execute arbit…
-
Unscored —
isakmpd/message.c in isakmpd in FreeBSD before isakmpd-20020403_1, and in OpenBSD 3.1, allows remote attackers to cause…
-
Unscored —
Buffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to cause a denial of service …
-
Unscored —
SafeNet VPN client allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted…
-
Unscored —
SonicWALL firmware before 6.4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary c…
-
Unscored —
The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 inherit the defa…
-
Unscored —
shopkitplus allows remote attackers to obtain sensitive information via a request to (1) events.php with a curmonth[]=0…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in ZPanel 2.0 allow remote attackers to execute arbitrary PHP code v…
-
Unscored —CVE-2007-1118 Public exploit
Multiple PHP remote file inclusion vulnerabilities in eFiction 3.1.1 and earlier allow remote attackers to execute arbi…
-
Unscored —CVE-2007-1130 Public exploit
PHP remote file inclusion vulnerability in sinagb.php in Sinapis Gastebuch 2.2 allows remote attackers to execute arbit…
-
Unscored —
Unspecified vulnerability in Novell ZENworks 7 Desktop Management Support Pack 1 before Hot patch 3 (ZDM7SP1HP3) allows…
-
Unscored —
The (1) Import.LoadFromURL and (2) Export.asText.SaveToFile functions in TeeChart Pro ActiveX control (TeeChart7.ocx) a…
-
Unscored —CVE-2007-1125 Public exploit
Cross-site scripting (XSS) vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to i…
-
Unscored —
Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) 1.00 a…
-
Unscored —CVE-2007-1122 EPSS 15%
Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) 1.00 a…
-
Unscored —CVE-2007-1127 Public exploit
Directory traversal vulnerability in enc/stylecss.php in shopkitplus allows remote attackers to read arbitrary files vi…
-
Unscored —CVE-2007-1126 Public exploit
Directory traversal vulnerability in index.php in xtcommerce allows remote attackers to read arbitrary files via a .. (…
-
Unscored —CVE-2007-1133 Public exploit
PHP remote file inclusion vulnerability in fcring.php in FCRing 1.3 allows remote attackers to execute arbitrary PHP co…
-
Unscored —CVE-2007-1124 Public exploit
Directory traversal vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to read arb…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the "Contact Us" functionality in MTCMS 2.2 allow remote attacke…
-
Unscored —
Multiple unrestricted file upload vulnerabilities in MTCMS 3.2 allow remote attackers to upload and execute files via (…
-
Unscored —CVE-2007-1117 EPSS 18%
Unspecified vulnerability in Publisher 2007 in Microsoft Office 2007 allows remote attackers to execute arbitrary code …
-
Unscored —CVE-2007-1131 Public exploit
PHP remote file inclusion vulnerability in sinapis.php in Sinapis Forum 2.2 allows remote attackers to execute arbitrar…
-
Unscored —
The CheckLoadURI function in Mozilla Firefox 1.8 lists the about: URI as a ChromeProtocol and can be loaded via JavaScr…
-
Unscored —
The child frames in Opera 9 before 9.20 inherit the default charset from the parent window when a charset is not specif…
-
Unscored —CVE-2007-1114 EPSS 12%
The child frames in Microsoft Internet Explorer 7 inherit the default charset from the parent window when a charset is …
-
Unscored —
Integer underflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox bef…
-
Unscored —CVE-2007-0009 EPSS 51%
Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by F…
-
Unscored —
The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can genera…
-
Unscored —
GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 a…
-
Unscored —
browser.js in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 uses the request…
-
Unscored —
Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML charac…
-
Unscored —
The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMo…
-
Unscored —
Multiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Th…