Archive
2 May 2007
Vulnerabilities first published on this day (UTC), newest first.
55 results · Feed
-
Unscored —
SQL injection vulnerability in index.php in FileRun 1.0 and earlier allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2007-2474 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart 4.0 allow remote attacker…
-
Unscored —
Cross-site scripting (XSS) vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to injec…
-
Unscored —
Unspecified vulnerability in the ADSCHEMA utility in Novell SecureLogin (NSL) 6 SP1 before 6.0.106 has unknown impact a…
-
Unscored —CVE-2007-2473 Public exploit
SQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2007-2471 Public exploit
Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to read arbitra…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in index.php in FileRun 1.0 and earlier allow remote attackers to i…
-
Unscored —
Unspecified vulnerability in Novell SecureLogin (NSL) 6 SP1 before 6.0.106 has unknown impact and remote attack vectors…
-
Unscored —
The utrace support in Linux kernel 2.6.18, and other versions, allows local users to cause a denial of service (system …
-
Unscored —
ZoneAlarm Pro 6.5.737.000, 6.1.744.001, and possibly earlier versions and other products, allows local users to cause a…
-
Unscored —
The DHCP relay agent in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 allows remote attackers to cause a denial o…
-
Unscored —
Unspecified vulnerability in Sun Solaris 9, when Solaris Auditing (BSM) is enabled for file read, write, attribute modi…
-
Unscored —
Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)1…
-
Unscored —
Heap-based buffer overflow in the Rendezvous / Extensible Messaging and Presence Protocol (XMPP) component (plugins\ren…
-
Unscored —
Unspecified vulnerability in the LDAP Software Development Kit (SDK) for C, as used in Sun Java System Directory Server…
-
Unscored —
Unspecified vulnerability in HP OpenVMS for Integrity Servers 8.2-1 and 8.3 allows local users to cause a denial of ser…
-
Unscored —
Unspecified vulnerability in Cisco Adaptive Security Appliance (ASA) and PIX 7.2 before 7.2(2)8, when using Layer 2 Tun…
-
Unscored —
Race condition in Cisco Adaptive Security Appliance (ASA) and PIX 7.1 before 7.1(2)49 and 7.2 before 7.2(2)19, when usi…
-
Unscored —
The Apple Security Update 2007-004 uses an incorrect configuration file for FTPServer in Apple Mac OS X Server 10.4.9, …
-
Unscored —
The sandbox for vim allows dangerous functions such as (1) writefile, (2) feedkeys, and (3) system, which might allow u…
-
Unscored —
XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the…
-
Unscored —
The virtual machine process (VMX) in VMware Workstation before 5.5.4 does not properly read state information when movi…
-
Unscored —
Directory traversal vulnerability in the Shared Folders feature for VMware Workstation before 5.5.4, when a folder is s…
-
Unscored —
The memory management in VMware Workstation before 5.5.4 allows attackers to cause a denial of service (Windows virtual…
-
Unscored —
VMware Workstation before 5.5.4, when running a 64-bit Windows guest on a 64-bit host, allows local users to "corrupt t…
-
Unscored —
VMware Workstation before 5.5.4 allows attackers to cause a denial of service against the guest OS by causing the virtu…
-
Unscored —
The MicroWorld Agent service (MWAGENT.EXE) in MicroWorld Technologies eScan 8.0.671.1, and possibly other versions, all…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow remote attackers to execute ar…
-
Unscored —
PHP remote file inclusion vulnerability in modules/admin/include/config.php in FireFly 1.1.01 and earlier allows remote…
-
Unscored —
PHP remote file inclusion vulnerability in resources/includes/class.Smarty.php in Pixaria Gallery before 1.4.3 allows r…
-
Unscored —
Heap-based buffer overflow in the BMP reader (bmp.c) in Imager perl module (libimager-perl) 0.45 through 0.56 allows re…
-
Unscored —
Multiple heap-based buffer overflows in the cirrus_invalidate_region function in the Cirrus VGA extension in QEMU 0.8.2…
-
Unscored —
QEMU 0.8.2 allows local users to crash a virtual machine via the divisor operand to the aam instruction, as demonstrate…
-
Unscored —
QEMU 0.8.2 allows local users to halt a virtual machine by executing the icebp instruction.
-
Unscored —CVE-2007-2456 Public exploit
Multiple PHP remote file inclusion vulnerabilities in FireFly 1.1.01 allow remote attackers to execute arbitrary PHP co…
-
Unscored —
Parallels allows local users to cause a denial of service (virtual machine abort) via (1) certain INT instructions, as …
-
Unscored —
Heap-based buffer overflow in the VGA device in Parallels allows local users, with root access to the guest operating s…
-
Unscored —
Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, al…
-
Unscored —
Buffer overflow in asnsp.dll in Aventail Connect 4.1.2.13 allows remote attackers to cause a denial of service (applica…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Ariadne 2.4.1 allows remote attackers to inject arbitrary web …