Skip to content
OpenAdvisories

Archive

April 2007

Vulnerabilities first published in this month (UTC), newest first.

  1. 1 
  2. 235
  3. 335
  4. 48
  5. 5 
  6. 626
  7. 7 
  8. 8 
  9. 95
  10. 1049
  11. 1139
  12. 1249
  13. 1314
  14. 14 
  15. 15 
  16. 1626
  17. 17 
  18. 1885
  19. 1923
  20. 20 
  21. 21 
  22. 2215
  23. 23 
  24. 2462
  25. 2545
  26. 2640
  27. 2728
  28. 28 
  29. 29 
  30. 3047

264 results · Clear filters · Feed

  • Unscored —
    CVE-2007-2298 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Garennes 0.6.1 and earlier allow remote attackers to execute arbi…

  • Unscored —
    CVE-2007-2303 Public exploit

    Directory traversal vulnerability in includes/footer.php in News Manager Deluxe (NMDeluxe) 1.0.1 allows remote attacker…

  • Unscored —
    CVE-2007-2307 Public exploit

    PHP remote file inclusion vulnerability in engine/engine.inc.php in WebKalk2 1.9.0 allows remote attackers to execute a…

  • Unscored —
    CVE-2007-2300 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Endy Kristanto Surat kabar / News Management Online (aka phpwebn…

  • Unscored —
    CVE-2007-1683 Public exploit EPSS 38%

    Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail IMMenuShellExt ActiveX control (ImShExt.…

  • Unscored —
    CVE-2007-2293 Public exploit EPSS 24%

    Multiple stack-based buffer overflows in the process_sdp function in chan_sip.c of the SIP channel T.38 SDP parser in A…

  • Unscored —
    CVE-2007-2288 Public exploit

    PHP remote file inclusion vulnerability in info.php in Doruk100.net doruk100net allows remote attackers to execute arbi…

  • Unscored —
    CVE-2007-2284 Public exploit

    Buffer overflow in ABC-View Manager 1.42 allows user-assisted remote attackers to execute arbitrary code via a crafted …

  • Unscored —
    CVE-2007-2285 Public exploit EPSS 12%

    Directory traversal vulnerability in examples/layout/feed-proxy.php in Jack Slocum Ext 1.0 alpha1 (Ext JS) allows remot…

  • Unscored —
    CVE-2007-2287 Public exploit

    PHP remote file inclusion vulnerability in accept.php in comus 2.0 Final allows remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2007-2283 Public exploit

    Buffer overflow in Fresh View 7.15 allows user-assisted remote attackers to execute arbitrary code via a crafted .PSP f…

  • Unscored —
    CVE-2007-2290 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers t…

  • Unscored —
    CVE-2007-2274 Public exploit

    The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service (CPU consumption and ap…

  • Unscored —
    CVE-2007-2272 Public exploit

    PHP remote file inclusion vulnerability in docs/front-end-demo/cart2.php in Advanced Webhost Billing System (AWBS) 2.4.…

  • Unscored —
    CVE-2007-2273 Public exploit

    PHP remote file inclusion vulnerability in include/loading.php in Alessandro Lulli wavewoo 0.1.1 allows remote attacker…

  • Unscored —
    CVE-2007-2268 Public exploit

    Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0, and 8.1.1 allow remote attackers…

  • Unscored —
    CVE-2007-2270 Public exploit

    The Linksys SPA941 VoIP Phone allows remote attackers to cause a denial of service (device reboot) via a 0377 (0xff) ch…

  • Unscored —
    CVE-2007-2271 Public exploit

    Directory traversal vulnerability in Rajneel Lal TotaRam USP FOSS Distribution 1.01 allows remote attackers to read arb…

  • Unscored —
    CVE-2007-2139 Public exploit EPSS 78%

    Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve M…

  • Unscored —
    CVE-2007-2259 Public exploit

    SQL injection vulnerability in forum.php in EsForum 3.0 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2007-2256 Public exploit

    Cross-site scripting (XSS) vulnerability in you.php in TJSChat 0.95 allows remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2007-2257 Public exploit

    PHP remote file inclusion vulnerability in subscp.php in Fully Modded phpBB2 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2007-2258 Public exploit

    PHP remote file inclusion vulnerability in includes/init.inc.php in PHPMyBibli allows remote attackers to execute arbit…

  • Unscored —
    CVE-2007-2252 Public exploit

    Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to…

  • Unscored —
    CVE-2007-2262 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in html/php/detail.php in Sinato jmuffin allow remote attackers to e…

  • Unscored —
    CVE-2007-2250 Public exploit

    admin.php in Phorum before 5.1.22 allows remote attackers to obtain the full path via the module[] parameter.

  • Unscored —
    CVE-2007-2248 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Phorum before 5.1.22 allow remote attackers to inje…

  • Unscored —
    CVE-2007-2247 Public exploit

    SQL injection vulnerability in modules/news/article.php in phpMySpace Gold 8.10 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2007-2244 Public exploit EPSS 32%

    Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote atta…

  • Unscored —
    CVE-2007-2249 Public exploit

    include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to gain privileges via a…

  • Unscored —
    CVE-2007-2233 Public exploit

    cosign-bin/cosign.cgi in Cosign 2.0.2 and earlier allows remote authenticated users to perform unauthorized actions as …

  • Unscored —
    CVE-2007-2232 Public exploit

    The CHECK command in Cosign 2.0.1 and earlier allows remote attackers to bypass authentication requirements via CR (\r)…

  • Unscored —
    CVE-2007-2201 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Post Revolution 6.6 and 7.0 RC2 allow remote attackers to execute…

  • Unscored —
    CVE-2007-2207 Public exploit

    SQL injection vulnerability in contact/index.php in Ripe Website Manager 0.8.4 and earlier allows remote attackers to e…

  • Unscored —
    CVE-2007-2211 Public exploit

    SQL injection vulnerability in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and earlier allows remote attackers to …

  • Unscored —
    CVE-2007-2202 Public exploit

    PHP remote file inclusion vulnerability in inc_ACVS/SOAP/Transport.php in Accueil et Conseil en Visites et Sejours Web …

  • Unscored —
    CVE-2007-2212 Public exploit

    Multiple SQL injection vulnerabilities in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and earlier allow remote att…

  • Unscored —
    CVE-2007-2210 Public exploit

    A certain ActiveX control in askPopStp.dll in Netsprint Ask IE Toolbar 1.1 allows remote attackers to cause a denial of…

  • Unscored —
    CVE-2007-2204 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in GPL PHP Board (GPB) unstable-2001.11.14-1 allow remote attackers …

  • Unscored —
    CVE-2007-2200 Public exploit EPSS 10%

    Directory traversal vulnerability in navigator/navigator_ok.php in Pagode 0.5.8 allows remote attackers to read and pos…