Archive
14 May 2007
Vulnerabilities first published on this day (UTC), newest first.
41 results · Feed
-
Unscored —CVE-2007-2673 Public exploit
SQL injection vulnerability in includes/funcs_vendors.php in Censura 1.15.04, and other versions before 1.16.04, allows…
-
Unscored —CVE-2007-2660 Public exploit
PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, …
-
Unscored —CVE-2007-2659 Public exploit
Directory traversal vulnerability in index.php in PHP Advanced Transfer Manager (phpATM) 1.30 allows remote attackers t…
-
Unscored —CVE-2007-2663 Public exploit
PHP remote file inclusion vulnerability in language/1/splash.lang.php in Beacon 0.2.0 allows remote attackers to execut…
-
Unscored —CVE-2007-2671 Public exploit
Mozilla Firefox 2.0.0.3 allows remote attackers to cause a denial of service (application crash) via a long hostname in…
-
Unscored —CVE-2007-2657 Public exploit
Unspecified vulnerability in the PrecisionID Barcode 1.3 ActiveX control in PrecisionID_DataMatrix.DLL allows remote at…
-
Unscored —CVE-2007-2662 Public exploit
SQL injection vulnerability in EfesTECH Haber 5.0 allows remote attackers to execute arbitrary SQL commands via the id …
-
Unscored —CVE-2007-2675 Public exploit
SQL injection vulnerability in search.php in Pre Classifieds Listings 1.0 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2007-2664 Public exploit
PHP remote file inclusion vulnerability in includes/common.php in Yaap 1.5 and earlier allows remote attackers to execu…
-
Unscored —CVE-2007-2674 Public exploit
SQL injection vulnerability in detail.php in Pre Shopping Mall 1.0 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2007-2668 Public exploit
Buffer overflow in webdesproxy 0.0.1 allows remote attackers to execute arbitrary code via a long URL, possibly involvi…
-
Unscored —CVE-2007-2661 Public exploit
SQL injection vulnerability in archshow.asp in BlogMe 3.0 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2007-2672 Public exploit
SQL injection vulnerability in index.php in PHP Coupon Script 3.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
Stack-based buffer overflow in LexRuby.cxx (SciLexer.dll) in Scintilla 1.73, as used by notepad++ 4.1.1 and earlier, al…
-
Unscored —CVE-2007-2677 Public exploit
Multiple PHP remote file inclusion vulnerabilities in phpChess Community Edition 2.0 allow remote attackers to execute …
-
Unscored —CVE-2007-2667 Public exploit
Buffer overflow in the DB Software Laboratory VImpX ActiveX control in VImpX.ocx 4.7.3 allows remote attackers to execu…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PHPChain 1.0 and earlier allow remote attackers to inject arbitr…
-
Unscored —
PHPChain 1.0 and earlier allows remote attackers to obtain the installation path via invalid values of the catid parame…
-
Unscored —CVE-2007-2658 Public exploit
Unspecified vulnerability in the ID Automation Linear Barcode 1.6.0.5 ActiveX control in IDAutomationLinear6.dll allows…
-
Unscored —CVE-2007-2665 Public exploit
PHP remote file inclusion vulnerability in block.php in PhpFirstPost 0.1 allows remote attackers to execute arbitrary P…
-
Unscored —
PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine (OTE) 0.7.8 allows remote attack…
-
Unscored —CVE-2007-2656 Public exploit
Stack-based buffer overflow in the Hewlett-Packard (HP) Magview ActiveX control in hpqvwocx.dll 1.0.0.309 allows remote…
-
Unscored —
MyBB 1.2.4 allows remote attackers to obtain sensitive information via the (1) action[] parameter to member.php, (2) im…
-
Unscored —
Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary c…
-
Unscored —
SonicBB 1.0 allows remote attackers to obtain sensitive information via the (1) by[] parameter to search.php, (2) p[] p…
-
Unscored —CVE-2007-1902 Public exploit
Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2007-1903 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in SonicBB 1.0 allows remote attackers to inject arbitrary web s…
-
Unscored —
Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to…
-
Unscored —
Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted…
-
Unscored —
Multiple off-by-one errors in VooDoo cIRCle before 1.1.beta27 allow remote attackers to cause a denial of service (conn…
-
Unscored —
xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or ov…
-
Unscored —
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers…
-
Unscored —
The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) …
-
Unscored —
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands…
-
Unscored —
Multiple unspecified vulnerabilities in Free-SA before 1.2.2 allow remote attackers to execute arbitrary code via unspe…
-
Unscored —CVE-2007-2648 Public exploit
Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control (comparerax.ocx) allows remote attacker…
-
Unscored —
Deutsche Telekom (T-com) Speedport W 700v uses JavaScript delays for invalid authentication attempts to the CGI script,…
-
Unscored —
Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vecto…
-
Unscored —
Heap-based buffer overflow in yEnc32 1.0.7.207 allows user-assisted remote attackers to execute arbitrary code via a lo…
-
Unscored —CVE-2007-2647 Public exploit
Static code injection vulnerability in admin/admin_configuration.php in Monalbum 0.8.7 allows remote authenticated user…