Archive
9 May 2007
Vulnerabilities first published on this day (UTC), newest first.
43 results · Clear filters · Feed
-
Medium —
Cross-site scripting in Apache Tomcat
Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote attackers to inject arbitr…
-
Unscored —
The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.…
-
Unscored —CVE-2007-2584 Public exploit
Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBM…
-
Unscored —
The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-depe…
-
Unscored —CVE-2007-2585 Public exploit
Stack-based buffer overflow in the Verify function in the BarCodeWiz ActiveX control 2.0 and 2.52 (BarcodeWiz.dll) allo…
-
Unscored —CVE-2007-2588 Public exploit
Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denia…
-
Unscored —
The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which allows remote attackers…
-
Unscored —CVE-2007-2572 Public exploit
PHP remote file inclusion vulnerability in modules/noevents/templates/mfa_theme.php in NoAh (aka PHP Content Architect,…
-
Unscored —CVE-2007-2570 Public exploit
PHP remote file inclusion vulnerability in handlers/page/show.php in Wikivi5 allows remote attackers to execute arbitra…
-
Unscored —CVE-2007-2576 Public exploit
Buffer overflow in the East Wind Software advdaudio.ocx 1.5.1.1 ActiveX control allows user-assisted remote attackers t…
-
Unscored —CVE-2007-2571 Public exploit
SQL injection vulnerability in index.php in the wfquotes 1.0 0 module for XOOPS allows remote attackers to execute arbi…
-
Unscored —CVE-2007-2580 Public exploit
Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords)…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 200…
-
Unscored —CVE-2007-2569 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Friendly 1.0d1 and earlier allow remote attackers to execute arbi…
-
Unscored —CVE-2007-2575 Public exploit
PHP remote file inclusion vulnerability in watermark.php in the vm (aka Jean-Francois Laflamme) watermark 0.4.1 mod for…
-
Unscored —CVE-2007-2574 Public exploit
Directory traversal vulnerability in index.php in Archangel Weblog 0.90.02 allows remote attackers to read arbitrary fi…
-
Unscored —CVE-2007-2573 Public exploit
PHP remote file inclusion vulnerability in plugin/HP_DEV/cms2.php in PHPtree 1.3 allows remote attackers to execute arb…
-
Unscored —CVE-2007-2561 Public exploit
SQL injection vulnerability in index.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2007-2556 Public exploit
SQL injection vulnerability in Nuked-klaN 1.7.6 allows remote attackers to execute arbitrary SQL commands via the X-For…
-
Unscored —CVE-2007-2565 Public exploit
Cdelia Software ImageProcessing allows user-assisted remote attackers to cause a denial of service (application crash) …
-
Unscored —CVE-2007-2560 Public exploit
Directory traversal vulnerability in theme/acgv.php in ACGVannu 1.3 and earlier allows remote attackers to read arbitra…
-
Unscored —CVE-2007-2563 Public exploit
Buffer overflow in the AddFile function in VersalSoft HTTP File Upload ActiveX control (UFileUploaderD.dll) allows remo…
-
Unscored —CVE-2007-2566 Public exploit
The SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to cause a denial of servi…
-
Unscored —CVE-2007-0605 Public exploit
Cross-site scripting (XSS) vulnerability in picture.php in Advanced Guestbook 2.4.2 allows remote attackers to inject a…
-
Unscored —CVE-2007-0609 Public exploit
Directory traversal vulnerability in Advanced Guestbook 2.4.2 allows remote attackers to bypass .htaccess settings, and…
-
Unscored —CVE-2007-2553 Public exploit
Unspecified vulnerability in dop in HP Tru64 UNIX 5.1B-4, 5.1B-3, and 5.1A PK6 allows local users to gain privileges vi…
-
Unscored —CVE-2007-2547 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attack…
-
Unscored —CVE-2007-2549 Public exploit
SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to execut…
-
Unscored —CVE-2007-2536 Public exploit
PicoZip allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structur…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Persism CMS 0.9.2 and earlier allow remote attackers to execute a…
-
Unscored —CVE-2007-2539 Public exploit
The show_files function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive information (file exist…
-
Unscored —CVE-2007-2543 Public exploit
SQL injection vulnerability in game.php in the Flashgames 1.0.1 module for XOOPS allows remote attackers to execute arb…
-
Unscored —CVE-2007-2540 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PMECMS 1.0 and earlier allow remote attackers to execute arbitrar…
-
Unscored —CVE-2007-2538 Public exploit
SQL injection vulnerability in class/debug/debug_show.php in RunCms 1.5.2 and earlier allows remote attackers to execut…
-
Unscored —CVE-2007-2544 Public exploit
PHP remote file inclusion vulnerability in templates/default/tpl_message.php in PHP TopTree BBS 2.0.1a and earlier allo…
-
Unscored —CVE-2007-2541 Public exploit
PHP remote file inclusion vulnerability in includes/ajax_listado.php in Versado CMS 1.07 allows remote attackers to exe…
-
Unscored —CVE-2007-2542 Public exploit
PHP remote file inclusion vulnerability in header.php in workbench survival guide 0.11 allows remote attackers to execu…
-
Unscored —CVE-2007-2537 Public exploit
Multiple SQL injection vulnerabilities in mainfile.php in NPDS 5.10 and earlier allow remote authenticated users to exe…
-
Unscored —
zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with viru…