Skip to content
OpenAdvisories

Archive

March 2007

Vulnerabilities first published in this month (UTC), newest first.

← February 2007 2007 / March April 2007 →
  1. 1 
  2. 230
  3. 345
  4. 43
  5. 513
  6. 636
  7. 760
  8. 812
  9. 94
  10. 1045
  11. 11 
  12. 1210
  13. 1332
  14. 1419
  15. 151
  16. 1638
  17. 171
  18. 18 
  19. 1910
  20. 2063
  21. 2144
  22. 2221
  23. 2329
  24. 2420
  25. 25 
  26. 264
  27. 2724
  28. 2824
  29. 291
  30. 3035
  31. 318
All Critical High Medium Low Exploited only Public exploit

632 results · Feed

  • Unscored —
    CVE-2007-1437

    Unspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote attackers to overwrite f…

    sql-ledger Debian
  • Unscored —
    CVE-2007-1387

    The DirectShow loader (loader/dshow/DS_VideoDecoder.c) in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set…

    mplayer Debian
  • Unscored —
    CVE-2007-1433 Public exploit

    Cross-site scripting (XSS) vulnerability in Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attacker…

  • Unscored —
    CVE-2007-1432 Public exploit

    Grayscale Blog 0.8.0, and possibly earlier versions, allows remote attackers to gain privileges via direct requests wit…

  • Unscored —
    CVE-2007-1429

    Multiple PHP remote file inclusion vulnerabilities in Moodle 1.7.1 allow remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2007-1427 Public exploit

    Directory traversal vulnerability in download_pdf.php in AssetMan 2.4a and earlier allows remote attackers to read arbi…

  • Unscored —
    CVE-2007-1425 Public exploit

    SQL injection vulnerability in index.php in Triexa SonicMailer Pro 3.2.3 and earlier allows remote attackers to execute…

  • Unscored —
    CVE-2007-1423 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in WORK system e-commerce 3.0.5 and earlier allow remote attackers t…

  • Unscored —
    CVE-2007-1430 Public exploit

    PHP remote file inclusion vulnerability in include/adodb-connection.inc.php in ClipShare 1.5.3 allows remote attackers …

  • Unscored —
    CVE-2007-1424 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Softnews Media Group DataLife Engine allow remote attackers to ex…

  • Unscored —
    CVE-2007-1422 Public exploit

    SQL injection vulnerability in goster.asp in fystyq Duyuru Scripti allows remote attackers to execute arbitrary SQL com…

  • Unscored —
    CVE-2007-1426

    The web interface in AstroCam 2.0.0 through 2.6.5 allows remote attackers to cause a denial of service (daemon shutdown…

  • Unscored —
    CVE-2007-1421 Public exploit EPSS 12%

    Multiple PHP remote file inclusion vulnerabilities in Premod SubDog 2 allow remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2007-1428 Public exploit

    SQL injection vulnerability in search.php in PHP Labs JobSitePro 1.0 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2007-1000 Public exploit

    The ipv6_getsockopt_sticky function in net/ipv6/ipv6_sockglue.c in the Linux kernel before 2.6.20.2 allows local users …

  • Unscored —
    CVE-2007-1416 Public exploit

    PHP remote file inclusion vulnerability in createurl.php in JCcorp (aka James Coyle) URLshrink allows remote attackers …

  • Unscored —
    CVE-2007-1418

    Cross-site scripting (XSS) vulnerability in skins/ace/popup-notopic.php in MindTouch OpenGarden DekiWiki before Goosebe…

  • Unscored —
    CVE-2007-1415 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in PMB Services 3.0.13 and earlier allow remote attackers to execute…

  • Unscored —
    CVE-2007-1420 Public exploit

    MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information_sche…

  • Unscored —
    CVE-2007-1414

    Multiple PHP remote file inclusion vulnerabilities in Coppermine Photo Gallery (CPG) allow remote attackers to execute …

  • Unscored —
    CVE-2007-1413 Public exploit EPSS 11%

    Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probabl…

  • Unscored —
    CVE-2007-1412 Public exploit

    The cpdf_open function in the ClibPDF (cpdf) extension in PHP 4.4.6 allows context-dependent attackers to obtain sensit…

  • Unscored —
    CVE-2007-1417 Public exploit

    SQL injection vulnerability in index.php in HC NEWSSYSTEM 1.0-4 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2007-1419

    The Java Management Extensions Remote API Remote Method Invocation over Internet Inter-ORB Protocol (JMX RMI-IIOP) API …

  • Unscored —
    CVE-2007-1399 Public exploit EPSS 20%

    Stack-based buffer overflow in the zip:// URL wrapper in PECL ZIP 1.8.3 and earlier, as bundled with PHP 5.2.0 and 5.2.…

  • Unscored —
    CVE-2007-1396

    The import_request_variables function in PHP 4.0.7 through 4.4.6, and 5.x before 5.2.2, when called without a prefix, d…

  • Unscored —
    CVE-2007-1394 Public exploit

    Direct static code injection vulnerability in startsession.php in Flat Chat 2.0 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2007-1395

    Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cr…

    phpmyadmin Debian
  • Unscored —
    CVE-2007-1401 Public exploit

    Buffer overflow in the crack extension (CrackLib), as bundled with PHP 4.4.6 and other versions before 5.0.0, might all…

  • Unscored —
    CVE-2007-1400

    Plash permits sandboxed processes to open /dev/tty, which allows local users to escape sandbox restrictions and execute…

  • Unscored —
    CVE-2007-1404 Public exploit EPSS 68%

    tftpd.exe in ProSysInfo TFTP Server TFTPDWIN 0.4.2 allows remote attackers to cause a denial of service via a long UDP …

  • Unscored —
    CVE-2007-1391 Public exploit

    PHP remote file inclusion vulnerability in modules/abook/foldertree.php in Leo West WEBO (aka weborganizer) 1.0 allows …

  • Medium 6.1
    CVE-2007-1405

    Trac Cross-site Scripting (XSS) vulnerability

    Cross-site scripting (XSS) vulnerability in the "download wiki page as text" feature in Trac before 0.10.3.1, when Microsoft Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.

    trac trac Debian PyPI
  • Unscored —
    CVE-2007-1398 Public exploit

    The frag3 preprocessor in Snort 2.6.1.1, 2.6.1.2, and 2.7.0 beta, when configured for inline use on Linux without the i…

  • Unscored —
    CVE-2007-1411 Public exploit

    Buffer overflow in PHP 4.4.6 and earlier, and unspecified PHP 5 versions, allows local and possibly remote attackers to…

  • Unscored —
    CVE-2007-1397 Public exploit

    Multiple stack-based buffer overflows in the (1) ExtractRnick and (2) decrypt_topic_332 functions in FiSH allow remote …

    fish Wolfi
  • Unscored —
    CVE-2007-1390

    Multiple cross-site scripting (XSS) vulnerabilities in dynaliens 2.0 and 2.1 allow remote attackers to inject arbitrary…

  • Unscored —
    CVE-2007-1392 Public exploit

    Directory traversal vulnerability in down.php in netForo! 0.1g allows remote attackers to read arbitrary files via a ..…

  • Unscored —
    CVE-2007-1409

    WordPress allows remote attackers to obtain sensitive information via a direct request for wp-admin/admin-functions.php…

  • Unscored —
    CVE-2007-1408

    Multiple vulnerabilities in (1) bank.php, (2) landfill.php, (3) outposts.php, (4) tribes.php, (5) house.php, (6) tribea…