Archive
April 2007
Vulnerabilities first published in this month (UTC), newest first.
264 results · Clear filters · Feed
-
Unscored —CVE-2007-1933 Public exploit
Multiple directory traversal vulnerabilities in PcP-Guestbook (PcP-Book) 3.0 allow remote attackers to include and exec…
-
Unscored —
Heap-based buffer overflow in Microsoft Windows allows user-assisted remote attackers to have an unknown impact via a c…
-
Unscored —CVE-2007-1907 Public exploit
PHP remote file inclusion vulnerability in warn.php in Pathos Content Management System (CMS) 0.92-2 allows remote atta…
-
Unscored —CVE-2007-1928 Public exploit
Directory traversal vulnerability in index.php in witshare 0.9 allows remote attackers to include and execute arbitrary…
-
Unscored —CVE-2007-1908 Public exploit
PHP file inclusion vulnerability in php121db.php in PHP121 Instant Messenger 2.2 allows remote attackers to execute arb…
-
Unscored —CVE-2007-1931 Public exploit
SQL injection vulnerability in index.php in the slownik module in SmodCMS 2.10 and earlier allows remote attackers to e…
-
Unscored —CVE-2007-1932 Public exploit
Directory traversal vulnerability in scarnews.inc.php in ScarNews 1.2.1 allows remote attackers to include and execute …
-
Unscored —CVE-2007-1920 Public exploit
SQL injection vulnerability in index.php in the aktualnosci module in SmodBIP 1.06 and earlier allows remote attackers …
-
Unscored —CVE-2007-1937 Public exploit
PHP remote file inclusion vulnerability in smilies.php in Scorp Book 1.0 allows remote attackers to execute arbitrary P…
-
Unscored —CVE-2007-1929 Public exploit
Directory traversal vulnerability in downloadpic.php in Beryo 2.0, and possibly other versions including 2.4, allows re…
-
Unscored —CVE-2007-1930 Public exploit
Directory traversal vulnerability in download2.php in cattaDoc 2.21, and possibly other versions including 3.0, allows …
-
Unscored —
Buffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of service (application c…
-
Unscored —CVE-2007-1919 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Arizona Dream Livre d'or (livor) 2.5 allows remote attackers t…
-
Unscored —CVE-2007-1934 Public exploit
Directory traversal vulnerability in member.php in the eBoard 1.0.7 module for PHP-Nuke allows remote attackers to incl…
-
Unscored —CVE-2007-1906 Public exploit
Directory traversal vulnerability in richedit/keyboard.php in eCardMAX HotEditor (Hot Editor) 4.0, and the HotEditor pl…
-
Unscored —CVE-2006-4250 Public exploit
Buffer overflow in man and mandb (man-db) 2.4.3 and earlier allows local users to execute arbitrary code via crafted ar…
-
Unscored —
Multiple buffer overflows in the Internet Pictures Corporation iPIX Image Well ActiveX control (iPIX-ImageWell-ipix.dll…
-
Unscored —CVE-2007-1897 Public exploit
SQL injection vulnerability in xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticate…
-
Unscored —CVE-2007-1895 Public exploit
PHP remote file inclusion vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier, when used with PHP 5, al…
-
Unscored —CVE-2007-1896 Public exploit
Directory traversal vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier allows remote attackers to incl…
-
Unscored —CVE-2007-1890 Public exploit
Integer overflow in the msg_receive function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1, on FreeBSD and possibly othe…
-
Unscored —CVE-2007-1882 Public exploit
qcbin/servlet/tdservlet/TDAPI_GeneralWebTreatment in HP Mercury Quality Center 9.0 build 9.1.0.4352 allows remote authe…
-
Unscored —CVE-2007-1881 Public exploit
Unspecified vulnerability in KLIF (klif.sys) in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for F…
-
Unscored —CVE-2007-1001 Public exploit
Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP …
-
Unscored —CVE-2006-5586 Public exploit
The Graphics Rendering Engine in Microsoft Windows 2000 SP4 and XP SP2 allows local users to gain privileges via "inval…
-
Unscored —CVE-2007-1867 Public exploit
Buffer overflow in IrfanView 3.99 allows remote attackers to execute arbitrary code via a crafted animated cursor (ANI)…
-
Unscored —
The management service in IBM Tivoli Provisioning Manager for OS Deployment before 5.1 Fix Pack 2 does not properly han…
-
Unscored —CVE-2007-1215 Public exploit
Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, an…
-
Unscored —CVE-2007-1213 Public exploit
The TrueType Fonts rasterizer in Microsoft Windows 2000 SP4 allows local users to gain privileges via crafted TrueType …
-
Unscored —CVE-2007-1212 Public exploit
Buffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2; Server 2003 Gold, SP1, an…
-
Unscored —
Unspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1, and SP2 allows user-…
-
Unscored —
Stack-based buffer overflow in the dns_decode_reverse_name function in dns_decode.c in dproxy-nexgen allows remote atta…
-
Unscored —CVE-2007-1843 Public exploit
PHP remote file inclusion vulnerability in gmapfactory/params.php in MapLab 2.2.1, when register_globals is enabled, al…
-
Unscored —CVE-2007-1845 Public exploit
SQL injection vulnerability in show_event.php in the Expanded Calendar (calendar_panel) 2.00 module for PHP-Fusion allo…
-
Unscored —CVE-2007-1849 Public exploit
Directory traversal vulnerability in 404.php in Drake CMS allows remote attackers to include and execute arbitrary loca…
-
Unscored —CVE-2007-1847 Public exploit
SQL injection vulnerability in viewcat.php in the Repository module for Xoops allows remote attackers to execute arbitr…
-
Unscored —CVE-2007-1842 Public exploit
Directory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers to include and execute …
-
Unscored —CVE-2007-1851 Public exploit
Multiple directory traversal vulnerabilities in Really Simple PHP and Ajax (RSPA) 2007-03-23 allow remote attackers to …
-
Unscored —CVE-2007-1846 Public exploit
SQL injection vulnerability in index.php in the MyAds 2.04jp and earlier module for Xoops allows remote attackers to ex…
-
Unscored —CVE-2007-1837 Public exploit
Multiple PHP remote file inclusion vulnerabilities in MangoBery CMS 0.5.5 allow remote attackers to execute arbitrary P…