Archive
16 May 2007
Vulnerabilities first published on this day (UTC), newest first.
55 results · Feed
-
Unscored —
Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery …
-
Unscored —CVE-2007-1898 Public exploit
formmail.php in Jetbox CMS 2.1 allows remote attackers to send arbitrary e-mails (spam) via modified recipient, _SETTIN…
-
Unscored —
CRLF injection vulnerability in formmail.php in Jetbox CMS 2.1 might allow remote attackers to inject arbitrary e-mail …
-
Unscored —
Unrestricted file upload vulnerability in Jetbox CMS allows remote authenticated users with author privileges to upload…
-
Unscored —
The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HT…
-
Unscored —
Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do n…
-
Unscored —CVE-2007-2732 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script…
-
Unscored —
The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to c…
-
Unscored —
Media Player Classic 6.4.9.0 allows user-assisted remote attackers to cause a denial of service (web browser crash) via…
-
Unscored —
Check Point ZoneAlarm Pro before 6.5.737.000 does not properly test for equivalence of process identifiers for certain …
-
Unscored —CVE-2007-2725 Public exploit
The DB Software Laboratory DeWizardX (DEWizardAX.ocx) ActiveX control allows remote attackers to overwrite arbitrary fi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in all_photos.html in fotolog allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2007-2568 Public exploit
Multiple stack-based buffer overflows in VCDGear 3.55 allow user-assisted remote attackers to execute arbitrary code vi…
-
Unscored —
The mcrypt_create_iv function in ext/mcrypt/mcrypt.c in PHP before 4.4.7, 5.2.1, and possibly 5.0.x and other PHP 5 ver…
-
Unscored —
The soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown impact and attack vec…
-
Unscored —CVE-2007-2722 Public exploit
Unspecified vulnerability in NewzCrawler 1.8 allows remote attackers to cause a denial of service (application instabil…
-
Unscored —CVE-2007-2726 Public exploit
BitsCast 0.13.0 allows remote attackers to cause a denial of service (application crash) via an RSS 2.0 feed item with …
-
Unscored —
Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Se…
-
Unscored —
The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remo…
-
Unscored —CVE-2007-2716 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in EQdkp 1.3.2c and earlier allow remote attackers to inject arbitr…
-
Unscored —CVE-2007-2440 Public exploit
Directory traversal vulnerability in Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows all…
-
Unscored —CVE-2007-2441 Public exploit
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to obtain the sy…
-
Unscored —
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to cause a denia…
-
Unscored —
Group-Office before 2.16-13 does not properly validate user IDs, which allows remote attackers to obtain sensitive info…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using…
-
Unscored —CVE-2007-2717 Public exploit
SQL injection vulnerability in shop/page.php in iGeneric (iG) Shop 1.4 allows remote attackers to execute arbitrary SQL…
-
Unscored —
Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to h…
-
Unscored —
Unspecified vulnerability in MH Software Connect Daily before 3.3.3 has unknown impact and attack vectors.
-
Unscored —
Unspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress plugin, has unknown impact…
-
Unscored —
PHP remote file inclusion vulnerability in linksnet_linkslog_rss.php in Linksnet Newsfeed 1.0 allows remote attackers t…
-
Unscored —CVE-2007-2706 Public exploit
PHP remote file inclusion vulnerability in maint/ftpmedia.php in Media Gallery 1.4.8a and earlier for Geeklog allows re…
-
Unscored —CVE-2007-2710 Public exploit
PHP remote file inclusion vulnerability in functions/prepend_adm.php in NagiosQL 2.00-P00 and earlier allows remote att…
-
Unscored —
Stack-based buffer overflow in TinyIdentD 2.2 and earlier allows remote attackers to execute arbitrary code via a long …
-
Unscored —
Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1)…
-
Unscored —
PHP remote file inclusion vulnerability in newsadmin.php in Feindt Computerservice News (News-Script) 2.0 allows remote…
-
Unscored —
ifdate 2.x sends a redirect to the web browser but does not exit when administrative credentials are missing, which all…
-
Unscored —CVE-2007-2709 Public exploit
PHP remote file inclusion vulnerability in functions/prepend_adm.php in NagiosQL 2005 2.00 allows remote attackers to e…
-
Unscored —
Directory traversal vulnerability in the Test View Console in BEA WebLogic Integration 9.2 before SP1 and WebLogic Work…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the GroupSpace application in BEA WebLogic Portal 9.2 GA allows remote auth…
-
Unscored —
The WLST script generated by the configToScript command in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does no…