Skip to content
OpenAdvisories

Archive

March 2007

Vulnerabilities first published in this month (UTC), newest first.

300 results · Clear filters · Feed

  • Unscored —
    CVE-2006-7098 Public exploit

    The Debian GNU/Linux 033_-F_NO_SETSID patch for the Apache HTTP Server 1.3.34-4 does not properly disassociate httpd fr…

  • Unscored —
    CVE-2006-7099 Public exploit

    Directory traversal vulnerability in index.php in SolarPay allows remote attackers to read certain files via a .. (dot …

  • Unscored —
    CVE-2007-1242 Public exploit

    SQL injection vulnerability in system/index.php in Audins Audiens 3.3 allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2007-1241 Public exploit

    Cross-site scripting (XSS) vulnerability in setup.php in Audins Audiens 3.3 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2007-1231 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.0 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2007-1240 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Docebo CMS 3.0.3 through 3.0.5 allow remote attackers to inject …

  • Unscored —
    CVE-2007-1232 Public exploit EPSS 38%

    Directory traversal vulnerability in SQLiteManager 1.2.0 allows remote attackers to read arbitrary files via a .. (dot …

  • Unscored —
    CVE-2007-1233 Public exploit

    PHP remote file inclusion vulnerability in downloadcounter.php in STWC-Counter 3.4.0.0 and earlier allows remote attack…

  • Unscored —
    CVE-2007-1244 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the AdminPanel in WordPress 2.1.1 and earlier allows remote attacker…

  • Unscored —
    CVE-2007-1243 Public exploit

    Audins Audiens 3.3 allows remote attackers to bypass authentication and perform certain privileged actions, possibly an…

  • Unscored —
    CVE-2007-1229 Public exploit

    Cross-site scripting (XSS) vulnerability in the Nullsoft ShoutcastServer 1.9.7 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2007-1227 Public exploit

    VShieldCheck in McAfee VirusScan for Mac (Virex) before 7.7 patch 1 allow local users to change permissions of arbitrar…

  • Unscored —
    CVE-2007-1224 Public exploit

    Grok Developments NetProxy 4.03 allows remote attackers to bypass URL filtering via a request that omits "http://" from…

  • Unscored —
    CVE-2007-1225 Public exploit

    The connection log file implementation in Grok Developments NetProxy 4.03 does not record requests that omit http:// in…

  • Unscored —
    CVE-2007-1219 Public exploit

    PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute ar…

  • Unscored —
    CVE-2007-1190 Public exploit

    Unspecified vulnerability in the EmbeddedWB Web Browser ActiveX control allows remote attackers to execute arbitrary co…

  • Unscored —
    CVE-2007-1195 Public exploit

    Multiple buffer overflows in XM Easy Personal FTP Server 5.3.0 allow remote attackers to execute arbitrary code via uns…

  • Unscored —
    CVE-2007-1192 Public exploit

    Thomas R. Pasawicz HyperBook Guestbook 1.30 stores sensitive information under the web root with insufficient access co…

  • Unscored —
    CVE-2007-1199 Public exploit

    Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as d…

  • Unscored —
    CVE-2007-1189 Public exploit

    Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite…