Skip to content
OpenAdvisories

Archive

2 May 2007

Vulnerabilities first published on this day (UTC), newest first.

← April 2007 2007 / May /2 June 2007 →
  1. 15
  2. 255
  3. 313
  4. 417
  5. 5 
  6. 6 
  7. 73
  8. 824
  9. 979
  10. 10 
  11. 1147
  12. 12 
  13. 1316
  14. 1441
  15. 156
  16. 1655
  17. 1722
  18. 1812
  19. 19 
  20. 20 
  21. 2125
  22. 2237
  23. 231
  24. 2434
  25. 253
  26. 26 
  27. 27 
  28. 28 
  29. 299
  30. 3039
  31. 3127
All Critical High Medium Low Exploited only Public exploit

55 results · Feed

  • Unscored —
    CVE-2007-2241

    Unspecified vulnerability in query.c in ISC BIND 9.4.0, and 9.5.0a1 through 9.5.0a3, when recursion is enabled, allows …

    bind9 Debian
  • Unscored —
    CVE-2007-2437 Public exploit

    The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows rem…

    xorg-server Debian
  • Unscored —
    CVE-2007-2432

    Cross-site scripting (XSS) vulnerability in utilities/search.asp in nukedit 4.9.7b allows remote attackers to inject ar…

  • Unscored —
    CVE-2007-2423 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in MoinMoin 1.5.7 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2007-2424 Public exploit

    PHP remote file inclusion vulnerability in help/index.php in The Merchant (themerchant) 2.2 allows remote attackers to …

  • Unscored —
    CVE-2007-2429 Public exploit

    ManageEngine PasswordManager Pro (PMP) allows remote attackers to obtain administrative access to a database by injecti…

  • Unscored —
    CVE-2007-2430 Public exploit

    shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ b…

  • Unscored —
    CVE-2007-2421

    Buffer overflow in Hitachi Groupmax Mobile Option for Mobile-Phone 07-00 through 07-30, 5 for i-mode 05-11 through 05-2…

  • Unscored —
    CVE-2007-2420 Public exploit

    SQL injection vulnerability in bry.asp in Burak Yilmaz Blog 1.0 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2007-2427 Public exploit

    SQL injection vulnerability in index.php in the pnFlashGames 1.5 module for PostNuke allows remote attackers to execute…

  • Unscored —
    CVE-2007-2428 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in page.php in Ahhp-Portal allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2007-2425 Public exploit

    Directory traversal vulnerability in fileview.php in Imageview 5.3 allows remote attackers to read arbitrary files via …

  • Unscored —
    CVE-2007-2431 Public exploit

    Dynamic variable evaluation vulnerability in shared/config/tce_config.php in TCExam 4.0.011 and earlier allows remote a…

  • Unscored —
    CVE-2007-2426 Public exploit EPSS 63%

    PHP remote file inclusion vulnerability in myfunctions/mygallerybrowser.php in the myGallery 1.4b4 and earlier plugin f…

    Web / CMS
  • Critical 9.8
    CVE-2007-2422

    Multiple PHP remote file inclusion vulnerabilities in Modules Builder (modbuild) 4.1 for Comdev One Admin allow remote …