Skip to content
OpenAdvisories

Archive

22 May 2007

Vulnerabilities first published on this day (UTC), newest first.

← April 2007 2007 / May /22 June 2007 →
  1. 15
  2. 255
  3. 313
  4. 417
  5. 5 
  6. 6 
  7. 73
  8. 824
  9. 979
  10. 10 
  11. 1147
  12. 12 
  13. 1316
  14. 1441
  15. 156
  16. 1655
  17. 1722
  18. 1812
  19. 19 
  20. 20 
  21. 2125
  22. 2237
  23. 231
  24. 2434
  25. 253
  26. 26 
  27. 27 
  28. 28 
  29. 299
  30. 3039
  31. 3127
All Critical High Medium Low Exploited only Public exploit

37 results · Feed

  • Unscored —
    CVE-2007-2823

    Multiple buffer overflows in HT Editor before 2.0.6 might allow remote attackers to execute arbitrary code via unspecif…

  • Unscored —
    CVE-2007-2817 Public exploit

    SQL injection vulnerability in read/index.php in ol'bookmarks 0.7.4 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2007-2822 Public exploit

    TutorialCMS 1.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication via th…

  • Unscored —
    CVE-2007-2825

    Multiple cross-site scripting (XSS) vulnerabilities in ReadMsg.php in @Mail 5.02 and earlier allow remote attackers to …

  • Unscored —
    CVE-2007-2827 Public exploit

    Heap-based buffer overflow in LEAD Technologies LEADTOOLS ISIS ActiveX Control (ltisi14E.ocx) 14.5.0.44 and earlier all…

  • Unscored —
    CVE-2007-2818

    Cross-site scripting (XSS) vulnerability in cand_login.asp in CactuSoft Parodia 6.4 and earlier allows remote attackers…

  • Unscored —
    CVE-2007-2824 Public exploit

    SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute a…

  • Unscored —
    CVE-2007-2819

    Cross-site scripting (XSS) vulnerability in reportItem.do in Track+ 3.3.2 and earlier allows remote attackers to inject…

  • Unscored —
    CVE-2007-2826 Public exploit

    PHP remote file inclusion vulnerability in lib/addressbook.php in Madirish Webmail 2.0 allows remote attackers to execu…

  • Unscored —
    CVE-2007-2828

    Cross-site request forgery (CSRF) vulnerability in adsense-deluxe.php in the AdSense-Deluxe 0.x plugin for WordPress al…

    Web / CMS
  • Unscored —
    CVE-2007-2816 Public exploit EPSS 10%

    Multiple PHP remote file inclusion vulnerabilities in ol'bookmarks 0.7.4 allow remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2007-2821 Public exploit

    SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbit…

    wordpress Debian
  • Unscored —
    CVE-2007-2820 Public exploit

    Multiple stack-based buffer overflows in the KSign KSignSWAT ActiveX Control (AxKSignSWAT.dll) 2.0.3.3 allow remote att…

  • Unscored —
    CVE-2006-7204

    The imap_body function in PHP before 4.4.4 does not implement safemode or open_basedir checks, which allows local users…

  • Unscored —
    CVE-2006-3894

    The RSA Crypto-C before 6.3.1 and Cert-C before 2.8 libraries, as used by RSA BSAFE, multiple Cisco products, and other…

  • Unscored —
    CVE-2007-2803 Public exploit

    SQL injection vulnerability in default.asp in Vizayn Urun Tanitim Sitesi 0.2 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2007-2519 Public exploit

    Directory traversal vulnerability in the installer in PEAR 1.0 through 1.5.3 allows user-assisted remote attackers to o…

  • Unscored —
    CVE-2007-2802

    Cross-site scripting (XSS) vulnerability in cp/ps/Main/login/Login in RM EasyMail Plus allows remote attackers to injec…

  • Unscored —
    CVE-2007-2805 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in ClientExec (CE) 3.0 beta2, and possibly other versi…

  • Unscored —
    CVE-2007-2812

    Cross-site scripting (XSS) vulnerability in hlstats.php in HLstats 1.35, and possibly earlier, allows remote attackers …

  • Unscored —
    CVE-2007-2809

    Buffer overflow in the transfer manager in Opera before 9.21 for Windows allows user-assisted remote attackers to execu…

  • Unscored —
    CVE-2007-2811

    Cross-site scripting (XSS) vulnerability in OSK Advance-Flow 4.41 and earlier allows remote attackers to inject arbitra…

  • Unscored —
    CVE-2007-2807 Public exploit

    Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted,…

    eggdrop Debian
  • Unscored —
    CVE-2007-2804

    Multiple cross-site scripting (XSS) vulnerabilities in scripts/prodList.asp in CandyPress Store 3.5.2.14 and earlier al…

  • Unscored —
    CVE-2007-2814 Public exploit

    Multiple stack-based buffer overflows in the Pegasus ImagN' ActiveX control (IMW32O40.OCX) 4.00.041 allow remote attack…

  • Unscored —
    CVE-2007-2686 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Jetbox CMS 2.1 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2007-2815 Public exploit EPSS 73%

    The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 onl…

  • Unscored —
    CVE-2007-2810 Public exploit

    SQL injection vulnerability in down_indir.asp in Gazi Download Portal allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2007-2813

    Cisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows remote attackers to cause…

  • Unscored —
    CVE-2007-2808

    Cross-site scripting (XSS) vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows remote attackers to in…

  • Unscored —
    CVE-2007-2806 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in GaliX 2.0 allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2007-2789

    The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java …

  • Unscored —
    CVE-2007-2792 Public exploit

    SQL injection vulnerability in the Yet another Newsletter Component (aka YaNC or com_yanc) component before 1.5 beta 3 …

  • Unscored —
    CVE-2007-2790

    Cross-site scripting (XSS) vulnerability in shopcontent.asp in VP-ASP Shopping Cart 6.50, and possibly earlier, allows …

  • Unscored —
    CVE-2007-2793 Public exploit EPSS 64%

    PHP remote file inclusion vulnerability in ImageImageMagick.php in Geeklog 2.x allows remote attackers to execute arbit…

  • Unscored —
    CVE-2007-2788 Public exploit EPSS 18%

    Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6…

  • Unscored —
    CVE-2007-2791 Public exploit

    Unspecified vulnerability in the Secure Shell (SSH) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows remote attackers to ident…