Archive
11 May 2007
Vulnerabilities first published on this day (UTC), newest first.
47 results · Feed
-
Unscored —CVE-2007-2628 Public exploit
PHP remote file inclusion vulnerability in include/logout.php in Justin Koivisto SecurityAdmin for PHP (aka PHPSecurity…
-
Unscored —
Cross-site scripting (XSS) vulnerability in sidebar.php in WordPress, when custom 404 pages that call get_sidebar are u…
-
Unscored —
SQL injection vulnerability in admin.php in SchoolBoard allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —
Dynamic variable evaluation vulnerability in shared/config/cp_config.php in All In One Control Panel (AIOCP) before 1.3…
-
Unscored —
Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as…
-
Unscored —
Cross-site scripting (XSS) vulnerability in shared/code/cp_authorization.php in All In One Control Panel (AIOCP) before…
-
Unscored —
Bradford CampusManager Network Control Application Server 3.1(6) allows remote attackers to obtain sensitive informatio…
-
Unscored —CVE-2007-2620 Public exploit
PHP remote file inclusion vulnerability in inc/config.inc.php in Jakub Steiner (aka jimmac) original 0.11 allows remote…
-
Unscored —
Symantec pcAnywhere 11.5.x and 12.0.x retains unencrypted login credentials for the most recent login within process me…
-
Unscored —CVE-2007-2617 Public exploit
srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file pe…
-
Unscored —
Stack-based buffer overflow in the SSL version of the NMDMC.EXE service in Novell NetMail 3.52e FTF2 and probably earli…
-
Unscored —CVE-2007-2621 Public exploit
SQL injection vulnerability in event_view.php in Thyme Calendar 1.3 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2007-2622 Public exploit
Multiple SQL injection vulnerabilities in TaskDriver 1.2 and earlier allow remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2007-2623 Public exploit
Multiple buffer overflows in RControl.dll in Remote Display Dev kit 1.2.1.0 allow remote attackers to cause a denial of…
-
Unscored —
CRLF injection vulnerability in index.php in Drake CMS 0.4.0 allows remote attackers to inject arbitrary HTTP headers a…
-
Unscored —
The Symantec NAVOPTS.DLL ActiveX control (aka Symantec.Norton.AntiVirus.NAVOptions) 12.2.0.13, as used in Norton AntiVi…
-
Unscored —
RSAuction 2.73.1.3 allows remote authenticated users to move their own account status from Suspended to Active via a di…
-
Unscored —CVE-2007-2609 Public exploit
Multiple PHP remote file inclusion vulnerabilities in gnuedu 1.3b2 allow remote attackers to execute arbitrary PHP code…
-
Unscored —CVE-2007-2611 Public exploit
Multiple PHP remote file inclusion vulnerabilities in CGX 20050314 allow remote attackers to execute arbitrary PHP code…
-
Unscored —
SQL injection vulnerability in libs/Wakka.class.php in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to…
-
Unscored —
Buffer overflow in MIBEXTRA.EXE in Ipswitch WhatsUp Gold 11 allows attackers to cause a denial of service (application …
-
Unscored —
Unspecified vulnerability in the GetPropertyById function in ISoftomateObj in SoftomateLib in BRUJULA4.NET.DLL in the B…
-
Unscored —
Unspecified vulnerability in the FlexLabel ActiveX control allows remote attackers to cause a denial of service (unstab…
-
Unscored —CVE-2007-2608 Public exploit
PHP remote file inclusion vulnerability in lib/smarty/SmartyFU.class.php in Miplex2 Alpha 1 allows remote attackers to …
-
Unscored —
Cross-site scripting (XSS) vulnerability in OpenLD before 1.1.9, and 1.1-modified before 1.1-modified3, allows remote a…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in telltarget CMS 1.3.3 allow remote attackers to execute arbitrary …
-
Unscored —
PHP remote file inclusion vulnerability in views/print/printbar.php in LaVague 0.3 and earlier allows remote attackers …
-
Unscored —
Buffer overflow in a certain ActiveX control in the GDivX Zenith Player AviFixer class in fix.dll 1.0.0.1 allows remote…
-
Unscored —
PHP remote file inclusion vulnerability in examples/widget8.php in phpHtmlLib 2.4.0 and earlier allows remote attackers…
-
Unscored —
Multiple buffer overflows in Firebird 2.1 allow attackers to trigger memory corruption and possibly have other unspecif…
-
Unscored —CVE-2007-2600 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow rem…
-
Unscored —CVE-2007-2598 Public exploit
SQL injection vulnerability in print.php in SimpleNews 1.0.0 FINAL allows remote attackers to execute arbitrary SQL com…
-
Unscored —
WikkaWiki (Wikka Wiki) before 1.1.6.3 allows attackers in a shared virtual host server environment to upload and execut…
-
Unscored —
Unspecified vulnerability in the Init function in the Audio CD Ripper OCX (AudioCDRipperOCX.ocx) 1.0 ActiveX control al…
-
Unscored —CVE-2007-2615 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Crie seu PHPLojaFacil 0.1.5 allow remote attackers to execute arb…
-
Unscored —CVE-2007-2596 Public exploit
PHP remote file inclusion vulnerability in common/func.php in aForum 1.32 and earlier allows remote attackers to execut…
-
Unscored —CVE-2007-2594 Public exploit
PHP remote file inclusion vulnerability in inc/articles.inc.php in phpMyPortal 3.0.0 RC3 allows remote attackers to exe…
-
Unscored —CVE-2007-2599 Public exploit
Multiple SQL injection vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers…
-
Unscored —
pptpgre.c in PoPToP Point to Point Tunneling Server (pptpd) before 1.3.4 allows remote attackers to cause a denial of s…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remot…