Archive
February 2007
Vulnerabilities first published in this month (UTC), newest first.
630 results · Feed
-
Unscored —CVE-2007-1078 Public exploit
PHP remote file inclusion vulnerability in index.php in FlashGameScript 1.5.4 allows remote attackers to execute arbitr…
-
Unscored —CVE-2007-1076 Public exploit
Multiple directory traversal vulnerabilities in phpTrafficA 1.4.1, and possibly earlier, allow remote attackers to incl…
-
Unscored —CVE-2004-2677 Public exploit
Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to ex…
-
Unscored —
The command line interface (CLI) in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware …
-
Unscored —CVE-2007-1075 Public exploit
TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service (CPU consumption) via a response with a larg…
-
Unscored —
Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allows remote attackers to cause a …
-
Unscored —CVE-2007-1074 Public exploit
Multiple buffer overflows in NewsBin Pro 5.33 and NewsBin Pro 4.x allow user-assisted remote attackers to execute arbit…
-
Unscored —
Static code injection vulnerability in install.php in mcRefer allows remote attackers to execute arbitrary PHP code via…
-
Unscored —CVE-2006-6490 EPSS 10%
Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX co…
-
Unscored —
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulner…
-
Unscored —
The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properl…
-
Unscored —
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulner…
-
Unscored —
The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earl…
-
Unscored —
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulner…
-
Unscored —
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulner…
-
Unscored —
The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9)…
-
Unscored —
SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" bl…
-
Unscored —CVE-2007-1060 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Interspire SendStudio 2004.14 and earlier, when register_globals …
-
Unscored —CVE-2007-1059 Public exploit
PHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote attackers to execute ar…
-
Unscored —CVE-2007-1050 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in AbleDesign MyCalendar allow remote attackers to inj…
-
Unscored —CVE-2007-1057 Public exploit
The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.6.x through 1.9.2, when $wgUs…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in PBLang (PBL) 4.60 and earlier allows remote attackers to execut…
-
Unscored —
Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.17.183 and earlier uses a weak cryptographic hashing functi…
-
Unscored —CVE-2007-1058 Public exploit
SQL injection vulnerability in user_pages/page.asp in Online Web Building 2.0 allows remote attackers to execute arbitr…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.9.x before 1.9.0rc2, and 1.8.…
-
Unscored —
VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in phpXmms 1.0 allow remote attackers to execute arbitrary PHP code …
-
Unscored —
Unspecified vulnerability in Distributed Checksum Clearinghouse (DCC) before 1.3.51 allows remote attackers to delete o…
-
Unscored —
Dem_trac allows remote attackers to read log file contents via a direct request for /anc_sit.txt.
-
Unscored —
Directory traversal vulnerability in news.php in Xpression News (X-News) 1.0.1, when magic_quotes_gpc is disabled, allo…
-
Unscored —CVE-2007-1044 Public exploit
Pearson Education PowerSchool 4.3.6 allows remote attackers to list the contents of the admin folder via a URI composed…
-
Unscored —
mAlbum 0.3 has default accounts (1) "login"/"pass" for its administrative account and (2) "dqsfg"/"sdfg", which allows …
-
Unscored —CVE-2007-1043 Public exploit
Ezboo webstats, possibly 3.0.3, allows remote attackers to bypass authentication and gain access via a direct request t…
-
Unscored —
Unspecified vulnerability in Peanut Knowledge Base (PeanutKB) 0.0.3 and earlier has unknown impact and attack vectors.
-
Unscored —
Shemes.com Grabit 1.5.3, and possibly earlier, allows remote attackers to cause a denial of service (application crash)…
-
Unscored —CVE-2007-1040 Public exploit
Directory traversal vulnerability in archives.php in Xpression News (X-News) 1.0.1 allows remote attackers to include a…
-
Unscored —CVE-2007-1041 Public exploit
Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute a…
-
Unscored —CVE-2007-1037 Public exploit
Stack-based buffer overflow in News File Grabber 4.1.0.1 and earlier allows remote attackers to execute arbitrary code …
-
Unscored —
PHP remote file inclusion vulnerability in admin_rebuild_search.php in phpbb_wordsearch allows remote attackers to exec…