Archive
21 May 2007
Vulnerabilities first published on this day (UTC), newest first.
25 results · Feed
-
Unscored —
Ratbox IRC Daemon (aka ircd-ratbox) 2.2.5 and earlier allows remote attackers to cause a denial of service (resource ex…
-
Unscored —CVE-2007-2780 Public exploit
PsychoStats 3.0.6b and earlier allows remote attackers to obtain sensitive information via a request for server.php wit…
-
Unscored —CVE-2007-2787 Public exploit
Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in Le…
-
Unscored —CVE-2007-2774 Public exploit
Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to execute arbitrary PHP …
-
Unscored —
Cross-site scripting (XSS) vulnerability in include/sessionRegister.php in WikyBlog before 1.4.13 allows remote attacke…
-
Unscored —CVE-2007-2779 Public exploit
PHP remote file inclusion vulnerability in template_csv.php in Libstats 1.0.3 and earlier allows remote attackers to ex…
-
Unscored —CVE-2007-2773 Public exploit
SQL injection vulnerability in plugins/mp3playlist/mp3playlist.php in Zomplog 3.8 and earlier allows remote attackers t…
-
Unscored —CVE-2007-2778 Public exploit
Multiple directory traversal vulnerabilities in MolyX BOARD 2.5.0 allow remote attackers to read arbitrary files via a …
-
Unscored —
manage-admins.php in eSyndiCat Pro 1.x allows remote attackers to create additional administrative accounts, and have o…
-
Unscored —
Unspecified vulnerability in globus-job-manager in Globus Toolkit 4.1.1 and earlier (globus_nexus-6.6 and earlier) allo…
-
Unscored —CVE-2007-2776 Public exploit
AlstraSoft Template Seller Pro 3.25 and earlier sends a redirect to the web browser but does not exit when administrati…
-
Unscored —CVE-2007-2783 Public exploit
Unspecified vulnerability in Rational Soft Hidden Administrator 1.7 and earlier allows remote attackers to bypass authe…
-
Unscored —CVE-2007-2775 Public exploit
AlstraSoft Live Support 1.21 sends a redirect to the web browser but does not exit when administrative credentials are …
-
Unscored —CVE-2007-2777 Public exploit
Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier al…
-
Unscored —
Packeteer PacketShaper uses fixed increments in TCP initial sequence number (ISN) values, which allows remote attackers…
-
Unscored —
(1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc.dll and rwxdr.dll) in CA BrightStor Backup 11.5.2.0 SP2 al…
-
Unscored —CVE-2007-2771 Public exploit
Stack-based buffer overflow in the LEAD Technologies LeadTools JPEG 2000 LEADJ2K.LEADJ2K.140 ActiveX control (LTJ2K14.o…
-
Unscored —CVE-2007-2770 Public exploit
Stack-based buffer overflow in Eudora 7.1 allows user-assisted, remote SMTP servers to execute arbitrary code via a lon…
-
Unscored —
ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same …
-
Medium —
Apache Tomcat Vulnerable to Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the appdev/sample/web/hello.jsp example application in Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.23, and 6.0.0 through 6.0.10 allow remote attackers to inje…
-
Unscored —
OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence…
-
Unscored —
Unspecified vulnerability in BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 allows remote attackers to list filesy…
-
Unscored —
BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 does not properly handle compressed files, which allows remote atta…
-
Unscored —CVE-2007-2685 Public exploit
Multiple SQL injection vulnerabilities in index.php in Jetbox CMS 2.1 allow remote attackers to execute arbitrary SQL c…
-
Unscored —
Jetbox CMS 2.1 allows remote attackers to obtain sensitive information via (1) a direct request to (a) main_page.php, (…