Skip to content
OpenAdvisories

Archive

27 April 2007

Vulnerabilities first published on this day (UTC), newest first.

← March 2007 2007 / April /27 May 2007 →
  1. 1 
  2. 235
  3. 335
  4. 48
  5. 5 
  6. 626
  7. 7 
  8. 8 
  9. 95
  10. 1049
  11. 1139
  12. 1249
  13. 1314
  14. 14 
  15. 15 
  16. 1626
  17. 17 
  18. 1885
  19. 1923
  20. 20 
  21. 21 
  22. 2215
  23. 23 
  24. 2462
  25. 2545
  26. 2640
  27. 2728
  28. 28 
  29. 29 
  30. 3047
All Critical High Medium Low Exploited only Public exploit

28 results · Feed

  • Unscored —
    CVE-2007-2348

    mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might allow remote user-assist…

    lftp Debian
  • Unscored —
    CVE-2007-2345 Public exploit

    PHP remote file inclusion vulnerability in include/include_stream.inc.php in CodeWand phpBrowse allows remote attackers…

  • Unscored —
    CVE-2007-2347 Public exploit

    PHP remote file inclusion vulnerability in main/forum/komentar.php in OneClick CMS (aka Sisplet CMS) 05.10 and earlier …

  • Unscored —
    CVE-2007-2346 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in PHP-Generics 1.0 beta allow remote attackers to execute arbitrary…

  • Unscored —
    CVE-2007-2344

    The BOOTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and possibly earlier, on Win…

  • Unscored —
    CVE-2007-2343

    Stack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1…

  • Unscored —
    CVE-2007-2335

    Cross-site scripting (XSS) vulnerability in the RSS feed reader functionality in Lunascape 4.1.3 build2 and earlier all…

  • Unscored —
    CVE-2007-2333

    Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before …

  • Unscored —
    CVE-2007-2342 Public exploit

    SQL injection vulnerability in error.asp in CreaScripts CreaDirectory 1.2 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2007-2336

    Unspecified vulnerability in InterVations NaviCOPA Web Server 2.01 20070323 allows remote attackers to cause a denial o…

  • Unscored —
    CVE-2007-2341 Public exploit

    PHP remote file inclusion vulnerability in suite/index.php in phpBandManager 0.8 allows remote attackers to execute arb…

  • Unscored —
    CVE-2007-2338 Public exploit

    Cross-site request forgery (CSRF) vulnerability in include/admin/banlist.php in Phorum before 5.1.22 allows remote atta…

  • Unscored —
    CVE-2007-2334

    Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before 5_05.304, and 6.x before …

  • Unscored —
    CVE-2007-2340 Public exploit EPSS 42%

    Multiple PHP remote file inclusion vulnerabilities in inc/include_all.inc.php in phporacleview allow remote attackers t…

  • Unscored —
    CVE-2007-2339 Public exploit

    Multiple SQL injection vulnerabilities in Phorum before 5.1.22 allow remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2007-2337 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Exponent CMS 0.96.6 Alpha and earlier allow remote attackers to …

  • Unscored —
    CVE-2007-2332

    Nortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 6_05.140 uses a fixed DES key to encrypt passwords,…

  • Unscored —
    CVE-2007-2327 Public exploit

    PHP remote file inclusion vulnerability in _editor.php in HTMLeditbox 2.2 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2007-2323

    Multiple buffer overflows in the WinDVDX ActiveX control in InterVideo Home Theater 2.1.13.0 and 2.5.13.58 allow remote…

  • Unscored —
    CVE-2007-2331

    PHP remote file inclusion vulnerability in cart.php in Shop-Script 2.0 allows remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2007-2329

    PHP remote file inclusion vulnerability in searchbot.php in Searchactivity allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2007-2330 Public exploit

    PHP remote file inclusion vulnerability in includes_handler.php in DynaTracker 151 allows remote attackers to execute a…

  • Unscored —
    CVE-2007-2325 Public exploit

    PHP remote file inclusion vulnerability in include.php in MyNewsGroups :) allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2007-2328

    PHP remote file inclusion vulnerability in addvip.php in phpMYTGP 1.4b allows remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2007-2322

    NMMediaServer.exe in Nero MediaHome 2.5.5.0 and CE 1.3.0.4 allows remote attackers to cause a denial of service (NULL d…

  • Unscored —
    CVE-2007-2326 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in HYIP Manager Pro allow remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2007-2321

    Unspecified vulnerability in the search functionality in SilverStripe 2.0.0 has unknown impact and attack vectors.

  • Unscored —
    CVE-2007-2324 Public exploit

    Directory traversal vulnerability in file.php in JulmaCMS 1.4 allows remote attackers to read arbitrary files via a .. …