Skip to content
OpenAdvisories

Archive

22 May 2007

Vulnerabilities first published on this day (UTC), newest first.

← April 2007 2007 / May /22 June 2007 →
  1. 15
  2. 255
  3. 313
  4. 417
  5. 5 
  6. 6 
  7. 73
  8. 824
  9. 979
  10. 10 
  11. 1147
  12. 12 
  13. 1316
  14. 1441
  15. 156
  16. 1655
  17. 1722
  18. 1812
  19. 19 
  20. 20 
  21. 2125
  22. 2237
  23. 231
  24. 2434
  25. 253
  26. 26 
  27. 27 
  28. 28 
  29. 299
  30. 3039
  31. 3127
All Critical High Medium Low Exploited only Public exploit

21 results · Clear filters · Feed

  • Unscored —
    CVE-2007-2817 Public exploit

    SQL injection vulnerability in read/index.php in ol'bookmarks 0.7.4 allows remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2007-2822 Public exploit

    TutorialCMS 1.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication via th…

  • Unscored —
    CVE-2007-2827 Public exploit

    Heap-based buffer overflow in LEAD Technologies LEADTOOLS ISIS ActiveX Control (ltisi14E.ocx) 14.5.0.44 and earlier all…

  • Unscored —
    CVE-2007-2824 Public exploit

    SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute a…

  • Unscored —
    CVE-2007-2826 Public exploit

    PHP remote file inclusion vulnerability in lib/addressbook.php in Madirish Webmail 2.0 allows remote attackers to execu…

  • Unscored —
    CVE-2007-2816 Public exploit EPSS 10%

    Multiple PHP remote file inclusion vulnerabilities in ol'bookmarks 0.7.4 allow remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2007-2821 Public exploit

    SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbit…

    wordpress Debian
  • Unscored —
    CVE-2007-2820 Public exploit

    Multiple stack-based buffer overflows in the KSign KSignSWAT ActiveX Control (AxKSignSWAT.dll) 2.0.3.3 allow remote att…

  • Unscored —
    CVE-2007-2803 Public exploit

    SQL injection vulnerability in default.asp in Vizayn Urun Tanitim Sitesi 0.2 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2007-2519 Public exploit

    Directory traversal vulnerability in the installer in PEAR 1.0 through 1.5.3 allows user-assisted remote attackers to o…

  • Unscored —
    CVE-2007-2805 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in ClientExec (CE) 3.0 beta2, and possibly other versi…

  • Unscored —
    CVE-2007-2807 Public exploit

    Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted,…

    eggdrop Debian
  • Unscored —
    CVE-2007-2814 Public exploit

    Multiple stack-based buffer overflows in the Pegasus ImagN' ActiveX control (IMW32O40.OCX) 4.00.041 allow remote attack…

  • Unscored —
    CVE-2007-2686 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Jetbox CMS 2.1 allows remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2007-2815 Public exploit EPSS 73%

    The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 onl…

  • Unscored —
    CVE-2007-2810 Public exploit

    SQL injection vulnerability in down_indir.asp in Gazi Download Portal allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2007-2806 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in GaliX 2.0 allow remote attackers to inject arbitrar…

  • Unscored —
    CVE-2007-2792 Public exploit

    SQL injection vulnerability in the Yet another Newsletter Component (aka YaNC or com_yanc) component before 1.5 beta 3 …

  • Unscored —
    CVE-2007-2793 Public exploit EPSS 64%

    PHP remote file inclusion vulnerability in ImageImageMagick.php in Geeklog 2.x allows remote attackers to execute arbit…

  • Unscored —
    CVE-2007-2788 Public exploit EPSS 18%

    Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6…

  • Unscored —
    CVE-2007-2791 Public exploit

    Unspecified vulnerability in the Secure Shell (SSH) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows remote attackers to ident…