Skip to content
OpenAdvisories

Archive

April 2007

Vulnerabilities first published in this month (UTC), newest first.

← March 2007 2007 / April May 2007 →
  1. 1 
  2. 235
  3. 335
  4. 48
  5. 5 
  6. 626
  7. 7 
  8. 8 
  9. 95
  10. 1049
  11. 1139
  12. 1249
  13. 1314
  14. 14 
  15. 15 
  16. 1626
  17. 17 
  18. 1885
  19. 1923
  20. 20 
  21. 21 
  22. 2215
  23. 23 
  24. 2462
  25. 2545
  26. 2640
  27. 2728
  28. 28 
  29. 29 
  30. 3047
All Critical High Medium Low Exploited only Public exploit

264 results · Clear filters · Feed

  • Unscored —
    CVE-2007-2209 Public exploit EPSS 12%

    Buffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel Paint Shop Pro Photo 11…

  • Unscored —
    CVE-2007-2205 Public exploit

    PHP remote file inclusion vulnerability in modules/rtmessageadd.php in LAN Management System (LMS) 1.5.3, and possibly …

  • Unscored —
    CVE-2007-2199 Public exploit EPSS 47%

    PHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar module 1.3 and 1.3.1 for V…

  • Unscored —
    CVE-2007-2187 Public exploit

    Stack-based buffer overflow in eXtremail 2.1.1 and earlier allows remote attackers to execute arbitrary code via a long…

  • Unscored —
    CVE-2007-2183 Public exploit

    SQL injection vulnerability in index.php in PHP-Ring Webring System (aka uPHP_ring_website) 0.9 allows remote attackers…

  • Unscored —
    CVE-2007-2180 Public exploit

    Buffer overflow in Nullsoft Winamp 5.3 allows user-assisted remote attackers to cause a denial of service (crash) via a…

  • Unscored —
    CVE-2007-2191 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in freePBX 2.2.x allow remote attackers to inject arbitrary web scr…

  • Unscored —
    CVE-2007-2194 Public exploit EPSS 19%

    Stack-based buffer overflow in XnView 1.90.3 allows user-assisted remote attackers to execute arbitrary code via a craf…

  • Unscored —
    CVE-2007-2184 Public exploit

    Directory traversal vulnerability in imgsrv.php in jchit counter 1.0.0 allows remote attackers to read arbitrary files …

  • Unscored —
    CVE-2007-2189 Public exploit

    PHP remote file inclusion vulnerability in admin/admin_album_otf.php in the MX Smartor Full Album Pack (FAP) 2.0 RC1 mo…

  • Unscored —
    CVE-2007-2181 Public exploit

    PHP remote file inclusion vulnerability in admin/login.php in Webinsta FM Manager 0.1.4 and earlier allows remote attac…

  • Unscored —
    CVE-2007-2192 Public exploit

    Buffer overflow in Photofiltre Studio 8.1.1 allows user-assisted remote attackers to execute arbitrary code via a craft…

  • Unscored —
    CVE-2007-2182 Public exploit

    Unrestricted file upload vulnerability in forum_write.php in Maran PHP Forum allows remote attackers to upload and exec…

  • Unscored —
    CVE-2007-2186 Public exploit

    Foxit Reader 2.0 allows remote attackers to cause a denial of service (application crash) via a crafted PDF document.

  • Unscored —
    CVE-2007-2193 Public exploit EPSS 37%

    Stack-based buffer overflow in the ID_X.apl plugin in ACDSee 9.0 Build 108, Pro 8.1 Build 99, and Photo Editor 4.0 Buil…

  • Unscored —
    CVE-2007-2195 Public exploit

    aMSN (aka Alvaro's Messenger) 0.96 and earlier allows remote attackers to cause a denial of service (application crash)…

  • Unscored —
    CVE-2007-2185 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Supasite 1.23b allow remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2007-2175 Public exploit EPSS 84%

    Apple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java is enabled, allows re…

  • Unscored —
    CVE-2007-2168 Public exploit

    Static code injection vulnerability in process.php in AimStats 3.2 and earlier allows remote attackers to inject PHP co…

  • Unscored —
    CVE-2007-2166 Public exploit

    PHP remote file inclusion vulnerability in administration/user/lib/group.inc.php in OpenSurveyPilot (osp) 1.2.1 and ear…

  • Unscored —
    CVE-2007-2167 Public exploit EPSS 44%

    Static code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to inject PHP code into conf…

  • Unscored —
    CVE-2007-2169 Public exploit

    Static code injection vulnerability in add.php in Mozzers SubSystem 1.0 allows remote attackers to inject PHP code into…

  • Unscored —
    CVE-2007-1690 Public exploit

    Multiple stack-based buffer overflows in Second Sight Software ActiveGS ActiveX control (ActiveGS.ocx) allow remote att…

  • Unscored —
    CVE-2007-1691 Public exploit

    Stack-based buffer overflow in Second Sight Software ActiveMod ActiveX control (ActiveMod.ocx) allows remote attackers …

  • Unscored —
    CVE-2007-2147 Public exploit

    admin/options.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier does not check for administrative credent…

  • Unscored —
    CVE-2007-2148 Public exploit

    Direct static code injection vulnerability in admin/save.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlie…

  • Unscored —
    CVE-2007-2149 Public exploit

    Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier stores usernames and unencrypted passwords in (1) classes/vars…

  • Unscored —
    CVE-2007-2154 Public exploit

    PHP remote file inclusion vulnerability in services/samples/inclusionService.php in Cabron Connector 1.1.0 allows remot…

  • Unscored —
    CVE-2007-2142 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in AjPortal2Php allow remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2007-2145 Public exploit

    The imagecomments function in classes.php in MiniGal b13 allows remote attackers to inject arbitrary PHP code into a fi…

  • Unscored —
    CVE-2007-2141 Public exploit EPSS 46%

    Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2007-2144 Public exploit

    PHP remote file inclusion vulnerability in includes/CAltInstaller.php in the JoomlaPack (com_jpack) 1.0.4a2 RE componen…

  • Unscored —
    CVE-2007-2158 Public exploit

    PHP remote file inclusion vulnerability in index.php in jGallery 1.3 allows remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2007-2155 Public exploit

    Directory traversal vulnerability in template.php in in phpFaber TopSites 3 allows remote attackers to read arbitrary f…

  • Unscored —
    CVE-2007-2143 Public exploit

    PHP remote file inclusion vulnerability in index.php in the Be2004-2 template for Joomla! allows remote attackers to ex…

  • Unscored —
    CVE-2007-2157 Public exploit

    Directory traversal vulnerability in upload/force_download.php in Zomplog 3.8 allows remote attackers to read arbitrary…

  • Unscored —
    CVE-2007-2156 Public exploit EPSS 10%

    Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2007-2146 Public exploit

    The imagecomments function in classes.php in MiniGal b13 allow remote attackers to inject arbitrary PHP code into a fil…

  • Unscored —
    CVE-2006-7194 Public exploit

    PHP remote file inclusion vulnerability in modules/Mysqlfinder/MysqlfinderAdmin.php in Agora 1.4 RC1, when register_glo…

  • Unscored —
    CVE-2007-2089 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo an…