Skip to content
OpenAdvisories

Archive

9 May 2007

Vulnerabilities first published on this day (UTC), newest first.

← April 2007 2007 / May /9 June 2007 →
  1. 15
  2. 255
  3. 313
  4. 417
  5. 5 
  6. 6 
  7. 73
  8. 824
  9. 979
  10. 10 
  11. 1147
  12. 12 
  13. 1316
  14. 1441
  15. 156
  16. 1655
  17. 1722
  18. 1812
  19. 19 
  20. 20 
  21. 2125
  22. 2237
  23. 231
  24. 2434
  25. 253
  26. 26 
  27. 27 
  28. 28 
  29. 299
  30. 3039
  31. 3127
All Critical High Medium Low Exploited only Public exploit

79 results · Feed

  • Medium —
    CVE-2006-7196 Public exploit EPSS 72%

    Cross-site scripting in Apache Tomcat

    Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time…

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2006-7195

    Apache Tomcat XSS Vulnerability

    Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.

    org.apache.tomcat:tomcat Maven
  • High —
    CVE-2005-4836

    Apache Tomcat allows remote attackers to read JSP source files

    The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to read JSP source files and obtain sensitive information.

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2007-1280 Public exploit EPSS 14%

    Cross-site scripting (XSS) vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2007-1858 Public exploit EPSS 18%

    The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.…

  • Low —
    CVE-2007-1358 EPSS 20%

    Apache Tomcat XSS In Accept-Language Headers

    Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform to RFC 26…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2007-2584 Public exploit

    Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBM…

  • Unscored —
    CVE-2007-2583 Public exploit EPSS 11%

    The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-depe…

  • Unscored —
    CVE-2007-2585 Public exploit

    Stack-based buffer overflow in the Verify function in the BarCodeWiz ActiveX control 2.0 and 2.52 (BarcodeWiz.dll) allo…

  • Unscored —
    CVE-2007-2588 Public exploit

    Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denia…

  • Unscored —
    CVE-2007-2586 Public exploit EPSS 14%

    The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which allows remote attackers…

  • Unscored —
    CVE-2007-2582 EPSS 27%

    Multiple buffer overflows in the DB2 JDBC Applet Server (DB2JDS) service in IBM DB2 9.x and earlier allow remote attack…

  • Unscored —
    CVE-2007-2587

    The IOS FTP Server in Cisco IOS 11.3 through 12.4 allows remote authenticated users to cause a denial of service (IOS r…

  • Unscored —
    CVE-2007-2572 Public exploit

    PHP remote file inclusion vulnerability in modules/noevents/templates/mfa_theme.php in NoAh (aka PHP Content Architect,…

  • Unscored —
    CVE-2007-2570 Public exploit

    PHP remote file inclusion vulnerability in handlers/page/show.php in Wikivi5 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2007-2576 Public exploit

    Buffer overflow in the East Wind Software advdaudio.ocx 1.5.1.1 ActiveX control allows user-assisted remote attackers t…

  • Unscored —
    CVE-2007-2571 Public exploit

    SQL injection vulnerability in index.php in the wfquotes 1.0 0 module for XOOPS allows remote attackers to execute arbi…

  • Unscored —
    CVE-2007-2580 Public exploit

    Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords)…

  • Unscored —
    CVE-2007-2579

    Multiple cross-site scripting (XSS) vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2007-2581 Public exploit EPSS 36%

    Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 200…

  • Unscored —
    CVE-2007-2569 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Friendly 1.0d1 and earlier allow remote attackers to execute arbi…

  • Unscored —
    CVE-2007-2575 Public exploit

    PHP remote file inclusion vulnerability in watermark.php in the vm (aka Jean-Francois Laflamme) watermark 0.4.1 mod for…

  • Unscored —
    CVE-2007-2577

    Multiple SQL injection vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2007-2574 Public exploit

    Directory traversal vulnerability in index.php in Archangel Weblog 0.90.02 allows remote attackers to read arbitrary fi…

  • Unscored —
    CVE-2007-2578

    Unspecified vulnerability in search/list/action_search/index.php in ACP3 4.0 beta 3 allows remote attackers to have unk…

  • Unscored —
    CVE-2007-2573 Public exploit

    PHP remote file inclusion vulnerability in plugin/HP_DEV/cms2.php in PHPtree 1.3 allows remote attackers to execute arb…

  • Unscored —
    CVE-2006-7202

    The dofreePDF function in includes/pdf.php in Mambo 4.6.1 does not properly check access rights for database content, w…

  • Unscored —
    CVE-2007-0215 EPSS 32%

    Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remot…

  • Unscored —
    CVE-2007-2567

    Buffer overflow in the SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to exec…

  • Unscored —
    CVE-2007-2561 Public exploit

    SQL injection vulnerability in index.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2007-2556 Public exploit

    SQL injection vulnerability in Nuked-klaN 1.7.6 allows remote attackers to execute arbitrary SQL commands via the X-For…

  • Unscored —
    CVE-2007-2564

    Multiple stack-based buffer overflows in the Sienzo Digital Music Mentor (DMM) 2.6.0.4 ActiveX control (DSKernel2.dll) …

  • Unscored —
    CVE-2007-2562

    Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 3.00.90 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2007-2565 Public exploit

    Cdelia Software ImageProcessing allows user-assisted remote attackers to cause a denial of service (application crash) …

  • Unscored —
    CVE-2007-2560 Public exploit

    Directory traversal vulnerability in theme/acgv.php in ACGVannu 1.3 and earlier allows remote attackers to read arbitra…

  • Unscored —
    CVE-2007-2563 Public exploit

    Buffer overflow in the AddFile function in VersalSoft HTTP File Upload ActiveX control (UFileUploaderD.dll) allows remo…

  • Unscored —
    CVE-2007-2557

    MOStlyDB Admin in Mambo 4.6.1 does not properly check privileges, which allows remote authenticated administrators to h…

  • Unscored —
    CVE-2007-2559

    Multiple PHP remote file inclusion vulnerabilities in american cart 3.5 allow remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2007-2566 Public exploit

    The SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to cause a denial of servi…

  • Unscored —
    CVE-2007-2558

    PHP remote file inclusion vulnerability in index.php in phpFullAnnu CMS (pfa CMS) 6.0 allows remote attackers to execut…