Archive
2 March 2007
Vulnerabilities first published on this day (UTC), newest first.
30 results · Feed
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/functions.php in WordPress before 2.1.2-alpha allow …
-
Unscored —CVE-2007-1229 Public exploit
Cross-site scripting (XSS) vulnerability in the Nullsoft ShoutcastServer 1.9.7 allows remote attackers to inject arbitr…
-
Unscored —CVE-2007-1227 Public exploit
VShieldCheck in McAfee VirusScan for Mac (Virex) before 7.7 patch 1 allow local users to change permissions of arbitrar…
-
Unscored —
Unspecified vulnerability in Hitachi OSAS/FT/W before 20070223 allows attackers to cause a denial of service (responder…
-
Unscored —
Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf sh…
-
Unscored —CVE-2007-1224 Public exploit
Grok Developments NetProxy 4.03 allows remote attackers to bypass URL filtering via a request that omits "http://" from…
-
Unscored —
The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 does not properly verify the parameters passed to the syscall…
-
Unscored —CVE-2007-1225 Public exploit
The connection log file implementation in Grok Developments NetProxy 4.03 does not record requests that omit http:// in…
-
Unscored —
IBM DB2 UDB 8.2 before Fixpak 7 (aka fixpack 14), and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to acce…
-
Unscored —
McAfee VirusScan for Mac (Virex) before 7.7 patch 1 has weak permissions (0666) for /Library/Application Support/Virex/…
-
Unscored —CVE-2007-1219 Public exploit
PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute ar…
-
Unscored —
The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 allows attackers with physical access to force execution of t…
-
Unscored —
Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA (formerly Computer Associates) eTrust Intrusio…
-
Unscored —
Off-by-one buffer overflow in the parse_elements function in the 802.11 printer code (print-802_11.c) for tcpdump 3.9.5…
-
Unscored —
Integer signedness error in the network_receive_packet function in socket.c in dimension 3 engine (dim3) 1.5 and earlie…
-
Unscored —
Buffer overflow in the network_host_handle_join function in host.c in dimension 3 engine (dim3) 1.5 and earlier allows …
-
Unscored —
Multiple unspecified vulnerabilities in TaskFreak! before 0.1.4 have unknown impact and attack vectors.
-
Unscored —
The Management Console server in EMC NetWorker (formerly Legato NetWorker) 7.3.2 before Jumbo Update 1 uses weak authen…
-
Unscored —
Norman SandBox Analyzer does not use the proper range for Interrupt Descriptor Table (IDT) entries, which allows local …
-
Unscored —CVE-2007-1190 Public exploit
Unspecified vulnerability in the EmbeddedWB Web Browser ActiveX control allows remote attackers to execute arbitrary co…
-
Unscored —
Buffer overflow in the bufprint function in capiutil.c in libcapi, as used in Linux kernel 2.6.9 to 2.6.20 and isdn4k-u…
-
Unscored —
The Social Bookmarks (del.icio.us) plug-in 8F in Quicksilver writes usernames and passwords in plaintext to the /Librar…
-
Unscored —CVE-2007-1195 Public exploit
Multiple buffer overflows in XM Easy Personal FTP Server 5.3.0 allow remote attackers to execute arbitrary code via uns…
-
Unscored —
Multiple unspecified vulnerabilities in the Login page in OrangeHRM before 20070212 have unknown impact and attack vect…
-
Unscored —
Cross-site scripting (XSS) vulnerability in TaskFreak! before 0.5.7 allows remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2007-1192 Public exploit
Thomas R. Pasawicz HyperBook Guestbook 1.30 stores sensitive information under the web root with insufficient access co…
-
Unscored —
Multiple unspecified vulnerabilities in Epiware before 4.7.5 have unknown impact and attack vectors, possibly related t…
-
Unscored —CVE-2007-1199 Public exploit
Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as d…
-
Unscored —
Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execu…
-
Unscored —CVE-2007-1189 Public exploit
Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite…