Skip to content
OpenAdvisories

Archive

16 May 2007

Vulnerabilities first published on this day (UTC), newest first.

← April 2007 2007 / May /16 June 2007 →
  1. 15
  2. 255
  3. 313
  4. 417
  5. 5 
  6. 6 
  7. 73
  8. 824
  9. 979
  10. 10 
  11. 1147
  12. 12 
  13. 1316
  14. 1441
  15. 156
  16. 1655
  17. 1722
  18. 1812
  19. 19 
  20. 20 
  21. 2125
  22. 2237
  23. 231
  24. 2434
  25. 253
  26. 26 
  27. 27 
  28. 28 
  29. 299
  30. 3039
  31. 3127
All Critical High Medium Low Exploited only Public exploit

55 results · Feed

  • Unscored —
    CVE-2007-2691

    MySQL before 4.1.23, 5.0.x before 5.0.42, and 5.1.x before 5.1.18 does not require the DROP privilege for RENAME TABLE …

  • Unscored —
    CVE-2007-2693

    MySQL before 5.1.18 allows remote authenticated users without SELECT privileges to obtain sensitive information from pa…

  • Unscored —
    CVE-2007-2688

    The Cisco Intrusion Prevention System (IPS) and IOS with Firewall/IPS Feature Set do not properly handle certain full-w…

  • Unscored —
    CVE-2007-2694

    Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 th…

  • Unscored —
    CVE-2007-2696

    The JMS Server in BEA WebLogic Server 6.1 through SP7, 7.0 through SP6, and 8.1 through SP5 enforces security access po…

  • Unscored —
    CVE-2007-2703

    BEA WebLogic Portal 9.2 GA can corrupt a visitor entitlements role if an administrator provides a long role description…

  • Unscored —
    CVE-2007-2695

    The HttpClusterServlet and HttpProxyServlet in BEA WebLogic Express and WebLogic Server 6.1 through SP7, 7.0 through SP…

  • Unscored —
    CVE-2007-2701

    The JMS Message Bridge in BEA WebLogic Server 7.0 through SP7 and 8.1 through Service Pack 6, when configured without a…

  • Unscored —
    CVE-2007-2690

    Multiple IBM ISS Proventia Series products, including the A, G, and M series, do not properly handle certain full-width…

  • Unscored —
    CVE-2007-2704

    BEA WebLogic Server 9.0 through 9.2 allows remote attackers to cause a denial of service (SSL port unavailability) by a…

  • Unscored —
    CVE-2007-2699 EPSS 29%

    The Administration Console in BEA WebLogic Express and WebLogic Server 9.0 and 9.1 does not properly enforce certain Do…

  • Unscored —
    CVE-2007-2689

    Check Point Web Intelligence does not properly handle certain full-width and half-width Unicode character encodings, wh…

  • Unscored —
    CVE-2007-2692

    The mysql_change_db function in MySQL 5.0.x before 5.0.40 and 5.1.x before 5.1.18 does not restore THD::db_access privi…

  • Unscored —
    CVE-2007-2698

    The Administration Console in BEA WebLogic Server 9.0 may show plaintext Web Service attributes during configuration cr…

  • Unscored —
    CVE-2007-2697

    The embedded LDAP server in BEA WebLogic Express and WebLogic Server 7.0 through SP6, 8.1 through SP5, 9.0, and 9.1, wh…