Archive
3 March 2007
Vulnerabilities first published on this day (UTC), newest first.
45 results · Feed
-
Unscored —
Multiple vulnerabilities in the OpenSSL ASN.1 parser, as used in Novell iManager 2.0.2, allows remote attackers to caus…
-
Unscored —CVE-2006-7104 Public exploit
PHP remote file inclusion vulnerability in htmltemplate.php in the Chad Auld MOStlyContent Editor (MOStlyCE) as created…
-
Unscored —
Multiple directory traversal vulnerabilities in EZOnlineGallery 1.3 and earlier, and possibly other versions before 1.3…
-
Unscored —CVE-2006-7106 Public exploit
PHP remote file inclusion vulnerability in config.inc.php3 in Power Phlogger 2.0.9 and earlier allows remote attackers …
-
Unscored —CVE-2006-7102 Public exploit
Multiple PHP remote file inclusion vulnerabilities in phpBurningPortal quiz-modul 1.0.1, and possibly earlier, allow re…
-
Critical 9.8
PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9 allows remote attackers to execute arb…
-
Unscored —CVE-2006-7100 Public exploit
PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Insert User 0.1.2 and earlier allow…
-
Unscored —CVE-2006-7107 Public exploit
PHP remote file inclusion vulnerability in upgrade.php in Coalescent Systems freePBX 2.1.3 allows remote attackers to e…
-
Unscored —CVE-2006-7101 Public exploit
SQL injection vulnerability in admin.php in PHPWind 5.0.1 and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2007-1260 Public exploit
Stack-based buffer overflow in the connectHandle function in server.cpp in WebMod 0.48 allows remote attackers to execu…
-
Unscored —
Unspecified vulnerability in the reports system in OpenBiblio before 0.6.0 allows attackers to gain privileges via unsp…
-
Unscored —
SQL injection vulnerability in the Oracle Database Server 10g allows remote authenticated users to execute arbitrary SQ…
-
Unscored —CVE-2007-1247 Public exploit
Multiple PHP remote file inclusion vulnerabilities in aWeb Labs aWebNews 1.5 allow remote attackers to execute arbitrar…
-
Unscored —
Unspecified vulnerability in Cisco IOS 12.2SXA, SXB, SXD, and SXF; and the MSFC2, MSFC2a and MSFC3 running in Hybrid Mo…
-
Unscored —CVE-2007-1248 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in built2go News Manager Blog 1.0 allow remote attackers to inject …
-
Unscored —
The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbi…
-
Unscored —
Buffer overflow in Symantec Mail Security for SMTP 5.0 before Patch 175 allows remote attackers to cause a denial of se…
-
Unscored —CVE-2007-1255 Public exploit
Unrestricted file upload vulnerability in admin.bbcode.php in Connectix Boards 0.7 and earlier allows remote authentica…
-
Unscored —CVE-2007-1250 Public exploit
SQL injection vulnerability in section/default.asp in ANGEL Learning Management Suite (LMS) 7.1 allows remote attackers…
-
Unscored —
Mozilla Firefox 2.0.0.2 allows remote attackers to spoof the address bar, favicons, and document source, and perform up…
-
Unscored —
Eval injection vulnerability in the (a) kmz_ImportWithMesh.py Script for Blender 0.1.9h, as used in (b) Blender before …
-
Unscored —
Multiple unspecified vulnerabilities in WebAPP before 0.9.9.6 have unknown impact and attack vectors.
-
Unscored —
MoveSortedContentAction in C1 Financial Services Contelligent 9.1.4 does not check "the additional environment security…
-
Unscored —CVE-2007-1254 Public exploit
SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated use…
-
Unscored —CVE-2007-1251 Public exploit
Format string vulnerability in the new_warning function in ntserv/warning.c for Netrek Vanilla Server 2.12.0, when EVEN…
-
Unscored —CVE-2006-7098 Public exploit
The Debian GNU/Linux 033_-F_NO_SETSID patch for the Apache HTTP Server 1.3.34-4 does not properly disassociate httpd fr…
-
Unscored —CVE-2006-7099 Public exploit
Directory traversal vulnerability in index.php in SolarPay allows remote attackers to read certain files via a .. (dot …
-
Unscored —
viewcvs in ViewCVS 0.9.2 allows remote attackers to set the Content-Type header to arbitrary values via the content-typ…
-
Unscored —
CRLF injection vulnerability in viewcvs in ViewCVS 0.9.2 allows remote attackers to inject arbitrary HTTP headers and c…
-
Unscored —CVE-2007-1239 EPSS 12%
Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service (ap…
-
Unscored —CVE-2007-1242 Public exploit
SQL injection vulnerability in system/index.php in Audins Audiens 3.3 allows remote attackers to execute arbitrary SQL …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in sitex allow remote attackers to inject arbitrary web script or H…
-
Unscored —CVE-2007-1241 Public exploit
Cross-site scripting (XSS) vulnerability in setup.php in Audins Audiens 3.3 allows remote attackers to inject arbitrary…
-
Unscored —CVE-2007-1238 EPSS 11%
Microsoft Office 2003 allows user-assisted remote attackers to cause a denial of service (application crash) by attempt…
-
Unscored —CVE-2007-1231 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.0 allow remote attackers to inject arbitrary w…
-
Unscored —CVE-2007-1240 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Docebo CMS 3.0.3 through 3.0.5 allow remote attackers to inject …
-
Unscored —
Directory traversal vulnerability in SQLiteManager 1.2.0 allows remote attackers to read arbitrary files via a .. (dot …
-
Unscored —
sitex allows remote attackers to obtain sensitive information via a request with a numerical value for the (1) sxMonth[…
-
Unscored —
Unrestricted file upload vulnerability in sitex allows remote attackers to upload arbitrary PHP code via an avatar file…
-
Unscored —CVE-2007-1233 Public exploit
PHP remote file inclusion vulnerability in downloadcounter.php in STWC-Counter 3.4.0.0 and earlier allows remote attack…