Archive
21 March 2007
Vulnerabilities first published on this day (UTC), newest first.
44 results · Feed
-
Unscored —
Multiple stack-based buffer overflows in Atrium MERCUR IMAPD in MERCUR Mailserver before 4.2.15.0 allow remote attacker…
-
Unscored —CVE-2007-1577 Public exploit
Directory traversal vulnerability in index.php in GeBlog 0.1 allows remote attackers to include and execute arbitrary l…
-
Unscored —CVE-2007-1580 Public exploit
FTPDMIN 0.96 allows remote attackers to cause a denial of service (daemon crash) via a LIST command for a Windows drive…
-
Unscored —CVE-2007-1581 Public exploit
The resource system in PHP 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrup…
-
Unscored —
templates/config/mail.tpl in Tim Soderstrom StatsDawg 0.92 allows remote attackers to execute arbitrary programs by spe…
-
Unscored —
Stack-based buffer overflow in Atrium MERCUR IMAPD allows remote attackers to have an unknown impact via a certain SUBS…
-
Unscored —CVE-2007-1584 Public exploit
Buffer underflow in the header function in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by pa…
-
Unscored —CVE-2007-1583 Public exploit
The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag an…
-
Unscored —
Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD (mcrimap4.exe) 5.00.14, with SP4, …
-
Unscored —
TrueCrypt before 4.3, when set-euid mode is used on Linux, allows local users to cause a denial of service (filesystem …
-
Unscored —CVE-2007-1590 Public exploit
The Grandstream BudgeTone 200 IP phone, with program 1.1.1.14 and bootloader 1.1.1.5, allows remote attackers to cause …
-
Unscored —
server.cpp in MyServer 0.8.5 calls Process::setuid before calling Process::setgid and thus does not properly drop privi…
-
Unscored —CVE-2007-1582 Public exploit
The resource system in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to execute ar…
-
Unscored —
The Linksys WAG200G with firmware 1.01.01, WRT54GC 2 with firmware 1.00.7, and WRT54GC 1 with firmware 1.03.0 and earli…
-
Unscored —CVE-2007-1586 Public exploit
ZynOS 3.40 allows remote attackers to cause a denial of service (link restart) by sending a request for the name \M via…
-
Unscored —
Integer overflow in X MultiMedia System (xmms) 1.2.10, and possibly other versions, allows user-assisted remote attacke…
-
Unscored —
Integer underflow in X MultiMedia System (xmms) 1.2.10 allows user-assisted remote attackers to execute arbitrary code …
-
Unscored —
Format string vulnerability in the write_html function in calendar/gui/e-cal-component-memo-preview.c in Evolution Shar…
-
Unscored —
PHP remote file inclusion vulnerability in includes/functions.php in the Dimension module of phpBB allows remote attack…
-
Unscored —
Stack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers to cause a denial of …
-
Unscored —CVE-2007-1571 Public exploit
PHP remote file inclusion vulnerability in includes/base.php in Radical Designs Activist Mobilization Platform (AMP) 3.…
-
Unscored —
SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin 3.6.5 allows remote authenticated administra…
-
Unscored —CVE-2007-1572 Public exploit
SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2007-1568 Public exploit
Stack-based buffer overflow in DaanSystems NewsReactor 20070220.21 allows remote attackers to execute arbitrary code vi…
-
Unscored —
CARE2X 2.2, and possibly earlier, allows remote attackers to obtain configuration information via a direct request to p…
-
Unscored —CVE-2007-1569 Public exploit
Stack-based buffer overflow in NewsBin Pro 4.32 allows remote attackers to cause a denial of service or execute arbitra…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allow remote…
-
Unscored —
Multiple SQL injection vulnerabilities in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allow remote authenticate…
-
Unscored —
Stack-based buffer overflow in filter\starcalc\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite be…
-
Unscored —
w-agora 4.2.1 allows remote attackers to obtain sensitive information by via the (1) bn[] array parameter to index.php,…
-
Unscored —
Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio C…
-
Unscored —
OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacha…
-
Unscored —
The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to fo…
-
Unscored —
NETxAutomation NETxEIB OPC Server before 3.0.1300 does not properly validate OLE for Process Control (OPC) server handl…
-
Unscored —
The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of servic…
-
Unscored —
Konqueror 3.5.5 allows remote attackers to cause a denial of service (crash) by using JavaScript to read a child iframe…
-
Unscored —
Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code v…
-
Unscored —CVE-2007-1563 Public exploit
The FTP protocol implementation in Opera 9.10 allows remote attackers to allows remote servers to force the client to c…
-
Unscored —CVE-2007-1566 Public exploit
SQL injection vulnerability in News/page.asp in NetVIOS Portal allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2007-1564 Public exploit
The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other server…