Archive
March 2007
Vulnerabilities first published in this month (UTC), newest first.
300 results · Clear filters · Feed
-
Unscored —CVE-2007-1596 Public exploit
Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book (com_nfn_addressbook) 0.4 component for Mamb…
-
Unscored —CVE-2007-1606 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in w-Agora (Web-Agora) allow remote attackers to inject arbitrary w…
-
Unscored —CVE-2007-1577 Public exploit
Directory traversal vulnerability in index.php in GeBlog 0.1 allows remote attackers to include and execute arbitrary l…
-
Unscored —CVE-2007-1580 Public exploit
FTPDMIN 0.96 allows remote attackers to cause a denial of service (daemon crash) via a LIST command for a Windows drive…
-
Unscored —CVE-2007-1581 Public exploit
The resource system in PHP 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrup…
-
Unscored —
Stack-based buffer overflow in Atrium MERCUR IMAPD allows remote attackers to have an unknown impact via a certain SUBS…
-
Unscored —CVE-2007-1584 Public exploit
Buffer underflow in the header function in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by pa…
-
Unscored —CVE-2007-1583 Public exploit
The mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register_globals flag an…
-
Unscored —
Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD (mcrimap4.exe) 5.00.14, with SP4, …
-
Unscored —CVE-2007-1590 Public exploit
The Grandstream BudgeTone 200 IP phone, with program 1.1.1.14 and bootloader 1.1.1.5, allows remote attackers to cause …
-
Unscored —CVE-2007-1582 Public exploit
The resource system in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to execute ar…
-
Unscored —CVE-2007-1586 Public exploit
ZynOS 3.40 allows remote attackers to cause a denial of service (link restart) by sending a request for the name \M via…
-
Unscored —
Stack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers to cause a denial of …
-
Unscored —CVE-2007-1571 Public exploit
PHP remote file inclusion vulnerability in includes/base.php in Radical Designs Activist Mobilization Platform (AMP) 3.…
-
Unscored —CVE-2007-1572 Public exploit
SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2007-1568 Public exploit
Stack-based buffer overflow in DaanSystems NewsReactor 20070220.21 allows remote attackers to execute arbitrary code vi…
-
Unscored —CVE-2007-1569 Public exploit
Stack-based buffer overflow in NewsBin Pro 4.32 allows remote attackers to cause a denial of service or execute arbitra…
-
Unscored —
Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio C…
-
Unscored —
The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to fo…
-
Unscored —
The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of servic…
-
Unscored —CVE-2007-1563 Public exploit
The FTP protocol implementation in Opera 9.10 allows remote attackers to allows remote servers to force the client to c…
-
Unscored —CVE-2007-1566 Public exploit
SQL injection vulnerability in News/page.asp in NetVIOS Portal allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2007-1564 Public exploit
The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other server…
-
Unscored —CVE-2007-1556 Public exploit
SQL injection vulnerability in kommentare.php in Creative Files 1.2 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2006-7173 Public exploit
Direct static code injection vulnerability in admin.php in PHP-Stats 0.1.9.1b and earlier allows remote attackers to ex…
-
Unscored —CVE-2006-7172 Public exploit
Multiple SQL injection vulnerabilities in php-stats.recphp.php in PHP-Stats 0.1.9.1b and earlier allow remote attackers…
-
Unscored —CVE-2007-1548 Public exploit
SQL injection vulnerability in functions/functions_filters.asp in Web Wiz Forums before 8.05a (MySQL version) does not …
-
Unscored —CVE-2007-1553 Public exploit
admin/configuration.php in Guestbara 1.2 and earlier allows remote attackers to modify the e-mail, name, and password o…
-
Unscored —CVE-2007-1542 Public exploit
Unspecified vulnerability in the Cisco IP Phone 7940 and 7960 running firmware before POS8-6-0 allows remote attackers …
-
Unscored —CVE-2007-1552 Public exploit
Unrestricted file upload vulnerability in usercp.php in MetaForum 0.513 Beta restricts file types based on the MIME typ…
-
Unscored —CVE-2007-1540 Public exploit
Directory traversal vulnerability in am.pl in (1) SQL-Ledger 2.6.27 and earlier, and (2) LedgerSMB before 1.2.0, allows…
-
Unscored —CVE-2007-1550 Public exploit
Multiple SQL injection vulnerabilities in phpx 3.5.15 allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2007-1555 Public exploit
SQL injection vulnerability in forum.php in the Minerva mod 2.0.21 build 238a and earlier for phpBB allows remote attac…
-
Unscored —CVE-2007-1539 Public exploit
Directory traversal vulnerability in inc/map.func.php in pragmaMX Landkarten 2.1 module allows remote attackers to incl…
-
Unscored —CVE-2007-1517 Public exploit
SQL injection vulnerability in comments.php in WSN Guest 1.02 and 1.21 allows remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2007-1522 Public exploit
Double free vulnerability in the session extension in PHP 5.2.0 and 5.2.1 allows context-dependent attackers to execute…
-
Unscored —CVE-2007-1518 Public exploit
SQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote attackers to execute arb…
-
Unscored —
Microsoft Windows XP and Vista overwrites ARP table entries included in gratuitous ARP, which allows remote attackers t…
-
Unscored —CVE-2007-1524 Public exploit
Directory traversal vulnerability in themes/default/ in ZomPlog 3.7.6 and earlier allows remote attackers to include ar…
-
Unscored —CVE-2007-1521 Public exploit
Double free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent attackers to execute arbi…