Skip to content
OpenAdvisories

Archive

16 March 2007

Vulnerabilities first published on this day (UTC), newest first.

← February 2007 2007 / March /16 April 2007 →
  1. 1 
  2. 230
  3. 345
  4. 43
  5. 513
  6. 636
  7. 760
  8. 812
  9. 94
  10. 1045
  11. 11 
  12. 1210
  13. 1332
  14. 1419
  15. 151
  16. 1638
  17. 171
  18. 18 
  19. 1910
  20. 2063
  21. 2144
  22. 2221
  23. 2329
  24. 2420
  25. 25 
  26. 264
  27. 2724
  28. 2824
  29. 291
  30. 3035
  31. 318
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • Medium —
    CVE-2007-0450 Public exploit EPSS 91%

    Apache Tomcat Directory Traversal

    Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and 6.x before 6.0.10, when using certain proxy modules (mod_proxy, mod_rewrite, mod_jk), allows remote attackers to read arbitrary files via a .. (dot dot) sequence with com…

    org.apache.tomcat:tomcat apache2 Wolfi Maven
  • Unscored —
    CVE-2007-1493 Public exploit

    nukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to validate an IP address, whi…

  • Unscored —
    CVE-2007-1492 Public exploit EPSS 14%

    winmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of service (infinite loop) vi…

  • Unscored —
    CVE-2007-1469 Public exploit

    SQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2007-1483 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in WebCalendar 0.9.45 allow remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2007-1475 Public exploit

    Multiple buffer overflows in the (1) ibase_connect and (2) ibase_pconnect functions in the interbase extension in PHP 4…

  • Unscored —
    CVE-2007-1472 Public exploit

    Variable overwrite vulnerability in groupit/base/groupit.start.inc in Groupit 2.00b5 allows remote attackers to conduct…

  • Unscored —
    CVE-2007-1476 Public exploit

    The SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and earlier, Internet Security …

  • Unscored —
    CVE-2007-1484 Public exploit

    The array_user_key_compare function in PHP 4.4.6 and earlier, and 5.x up to 5.2.1, makes erroneous calls to zval_dtor, …

  • Unscored —
    CVE-2007-1480 Public exploit

    Creative Guestbook 1.0 allows remote attackers to add an administrative account via a direct request to createadmin.php…

  • Unscored —
    CVE-2007-1487 Public exploit

    Directory traversal vulnerability in index.php in Sascha Schroeder (aka CyberTeddy or Cyber-inside) WebLog allows remot…

  • Unscored —
    CVE-2007-1474 Public exploit

    Argument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before Horde Application Fra…

  • Unscored —
    CVE-2007-1482 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in WBBlog allows remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2007-1481 Public exploit

    SQL injection vulnerability in index.php in WBBlog allows remote attackers to execute arbitrary SQL commands via the e_…

  • Unscored —
    CVE-2007-1471 Public exploit

    admin/default.asp in Orion-Blog 2.0 allows remote attackers to bypass authentication controls and gain privileges via a…

  • Unscored —
    CVE-2007-1473 Public exploit

    Cross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4 RC1, when the login p…

  • Unscored —
    CVE-2007-1478 Public exploit

    download.php in McGallery 0.5b allows remote attackers to read arbitrary files and obtain script source code via the fi…

  • Unscored —
    CVE-2007-1479 Public exploit

    Cross-site scripting (XSS) vulnerability in Guestbook.php in Creative Guestbook 1.0 allows remote attackers to inject a…