Archive
April 2007
Vulnerabilities first published in this month (UTC), newest first.
631 results · Feed
-
Unscored —CVE-2007-2308 Public exploit
Cross-site scripting (XSS) vulnerability in cas.php in FloweRS 2.0 allows remote attackers to inject arbitrary web scri…
-
Unscored —
MiniShare 1.5.4, and possibly earlier, allows remote attackers to cause a denial of service (application crash) via a f…
-
Unscored —CVE-2007-2312 Public exploit
Multiple SQL injection vulnerabilities in the Virtual War (VWar) 1.5.0 R15 module for PHP-Nuke allow remote attackers t…
-
Unscored —CVE-2007-2317 Public exploit
Multiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by TOSMO/Mambo 4.0.12 and …
-
Unscored —CVE-2007-2310 Public exploit
Cross-site scripting (XSS) vulnerability in plugins/spaw/img_popup.php in BloofoxCMS 0.2.2 allows remote attackers to i…
-
Unscored —
Multiple SQL injection vulnerabilities in Crea-Book 1.0, and possibly earlier, when magic_quotes_gpc is disabled, allow…
-
Unscored —
Cross-site scripting (XSS) vulnerability in cas.php in FloweRS 2.0 allows remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2007-2301 Public exploit
Multiple PHP remote file inclusion vulnerabilities in audioCMS arash 0.1.4 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2007-2319 Public exploit
PHP remote file inclusion vulnerability in the AutoStand 1.1 and earlier module for Joomla! allows remote attackers to …
-
Unscored —CVE-2007-2299 Public exploit
Multiple SQL injection vulnerabilities in Frogss CMS 0.7 and earlier allow remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2007-2313 Public exploit
PHP remote file inclusion vulnerability in getinfo1.php in the Shotcast 1.0 RC2 module for mxBB allows remote attackers…
-
Unscored —CVE-2007-2305 Public exploit
Multiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog (QDBlog) 0.4, and possibly earlier, …
-
Unscored —
Multiple format string vulnerabilities in FileZilla before 2.2.32 allow remote attackers to execute arbitrary code via …
-
Unscored —
Unspecified vulnerability in the admin script in Open Business Management (OBM) before 2.0.0 allows remote attackers to…
-
Unscored —CVE-2007-2298 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Garennes 0.6.1 and earlier allow remote attackers to execute arbi…
-
Unscored —CVE-2007-2303 Public exploit
Directory traversal vulnerability in includes/footer.php in News Manager Deluxe (NMDeluxe) 1.0.1 allows remote attacker…
-
Unscored —CVE-2007-2307 Public exploit
PHP remote file inclusion vulnerability in engine/engine.inc.php in WebKalk2 1.9.0 allows remote attackers to execute a…
-
Unscored —CVE-2007-2300 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Endy Kristanto Surat kabar / News Management Online (aka phpwebn…
-
Unscored —
Stack-based buffer overflow in the DoWebMenuAction function in the IncrediMail IMMenuShellExt ActiveX control (ImShExt.…
-
Unscored —
The SIP channel driver (chan_sip) in Asterisk before 1.2.18 and 1.4.x before 1.4.3 does not properly parse SIP UDP pack…
-
Unscored —
Integer overflow in the FlipFileTypeAtom_BtoN function in Apple Quicktime 7.1.5, and other versions before 7.2, allows …
-
Unscored —
Heap-based buffer overflow in the JVTCompEncodeFrame function in Apple Quicktime 7.1.5 and other versions before 7.2 al…
-
Unscored —CVE-2007-2292 EPSS 13%
CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey befo…
-
Unscored —CVE-2007-2291 EPSS 20%
CRLF injection vulnerability in the Digest Authentication support for Microsoft Internet Explorer 7.0.5730.11 allows re…
-
Unscored —
Multiple stack-based buffer overflows in the process_sdp function in chan_sip.c of the SIP channel T.38 SDP parser in A…
-
Unscored —
The Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 allows remote attackers to cause a denial of ser…
-
Unscored —
PHP remote file inclusion vulnerability in admin/includes/spaw/dialogs/insert_link.php in download engine (Download-Eng…
-
Unscored —
PHP remote file inclusion vulnerability in config.php in Built2Go PHP Link Portal 1.79 allows remote attackers to execu…
-
Unscored —CVE-2007-2288 Public exploit
PHP remote file inclusion vulnerability in info.php in Doruk100.net doruk100net allows remote attackers to execute arbi…
-
Unscored —CVE-2007-2284 Public exploit
Buffer overflow in ABC-View Manager 1.42 allows user-assisted remote attackers to execute arbitrary code via a crafted …
-
Unscored —
Directory traversal vulnerability in examples/layout/feed-proxy.php in Jack Slocum Ext 1.0 alpha1 (Ext JS) allows remot…
-
Unscored —CVE-2007-2287 Public exploit
PHP remote file inclusion vulnerability in accept.php in comus 2.0 Final allows remote attackers to execute arbitrary P…
-
Unscored —CVE-2007-2283 Public exploit
Buffer overflow in Fresh View 7.15 allows user-assisted remote attackers to execute arbitrary code via a crafted .PSP f…
-
Unscored —
Cisco Network Services (CNS) NetFlow Collection Engine (NFC) before 6.0 has an nfcuser account with the default passwor…
-
Unscored —CVE-2007-2290 Public exploit
Multiple PHP remote file inclusion vulnerabilities in B2 Weblog and News Publishing Tool 0.6.1 allow remote attackers t…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the example web applications for Jakarta Tomcat 5.5.6 and earlie…
-
High —
Apache Tomcat Buffer Over-Read
The AJP connector in Apache Tomcat 5.5.15 uses an incorrect length for chunks, which can cause a buffer over-read in the ajp_process_callback in mod_jk, which allows remote attackers to read portions of sensitive memory.
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in DCP-Portal 6.1.1 allow remote attackers to execute arbitrary PHP …
-
Unscored —
Cross-site scripting (XSS) vulnerability in YA Book 0.98-alpha allows remote attackers to inject arbitrary web script o…
-
Unscored —CVE-2007-2274 Public exploit
The BitTorrent implementation in Opera 9.2 allows remote attackers to cause a denial of service (CPU consumption and ap…