Archive
March 2007
Vulnerabilities first published in this month (UTC), newest first.
300 results · Clear filters · Feed
-
Unscored —CVE-2007-1791 Public exploit
SQL injection vulnerability in wall.php in Picture-Engine 1.2.0 and earlier allows remote attackers to execute arbitrar…
-
Unscored —CVE-2007-1790 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Kaqoo Auction Software Free Edition allow remote attackers to exe…
-
Unscored —CVE-2007-1787 Public exploit
Multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php in Softerra Time-Assistant 6.2 and earlie…
-
Unscored —
The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute…
-
Unscored —CVE-2006-7183 Public exploit
PHP remote file inclusion vulnerability in styles.php in Exhibit Engine (EE) 1.22 and earlier allows remote attackers t…
-
Unscored —CVE-2006-7185 Public exploit
PHP remote file inclusion vulnerability in includes/user_standard.php in CMSmelborp Beta allows remote attackers to exe…
-
Unscored —CVE-2006-7184 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Exhibit Engine (EE) 1.22, and possibly earlier, allow remote atta…
-
Unscored —
Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attac…
-
Unscored —
Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Ser…
-
Unscored —CVE-2007-1773 Public exploit
Multiple directory traversal vulnerabilities in aBitWhizzy allow remote attackers to list arbitrary directories via a .…
-
Unscored —CVE-2007-1772 Public exploit
The FTP service in HP JetDirect print servers allows remote attackers to cause a denial of service (engine crash) via a…
-
Unscored —CVE-2007-1771 Public exploit
PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System Solutions Web Content Syst…
-
Unscored —CVE-2007-1776 Public exploit
SQL injection vulnerability in index.php in the DesignForJoomla.com D4J eZine (com_ezine) 2.8 and earlier component for…
-
Unscored —
Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code…
-
Unscored —CVE-2007-1778 Public exploit
PHP remote file inclusion vulnerability in db/mysql.php in the Eve-Nuke 0.1 (EN-Forums) module for PHP-Nuke allows remo…
-
Unscored —CVE-2007-1766 Public exploit
PHP remote file inclusion vulnerability in login/engine/db/profiledit.php in Advanced Login 0.76 and earlier allows rem…
-
Unscored —
Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code…
-
Unscored —
Buffer overflow in InterVations NaviCOPA HTTP Server 2.01 allows remote attackers to execute arbitrary code via a long …
-
Unscored —CVE-2007-1738 Public exploit
TrueCrypt 4.3, when installed setuid root, allows local users to cause a denial of service (filesystem unavailability) …
-
Unscored —CVE-2007-1735 Public exploit
Stack-based buffer overflow in Corel WordPerfect Office X3 (13.0.0.565) allows user-assisted remote attackers to execut…
-
Unscored —CVE-2007-1734 Public exploit
The DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later does not verif…
-
Unscored —
Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.…
-
Unscored —CVE-2007-1725 Public exploit
SQL injection vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to execute arbitrary SQL co…
-
Unscored —CVE-2007-1726 Public exploit
Unrestricted file upload vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to upload arbitr…
-
Unscored —CVE-2007-1730 Public exploit
Integer signedness error in the DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6…
-
Unscored —CVE-2007-1718 Public exploit
CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote atta…
-
Unscored —CVE-2007-1719 Public exploit
Buffer overflow in eject.c in Jason W. Bacon mcweject 0.9 on FreeBSD, and possibly other versions, allows local users t…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in C-Arbre 0.6PR7 and earlier allow remote attackers to execute arbi…
-
Unscored —CVE-2007-1720 Public exploit
Directory traversal vulnerability in addressbook.php in the Addressbook 1.2 module for PHP-Nuke allows remote attackers…
-
Unscored —CVE-2007-1717 Public exploit
The mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at the first ASCIIZ ('\0…
-
Unscored —CVE-2007-1712 Public exploit
SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to exec…
-
Unscored —CVE-2007-1715 Public exploit
PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers …
-
Unscored —CVE-2007-1714 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in CcCounter 2.0 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2007-1708 Public exploit
PHP remote file inclusion vulnerability in lib/db/ez_sql.php in ttCMS 4 and earlier allows remote attackers to execute …
-
Unscored —CVE-2007-1711 Public exploit
Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbi…
-
Unscored —CVE-2007-1702 Public exploit
PHP remote file inclusion vulnerability in mod_flatmenu.php in the Flatmenu 1.07 and earlier Mambo module allows remote…
-
Unscored —CVE-2007-1709 Public exploit
Buffer overflow in the confirm_phpdoc_compiled function in the phpDOC extension (PECL phpDOC) in PHP 5.2.1 allows conte…
-
Unscored —CVE-2007-1701 Public exploit
PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register_globals is enabled, allows context-dependent attackers to exe…
-
Unscored —CVE-2007-1696 Public exploit
SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execu…
-
Unscored —CVE-2007-1706 Public exploit
SQL injection vulnerability in eWebQuiz.asp in eWebQuiz 8 allows remote attackers to execute arbitrary SQL commands via…