Archive
May 2007
Vulnerabilities first published in this month (UTC), newest first.
570 results · Feed
-
Unscored —
Multiple directory traversal vulnerabilities in Scallywag 2005-04-25 allow remote attackers to include and execute arbi…
-
Unscored —CVE-2007-2959 Public exploit
SQL injection vulnerability in manufacturer.php in cpCommerce before 1.1.0 allows remote attackers to execute arbitrary…
-
Unscored —
Unrestricted file upload vulnerability in FileCloset before 1.1.5 allows remote attackers to upload arbitrary PHP files…
-
Unscored —CVE-2007-2962 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in Particle Gallery 1.0.1 and earlier allows remote attackers to…
-
Unscored —
Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux befo…
-
Unscored —
Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a…
-
Unscored —CVE-2007-2964 Public exploit
The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board (IPB or IP.Board) 2.2.2, and possibly earli…
-
Unscored —
Unspecified vulnerability in the Real-time Scanning component in multiple F-Secure products, including Internet Securit…
-
Unscored —
The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attachment fil…
-
Unscored —
Clearswift MAILsweeper for SMTP 4.3.6 SP1 does not execute custom "on strip unsuccessful" hooks, which allows remote at…
-
Unscored —
Buffer overflow in the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) 5.4.0.6,…
-
Unscored —CVE-2007-2933 Public exploit
SQL injection vulnerability in index.php in the Phil-a-Form (com_philaform) 1.2.0.0 and earlier component for Joomla! a…
-
Unscored —CVE-2007-2935 Public exploit
core/spellcheck/spellcheck.php in Fundanemt before 2.2.0.1 allows remote attackers to execute arbitrary commands via sh…
-
Unscored —CVE-2007-2932 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in BoastMachine allows remote attackers to inject arbitrary web s…
-
Unscored —CVE-2007-2936 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Frequency Clock 0.1b (Beta 0.1) allow remote attackers to execute…
-
Unscored —CVE-2007-2946 Public exploit
Buffer overflow in a certain ActiveX control in LeadTools Raster Dialog File_D Object (LTRDFD14e.DLL) 14.5.0.44 allows …
-
Unscored —CVE-2007-2943 Public exploit
PHP remote file inclusion vulnerability in class/class.php in Webavis 0.1.1 allows remote attackers to execute arbitrar…
-
Unscored —
PHP remote file inclusion vulnerability in admin/admin.php in TROforum 0.1 allows remote attackers to execute arbitrary…
-
Unscored —
WabCMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attack…
-
Unscored —CVE-2007-2934 Public exploit
Directory traversal vulnerability in skins/common.css.php in Vistered Little 1.6a allows remote attackers to read arbit…
-
Unscored —CVE-2007-2941 Public exploit
Multiple PHP remote file inclusion vulnerabilities in the creator in vBulletin Google Yahoo Site Map (vBGSiteMap) 2.41 …
-
Unscored —
RMForum stores sensitive information under the web root with insufficient access control, which allows remote attackers…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Mazen's PHP Chat 3.0.0 allow remote attackers to execute arbitrar…
-
Unscored —CVE-2007-2947 Public exploit
Multiple PHP remote file inclusion vulnerabilities in OpenBASE Alpha 0.6 allow remote attackers to execute arbitrary PH…
-
Unscored —CVE-2007-2940 Public exploit
Multiple PHP remote file inclusion vulnerabilities in FlaP 1.0b (1.0 Beta) allow remote attackers to execute arbitrary …
-
Unscored —CVE-2007-2942 Public exploit
SQL injection vulnerability in user.php in My Little Forum 1.7 and earlier allows remote attackers to execute arbitrary…
-
Unscored —
myEvent 1.6 allows remote attackers to obtain sensitive information via (1) a Log In action without a password to login…
-
Unscored —
DGNews 2.1 allows remote attackers to obtain sensitive information via a fullnews request to news.php with an invalid n…
-
Unscored —CVE-2007-0693 Public exploit
SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the…
-
Unscored —CVE-2007-0694 Public exploit
Cross-site scripting (XSS) vulnerability in footer.php in DGNews 2.1 allows remote attackers to inject arbitrary web sc…
-
Unscored —
Java Embedding Plugin 0.9.6.1 allows remote attackers to cause a denial of service (browser crash) via a Thread subclas…
-
Unscored —CVE-2007-2900 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Scallywag 2005-04-25 allow remote attackers to execute arbitrary …
-
Unscored —CVE-2007-2908 Public exploit
Cross-site scripting (XSS) vulnerability in calendar.php in Jelsoft vBulletin before 3.6.6 allows remote attackers to i…
-
Unscored —
SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin before 3.6.6 allows remote authenticated adm…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PsychoStats 3.0.6b allow remote attackers to inject arbitrary we…
-
Unscored —CVE-2007-2902 Public exploit
SQL injection vulnerability in main/auth/my_progress.php in Dokeos 1.8.0 and earlier allows remote authenticated users …
-
Unscored —
Cross-site scripting (XSS) vulnerability in calendar.php in Jelsoft vBulletin 3.6.x before 3.6.7 allows remote attacker…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in ClonusWiki .5 allows remote attackers to inject arbitrary web …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Jelsoft vBulletin before 3.6.7 PL1 allows remote attackers to inject arbitr…