Skip to content
OpenAdvisories

Archive

13 May 2007

Vulnerabilities first published on this day (UTC), newest first.

← April 2007 2007 / May /13 June 2007 →
  1. 15
  2. 255
  3. 313
  4. 417
  5. 5 
  6. 6 
  7. 73
  8. 824
  9. 979
  10. 10 
  11. 1147
  12. 12 
  13. 1316
  14. 1441
  15. 156
  16. 1655
  17. 1722
  18. 1812
  19. 19 
  20. 20 
  21. 2125
  22. 2237
  23. 231
  24. 2434
  25. 253
  26. 26 
  27. 27 
  28. 28 
  29. 299
  30. 3039
  31. 3127
All Critical High Medium Low Exploited only Public exploit

16 results · Feed

  • Unscored —
    CVE-2007-2638

    eFileCabinet 3.3 allows remote attackers to bypass authentication and access restricted portions of the interface via a…

  • Unscored —
    CVE-2007-2636

    Unspecified vulnerability in phpTodo before 0.8.1 allows remote attackers to have an unknown impact via newlines in reg…

  • Unscored —
    CVE-2007-2633

    Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, a…

  • Unscored —
    CVE-2007-2631

    Cross-site request forgery (CSRF) vulnerability in SquirrelMail 1.4.8-4.fc6 and earlier allows remote attackers to perf…

  • Unscored —
    CVE-2007-2642 Public exploit

    Directory traversal vulnerability in galeria.php in R2K Gallery 1.7 allows remote attackers to read arbitrary files via…

  • Unscored —
    CVE-2007-2639 Public exploit

    Directory traversal vulnerability in TFTPdWin 0.4.2 allows remote attackers to read or modify arbitrary files outside t…

  • Unscored —
    CVE-2007-2640

    LibTMCG before 1.1.1 does not perform a range check to avoid "trivial group generators," which allows attackers to obta…

  • Unscored —
    CVE-2007-2643 Public exploit

    Directory traversal vulnerability in phpThumb.php in PinkCrow Designs Gallery or maGAZIn 2.0 allows remote attackers to…

  • Unscored —
    CVE-2007-2644 Public exploit

    A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitra…

  • Unscored —
    CVE-2007-2641 Public exploit

    SQL injection vulnerability in W1L3D4_bolum.asp in W1L3D4 Philboard 0.2 allows remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2007-2632 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PHP Multi User Randomizer (phpMUR) 2006.09.13 allow remote attac…

  • Unscored —
    CVE-2007-2635

    Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service…

  • Unscored —
    CVE-2007-2634 Public exploit

    PHP remote file inclusion vulnerability in common/errormsg.php in aForum 1.32 and possibly earlier, when register_globa…

  • Medium —
    CVE-2007-2637

    MoinMoin Improper ACL handling for calendars and includes

    MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors.

    moin PyPI
  • Unscored —
    CVE-2007-0748

    Heap-based buffer overflow in Apple Darwin Streaming Proxy, when using Darwin Streaming Server before 5.5.5, allows rem…

  • Unscored —
    CVE-2007-0749

    Multiple stack-based buffer overflows in the is_command function in proxy.c in Apple Darwin Streaming Proxy, when using…