Skip to content
OpenAdvisories

Archive

17 May 2007

Vulnerabilities first published on this day (UTC), newest first.

← April 2007 2007 / May /17 June 2007 →
  1. 15
  2. 255
  3. 313
  4. 417
  5. 5 
  6. 6 
  7. 73
  8. 824
  9. 979
  10. 10 
  11. 1147
  12. 12 
  13. 1316
  14. 1441
  15. 156
  16. 1655
  17. 1722
  18. 1812
  19. 19 
  20. 20 
  21. 2125
  22. 2237
  23. 231
  24. 2434
  25. 253
  26. 26 
  27. 27 
  28. 28 
  29. 299
  30. 3039
  31. 3127
All Critical High Medium Low Exploited only Public exploit

22 results · Feed

  • Unscored —
    CVE-2007-2755 Public exploit

    The PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode.dll, when Internet Explorer 6 is used, allows remote…

  • Unscored —
    CVE-2007-2754

    Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute ar…

    freetype Debian
  • Unscored —
    CVE-2007-1693

    The SIP channel module in Yet Another Telephony Engine (Yate) before 1.2.0 sets the caller_info_uri parameter using an …

  • Unscored —
    CVE-2007-2746

    The viewList function in lib/WebGUI/Asset/Wobject/DataForm.pm in Plain Black WebGUI before 7.3.14 does not properly use…

  • Unscored —
    CVE-2007-2750 Public exploit

    SQL injection vulnerability in print.php in SimpNews 2.40.01 and earlier allows remote attackers to execute arbitrary S…

  • Unscored —
    CVE-2007-2747 Public exploit

    Directory traversal vulnerability in rdw_helpers.py in rdiffWeb before 0.3.5.1 allows remote attackers to read arbitrar…

  • Unscored —
    CVE-2007-2751 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in PHPGlossar 0.8 allow remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2007-2749 Public exploit

    SQL injection vulnerability in question.php in FAQEngine 4.16.03 and earlier allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2007-2748

    The substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information v…

  • Unscored —
    CVE-2007-2753 Public exploit

    RunawaySoft Haber portal 1.0 stores sensitive information under the web root with insufficient access control, which al…

  • Unscored —
    CVE-2007-2752 Public exploit

    SQL injection vulnerability in devami.asp in RunawaySoft Haber portal 1.0 allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2007-2745

    Cross-site scripting (XSS) vulnerability in printcal.pl in vDesk Webmail 4.03 allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2007-2744 Public exploit

    Stack-based buffer overflow in the PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode.dll allows remote att…

  • Unscored —
    CVE-2007-2736 Public exploit

    PHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to execute arbitrary PHP …

  • Unscored —
    CVE-2007-2738 Public exploit

    SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attack…

  • Unscored —
    CVE-2007-2741

    Stack-based buffer overflow in Little CMS (lcms) before 1.15 allows remote attackers to execute arbitrary code or cause…

  • Unscored —
    CVE-2007-2743 Public exploit

    PHP remote file inclusion vulnerability in custom_vars.php in GlossWord 1.8.1 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2007-2737 Public exploit

    SQL injection vulnerability in index.php in the MyConference 1.0 module for Xoops allows remote attackers to execute ar…

  • Unscored —
    CVE-2007-2735 Public exploit

    SQL injection vulnerability in edit_day.php in the ResManager 1.2.1 and earlier module for Xoops allows remote attacker…

  • Unscored —
    CVE-2007-2740

    Unspecified vulnerability in xajax before 0.2.5 has unknown impact and attack vectors, not related to XSS.

    php-xajax Debian
  • Unscored —
    CVE-2007-2739

    Cross-site scripting (XSS) vulnerability in xajax before 0.2.5 allows remote attackers to inject arbitrary web script o…

    php-xajax Debian
  • Unscored —
    CVE-2007-2742

    Unrestricted file upload vulnerability in labs.beffa.org w2box 4.0.0 Beta4 allows remote attackers to upload arbitrary …