Skip to content
OpenAdvisories

Archive

2 May 2007

Vulnerabilities first published on this day (UTC), newest first.

← April 2007 2007 / May /2 June 2007 →
  1. 15
  2. 255
  3. 313
  4. 417
  5. 5 
  6. 6 
  7. 73
  8. 824
  9. 979
  10. 10 
  11. 1147
  12. 12 
  13. 1316
  14. 1441
  15. 156
  16. 1655
  17. 1722
  18. 1812
  19. 19 
  20. 20 
  21. 2125
  22. 2237
  23. 231
  24. 2434
  25. 253
  26. 26 
  27. 27 
  28. 28 
  29. 299
  30. 3039
  31. 3127
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • Unscored —
    CVE-2007-2474 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart 4.0 allow remote attacker…

  • Unscored —
    CVE-2007-2473 Public exploit

    SQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote attackers to execute a…

  • Unscored —
    CVE-2007-2471 Public exploit

    Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to read arbitra…

  • Unscored —
    CVE-2007-2458 Public exploit EPSS 10%

    Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow remote attackers to execute ar…

  • Unscored —
    CVE-2007-2457 Public exploit EPSS 12%

    PHP remote file inclusion vulnerability in resources/includes/class.Smarty.php in Pixaria Gallery before 1.4.3 allows r…

  • Unscored —
    CVE-2007-2456 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in FireFly 1.1.01 allow remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2007-2434 Public exploit EPSS 14%

    Buffer overflow in asnsp.dll in Aventail Connect 4.1.2.13 allows remote attackers to cause a denial of service (applica…

  • Unscored —
    CVE-2007-2437 Public exploit

    The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows rem…

    xorg-server Debian
  • Unscored —
    CVE-2007-2423 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in MoinMoin 1.5.7 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2007-2424 Public exploit

    PHP remote file inclusion vulnerability in help/index.php in The Merchant (themerchant) 2.2 allows remote attackers to …

  • Unscored —
    CVE-2007-2429 Public exploit

    ManageEngine PasswordManager Pro (PMP) allows remote attackers to obtain administrative access to a database by injecti…

  • Unscored —
    CVE-2007-2430 Public exploit

    shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ b…

  • Unscored —
    CVE-2007-2420 Public exploit

    SQL injection vulnerability in bry.asp in Burak Yilmaz Blog 1.0 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2007-2427 Public exploit

    SQL injection vulnerability in index.php in the pnFlashGames 1.5 module for PostNuke allows remote attackers to execute…

  • Unscored —
    CVE-2007-2428 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in page.php in Ahhp-Portal allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2007-2425 Public exploit

    Directory traversal vulnerability in fileview.php in Imageview 5.3 allows remote attackers to read arbitrary files via …

  • Unscored —
    CVE-2007-2431 Public exploit

    Dynamic variable evaluation vulnerability in shared/config/tce_config.php in TCExam 4.0.011 and earlier allows remote a…

  • Unscored —
    CVE-2007-2426 Public exploit EPSS 63%

    PHP remote file inclusion vulnerability in myfunctions/mygallerybrowser.php in the myGallery 1.4b4 and earlier plugin f…

    Web / CMS