Skip to content
OpenAdvisories

Archive

23 March 2007

Vulnerabilities first published on this day (UTC), newest first.

← February 2007 2007 / March /23 April 2007 →
  1. 1 
  2. 230
  3. 345
  4. 43
  5. 513
  6. 636
  7. 760
  8. 812
  9. 94
  10. 1045
  11. 11 
  12. 1210
  13. 1332
  14. 1419
  15. 151
  16. 1638
  17. 171
  18. 18 
  19. 1910
  20. 2063
  21. 2144
  22. 2221
  23. 2329
  24. 2420
  25. 25 
  26. 264
  27. 2724
  28. 2824
  29. 291
  30. 3035
  31. 318
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • Unscored —
    CVE-2007-1639

    Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allows remote authenticat…

  • Unscored —
    CVE-2007-1640 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in ClassWeb 2.03 and earlier allow remote attackers to execute arbit…

  • Unscored —
    CVE-2007-1641 Public exploit

    SQL injection vulnerability in index.php in PortailPHP 2.0 allows remote attackers to execute arbitrary SQL commands vi…

  • Unscored —
    CVE-2007-1638

    Multiple cross-site request forgery (CSRF) vulnerabilities in the check_csrftoken function in lib/lib.inc.php in PHProj…

  • Unscored —
    CVE-2007-1635 Public exploit

    Static code injection vulnerability in admin/settings.php in Net Portal Dynamic System (NPDS) 5.10 and earlier allows r…

  • Unscored —
    CVE-2007-1634 Public exploit

    Variable extraction vulnerability in grab_globals.php in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remot…

  • Unscored —
    CVE-2007-1636 Public exploit

    Directory traversal vulnerability in index.php in RoseOnlineCMS 3 B1 allows remote attackers to include arbitrary files…

  • Unscored —
    CVE-2007-1637

    Multiple buffer overflows in the IMAILAPILib ActiveX control (IMailAPI.dll) in Ipswitch IMail Server before 2006.2 allo…

  • Unscored —
    CVE-2007-1633 Public exploit

    Directory traversal vulnerability in bbcode_ref.php in the Giorgio Ciranni Splatt Forum 4.0 RC1 module for PHP-Nuke all…

  • Unscored —
    CVE-2007-1628 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Study planner (Studiewijzer) 0.15 and earlier, when register_glob…

  • Unscored —
    CVE-2007-1623

    Multiple cross-site scripting (XSS) vulnerabilities in realGuestbook 5.01, when register_globals is enabled, allow remo…

  • Unscored —
    CVE-2007-1625

    Cross-site scripting (XSS) vulnerability in save_entry.php in realGuestbook 5.01 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2007-1629 Public exploit

    SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows remote attackers to execut…

  • Unscored —
    CVE-2007-1630 Public exploit

    SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Link Engine allows remote attackers to execute …

  • Unscored —
    CVE-2007-1624

    Multiple SQL injection vulnerabilities in realGuestbook 5.01 allow remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2007-1631

    PHP remote file inclusion vulnerability in signup.php in CLBOX 1.01 allows remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2007-1632

    Unspecified vulnerability in TYPOlight webCMS before 2.2 Build 5 has unknown impact and attack vectors related to a "ma…

  • Unscored —
    CVE-2007-1626 Public exploit

    PHP remote file inclusion vulnerability in iframe.php in the iFrame Module for PHP-NUKE allows remote attackers to exec…

  • Unscored —
    CVE-2007-1617 Public exploit

    SQL injection vulnerability in index.php in ScriptMagix Recipes 2.0 and earlier allows remote attackers to execute arbi…

  • Unscored —
    CVE-2007-1616 Public exploit

    SQL injection vulnerability in index.php in ScriptMagix Lyrics 2.0 and earlier allows remote attackers to execute arbit…

  • Unscored —
    CVE-2007-1615 Public exploit

    SQL injection vulnerability in index.php in ScriptMagix Jokes 2.0 and earlier allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2007-1614

    Stack-based buffer overflow in the zzip_open_shared_io function in zzip/file.c in ZZIPlib Library before 0.13.49 allows…

    zziplib Debian
  • Unscored —
    CVE-2007-1613 Public exploit

    Directory traversal vulnerability in view.php in MPM Chat 2.5 allows remote attackers to include and execute arbitrary …

  • Unscored —
    CVE-2007-1612 Public exploit

    SQL injection vulnerability in index.php in Katalog Plyt Audio 1.0 and earlier allows remote attackers to execute arbit…

  • Unscored —
    CVE-2007-1622 Public exploit

    Cross-site scripting (XSS) vulnerability in wp-admin/vars.php in WordPress before 2.0.10 RC2, and before 2.1.3 RC2 in t…

    wordpress Debian
  • Unscored —
    CVE-2007-1619 Public exploit

    SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to …

  • Unscored —
    CVE-2007-1620 Public exploit EPSS 11%

    Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execut…

  • Unscored —
    CVE-2007-1621 Public exploit

    PHP remote file inclusion vulnerability in templates/head.php in Active PHP Bookmark Notes (APB) 0.2.5 and earlier allo…

  • Unscored —
    CVE-2007-1618 Public exploit

    SQL injection vulnerability in index.php in ScriptMagix FAQ Builder 2.0 and earlier allows remote attackers to execute …