Archive
April 2007
Vulnerabilities first published in this month (UTC), newest first.
631 results · Feed
-
Unscored —CVE-2007-2272 Public exploit
PHP remote file inclusion vulnerability in docs/front-end-demo/cart2.php in Advanced Webhost Billing System (AWBS) 2.4.…
-
Unscored —
Unspecified vulnerability in Sun Cluster 3.1 and Solaris Cluster 3.2 before 20070424 allows remote authenticated users,…
-
Unscored —
Session fixation vulnerability in Plogger allows remote attackers to hijack web sessions by setting the PHPSESSID param…
-
Unscored —CVE-2007-2273 Public exploit
PHP remote file inclusion vulnerability in include/loading.php in Alessandro Lulli wavewoo 0.1.1 allows remote attacker…
-
Unscored —CVE-2007-2268 Public exploit
Multiple directory traversal vulnerabilities in SWsoft Plesk for Windows 7.6.1, 8.1.0, and 8.1.1 allow remote attackers…
-
Unscored —CVE-2007-2270 Public exploit
The Linksys SPA941 VoIP Phone allows remote attackers to cause a denial of service (device reboot) via a 0377 (0xff) ch…
-
Unscored —CVE-2007-2271 Public exploit
Directory traversal vulnerability in Rajneel Lal TotaRam USP FOSS Distribution 1.01 allows remote attackers to read arb…
-
Unscored —
Multiple stack-based buffer overflows in the SUN RPC service in CA (formerly Computer Associates) BrightStor ARCserve M…
-
Unscored —
3Com TippingPoint IPS allows remote attackers to cause a denial of service (device hang) via a flood of packets on TCP …
-
Unscored —
Unspecified vulnerability in HP StorageWorks Command View Advanced Edition for XP before 5.6.0-01, XP Replication Monit…
-
Unscored —
Progress Webspeed Messenger allows remote attackers to read, create, modify, and execute arbitrary files by invoking we…
-
Unscored —
Directory traversal vulnerability in top.php3 in SWsoft Plesk for Windows 8.1 and 8.1.1 allows remote attackers to read…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Download-Engine 1.4.3 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2007-2259 Public exploit
SQL injection vulnerability in forum.php in EsForum 3.0 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2007-2256 Public exploit
Cross-site scripting (XSS) vulnerability in you.php in TJSChat 0.95 allows remote attackers to inject arbitrary web scr…
-
Unscored —
PHP remote file inclusion vulnerability in admin/setup/level2.php in PHP Classifieds 6.04, and probably earlier version…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in bibtex mase beta 2.0 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2007-2257 Public exploit
PHP remote file inclusion vulnerability in subscp.php in Fully Modded phpBB2 allows remote attackers to execute arbitra…
-
Unscored —CVE-2007-2258 Public exploit
PHP remote file inclusion vulnerability in includes/init.inc.php in PHPMyBibli allows remote attackers to execute arbit…
-
Unscored —CVE-2007-2252 Public exploit
Directory traversal vulnerability in iconspopup.php in Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to…
-
Unscored —
Exponent CMS 0.96.6 Alpha and earlier allows remote attackers to obtain path information via a direct request for (1) s…
-
Unscored —CVE-2007-2262 Public exploit
Multiple PHP remote file inclusion vulnerabilities in html/php/detail.php in Sinato jmuffin allow remote attackers to e…
-
Unscored —
PHP remote file inclusion vulnerability in espaces/communiques/annotations.php in C-Arbre 0.6PR7 and earlier allows rem…
-
Unscored —CVE-2007-2250 Public exploit
admin.php in Phorum before 5.1.22 allows remote attackers to obtain the full path via the module[] parameter.
-
Unscored —
OpenSSH 4.6 and earlier, when ChallengeResponseAuthentication is enabled, allows remote attackers to determine the exis…
-
Unscored —CVE-2007-2248 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in admin.php in Phorum before 5.1.22 allow remote attackers to inje…
-
Unscored —
Unspecified vulnerability in the Roles module in Xaraya 1.1.2 and earlier allows attackers to gain privileges via unspe…
-
Unscored —CVE-2007-2247 Public exploit
SQL injection vulnerability in modules/news/article.php in phpMySpace Gold 8.10 allows remote attackers to execute arbi…
-
Unscored —
Multiple buffer overflows in Adobe Photoshop CS2 and CS3, Illustrator CS3, and GoLive 9 allow user-assisted remote atta…
-
Unscored —
Unspecified vulnerability in HP-UX B.11.00 and B.11.11, when running sendmail 8.9.3 or 8.11.1; and HP-UX B.11.23 when r…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.10.1.0 allow remote attackers to inject arbi…
-
Unscored —CVE-2007-2249 Public exploit
include/controlcenter/users.php in Phorum before 5.1.22 allows remote authenticated moderators to gain privileges via a…
-
Unscored —
The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6 type 0 route headers (IPV6_RTHD…
-
Unscored —
footer.php in PunBB 1.2.14 and earlier allows remote attackers to include local files in include/user/ via a cross-site…
-
Unscored —
SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands …
-
Unscored —CVE-2007-2233 Public exploit
cosign-bin/cosign.cgi in Cosign 2.0.2 and earlier allows remote authenticated users to perform unauthorized actions as …
-
Unscored —CVE-2007-2232 Public exploit
The CHECK command in Cosign 2.0.1 and earlier allows remote attackers to bypass authentication requirements via CR (\r)…
-
Unscored —
include/common.php in PunBB 1.2.14 and earlier does not properly handle a disabled ini_get function when checking the r…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PunBB 1.2.14 and earlier allow remote attackers to inject arbitr…
-
Unscored —
Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, …