Skip to content
OpenAdvisories

Archive

20 March 2007

Vulnerabilities first published on this day (UTC), newest first.

← February 2007 2007 / March /20 April 2007 →
  1. 1 
  2. 230
  3. 345
  4. 43
  5. 513
  6. 636
  7. 760
  8. 812
  9. 94
  10. 1045
  11. 11 
  12. 1210
  13. 1332
  14. 1419
  15. 151
  16. 1638
  17. 171
  18. 18 
  19. 1910
  20. 2063
  21. 2144
  22. 2221
  23. 2329
  24. 2420
  25. 25 
  26. 264
  27. 2724
  28. 2824
  29. 291
  30. 3035
  31. 318
All Critical High Medium Low Exploited only Public exploit

30 results · Clear filters · Feed

  • Unscored —
    CVE-2006-7173 Public exploit

    Direct static code injection vulnerability in admin.php in PHP-Stats 0.1.9.1b and earlier allows remote attackers to ex…

  • Unscored —
    CVE-2006-7172 Public exploit

    Multiple SQL injection vulnerabilities in php-stats.recphp.php in PHP-Stats 0.1.9.1b and earlier allow remote attackers…

  • Unscored —
    CVE-2007-1548 Public exploit

    SQL injection vulnerability in functions/functions_filters.asp in Web Wiz Forums before 8.05a (MySQL version) does not …

  • Unscored —
    CVE-2007-1553 Public exploit

    admin/configuration.php in Guestbara 1.2 and earlier allows remote attackers to modify the e-mail, name, and password o…

  • Unscored —
    CVE-2007-1542 Public exploit

    Unspecified vulnerability in the Cisco IP Phone 7940 and 7960 running firmware before POS8-6-0 allows remote attackers …

  • Unscored —
    CVE-2007-1552 Public exploit

    Unrestricted file upload vulnerability in usercp.php in MetaForum 0.513 Beta restricts file types based on the MIME typ…

  • Unscored —
    CVE-2007-1540 Public exploit

    Directory traversal vulnerability in am.pl in (1) SQL-Ledger 2.6.27 and earlier, and (2) LedgerSMB before 1.2.0, allows…

    sql-ledger Debian
  • Unscored —
    CVE-2007-1550 Public exploit

    Multiple SQL injection vulnerabilities in phpx 3.5.15 allow remote attackers to execute arbitrary SQL commands via the …

  • Unscored —
    CVE-2007-1555 Public exploit

    SQL injection vulnerability in forum.php in the Minerva mod 2.0.21 build 238a and earlier for phpBB allows remote attac…

  • Unscored —
    CVE-2007-1539 Public exploit

    Directory traversal vulnerability in inc/map.func.php in pragmaMX Landkarten 2.1 module allows remote attackers to incl…

  • Unscored —
    CVE-2007-1517 Public exploit

    SQL injection vulnerability in comments.php in WSN Guest 1.02 and 1.21 allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2007-1522 Public exploit

    Double free vulnerability in the session extension in PHP 5.2.0 and 5.2.1 allows context-dependent attackers to execute…

  • Unscored —
    CVE-2007-1518 Public exploit

    SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arb…

  • Unscored —
    CVE-2007-1531 Public exploit EPSS 23%

    Microsoft Windows XP and Vista overwrites ARP table entries included in gratuitous ARP, which allows remote attackers t…

  • Unscored —
    CVE-2007-1524 Public exploit

    Directory traversal vulnerability in themes/default/ in ZomPlog 3.7.6 and earlier allows remote attackers to include ar…

  • Unscored —
    CVE-2007-1521 Public exploit

    Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbi…

  • Unscored —
    CVE-2007-1525 Public exploit EPSS 38%

    Direct static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows remote attackers to execute…

  • Unscored —
    CVE-2007-1536 Public exploit EPSS 14%

    Integer underflow in the file_printf function in the "file" program before 4.20 allows user-assisted attackers to execu…

    file Debian
  • Unscored —
    CVE-2006-7170 Public exploit

    Multiple SQL injection vulnerabilities in Koan Software Mega Mall allow remote attackers to execute arbitrary SQL comma…

  • Unscored —
    CVE-2006-7168 Public exploit

    PHP remote file inclusion vulnerability in includes/not_mem.php in the Add Name module for PHP allows remote attackers …

  • Unscored —
    CVE-2006-7167 Public exploit

    Unspecified vulnerability in ProRat Server 1.9 Fix2 allows remote attackers to bypass the authentication mechanism for …

  • Unscored —
    CVE-2006-7169 Public exploit

    PHP remote file inclusion vulnerability in includes/header_simple.php in Ultimate PHP Board (UPB) 2.0 and earlier allow…

  • Unscored —
    CVE-2007-1515 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Horde IMP H3 4.1.3, and possibly earlier, allow remote attackers…

  • Unscored —
    CVE-2007-1508 Public exploit

    Cross-site scripting (XSS) vulnerability in CMD_USER_STATS in DirectAdmin allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2007-1511 Public exploit

    Buffer overflow in FrontBase Relational Database Server 4.2.7 and earlier allows remote authenticated users, with privi…

  • Unscored —
    CVE-2007-1516 Public exploit

    PHP remote file inclusion vulnerability in functions/update.php in Cicoandcico CcMail 1.0 allows remote attackers to ex…

  • Unscored —
    CVE-2007-1510 Public exploit

    SQL injection vulnerability in post.php in Particle Blogger 1.0.0 through 1.2.0 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2007-1514 Public exploit

    PHP remote file inclusion vulnerability in index.php in ViperWeb Portal alpha 0.1 allows remote attackers to execute ar…

  • Unscored —
    CVE-2007-1509 Public exploit

    Directory traversal vulnerability in enkrypt.php in Sascha Schroeder krypt (aka Holtstraeter Rot 13) allows remote atta…

  • Unscored —
    CVE-2007-1513 Public exploit

    PHP remote file inclusion vulnerability in comanda.php in GraFX Company WebSite Builder (CWB) PRO 1.9.8, when register_…