Archive
March 2007
Vulnerabilities first published in this month (UTC), newest first.
632 results · Feed
-
Unscored —CVE-2007-1791 Public exploit
SQL injection vulnerability in wall.php in Picture-Engine 1.2.0 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2007-1790 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Kaqoo Auction Software Free Edition allow remote attackers to exe…
-
Unscored —
Flyspray 0.9.9 allows remote attackers to obtain sensitive information (private project summaries) via direct requests.
-
Unscored —CVE-2007-1787 Public exploit
Multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php in Softerra Time-Assistant 6.2 and earlie…
-
Unscored —
Flyspray 0.9.9, when output_buffering is disabled or "set to a low value," allows remote attackers to bypass authentica…
-
Unscored —
SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Grou…
-
Unscored —
The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute…
-
Unscored —
The JNILoader ActiveX control (STJNILoader.ocx) 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers…
-
Unscored —CVE-2006-7183 Public exploit
PHP remote file inclusion vulnerability in styles.php in Exhibit Engine (EE) 1.22 and earlier allows remote attackers t…
-
Unscored —CVE-2006-7185 Public exploit
PHP remote file inclusion vulnerability in includes/user_standard.php in CMSmelborp Beta allows remote attackers to exe…
-
Unscored —CVE-2006-7184 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Exhibit Engine (EE) 1.22, and possibly earlier, allow remote atta…
-
Unscored —
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attac…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Morcego CMS 0.9.6 and earlier allow remote attackers to execute a…
-
Unscored —
PHP remote file inclusion vulnerability in noticias.php in MNews 2.0 and earlier allows remote attackers to execute arb…
-
Unscored —
CruiseWorks 1.09e and earlier does not properly restrict user access to certain privileged actions, which allows local …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the DHT shell (owdhtshell) in Overlay Weaver 0.5.9 to 0.5.11, when invoked …
-
Unscored —
Minna De Office 1.x and 2.x does not properly restrict user access to certain privileged actions, which allows local us…
-
Unscored —
MadWifi before 0.9.3 does not properly handle reception of an AUTH frame by an IBSS node, which allows remote attackers…
-
Unscored —
ieee80211_input.c in MadWifi before 0.9.3 does not properly process Channel Switch Announcement Information Elements (C…
-
Unscored —
MadWifi, when Ad-Hoc mode is used, allows remote attackers to cause a denial of service (system crash) via unspecified …
-
Unscored —
ieee80211_output.c in MadWifi before 0.9.3 sends unencrypted packets before WPA authentication succeeds, which allows r…
-
Unscored —
The ath_rate_sample function in the ath_rate/sample/sample.c sample code in MadWifi before 0.9.3 allows remote attacker…
-
Unscored —
Elm ME+ 2.4 before PL109S, when installed setgid mail and the operating system lacks POSIX saved ID support, allows loc…
-
Unscored —
Race condition in the can_open function in Elm ME+ 2.4, when installed setgid mail and the operating system lacks POSIX…
-
Unscored —
Multiple SQL injection vulnerabilities in the MySQL back-end in Advanced Website Creator (AWC) before 1.9.0 might allow…
-
Unscored —
Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Ser…
-
Unscored —CVE-2007-1773 Public exploit
Multiple directory traversal vulnerabilities in aBitWhizzy allow remote attackers to list arbitrary directories via a .…
-
Unscored —CVE-2007-1772 Public exploit
The FTP service in HP JetDirect print servers allows remote attackers to cause a denial of service (engine crash) via a…
-
Unscored —
Unrestricted file upload vulnerability in upload.php3 in JBrowser 2.4 and earlier allows remote attackers to upload and…
-
Unscored —CVE-2007-1771 Public exploit
PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System Solutions Web Content Syst…
-
Unscored —CVE-2007-1776 Public exploit
SQL injection vulnerability in index.php in the DesignForJoomla.com D4J eZine (com_ezine) 2.8 and earlier component for…
-
Unscored —
Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code…
-
Unscored —
Cross-site scripting (XSS) vulnerability in app/helpers/application_helper.rb in Mephisto 0.7.3 and Mephisto Edge 20070…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in aBitWhizzy allow remote attackers to inject arbitrary web script…
-
Unscored —CVE-2007-1778 Public exploit
PHP remote file inclusion vulnerability in db/mysql.php in the Eve-Nuke 0.1 (EN-Forums) module for PHP-Nuke allows remo…
-
Unscored —CVE-2007-1766 Public exploit
PHP remote file inclusion vulnerability in login/engine/db/profiledit.php in Advanced Login 0.76 and earlier allows rem…
-
Unscored —
Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code…
-
Unscored —
Unspecified vulnerability in (1) Deskbar.dll and (2) Toolbar.dll in AOL 9.0 before February 2007 allows remote attacker…
-
Unscored —CVE-2007-1763 EPSS 19%
The ATI kernel driver (atikmdag.sys) in Microsoft Windows Vista allows user-assisted remote attackers to cause a denial…
-
Unscored —
Stack-based buffer overflow in FastStone Image Viewer 2.8 allows user-assisted remote attackers to execute arbitrary co…