Skip to content
OpenAdvisories

Archive

May 2007

Vulnerabilities first published in this month (UTC), newest first.

263 results · Clear filters · Feed

  • Unscored —
    CVE-2007-2959 Public exploit

    SQL injection vulnerability in manufacturer.php in cpCommerce before 1.1.0 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2007-2962 Public exploit

    Cross-site scripting (XSS) vulnerability in search.php in Particle Gallery 1.0.1 and earlier allows remote attackers to…

  • Unscored —
    CVE-2007-2964 Public exploit

    The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial …

  • Unscored —
    CVE-2007-2938 Public exploit EPSS 41%

    Buffer overflow in the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) 5.4.0.6,…

  • Unscored —
    CVE-2007-2933 Public exploit

    SQL injection vulnerability in index.php in the Phil-a-Form (com_philaform) 1.2.0.0 and earlier component for Joomla! a…

  • Unscored —
    CVE-2007-2935 Public exploit

    core/spellcheck/spellcheck.php in Fundanemt before 2.2.0.1 allows remote attackers to execute arbitrary commands via sh…

  • Unscored —
    CVE-2007-2932 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in BoastMachine allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2007-2936 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Frequency Clock 0.1b (Beta 0.1) allow remote attackers to execute…

  • Unscored —
    CVE-2007-2946 Public exploit

    Buffer overflow in a certain ActiveX control in LeadTools Raster Dialog File_D Object (LTRDFD14e.DLL) 14.5.0.44 allows …

  • Unscored —
    CVE-2007-2943 Public exploit

    PHP remote file inclusion vulnerability in class/class.php in Webavis 0.1.1 allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2007-2937 Public exploit EPSS 64%

    PHP remote file inclusion vulnerability in admin/admin.php in TROforum 0.1 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2007-2934 Public exploit

    Directory traversal vulnerability in skins/common.css.php in Vistered Little 1.6a allows remote attackers to read arbit…

  • Unscored —
    CVE-2007-2941 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in the creator in vBulletin Google Yahoo Site Map (vBGSiteMap) 2.41 …

  • Unscored —
    CVE-2007-2939 Public exploit EPSS 64%

    Multiple PHP remote file inclusion vulnerabilities in Mazen's PHP Chat 3.0.0 allow remote attackers to execute arbitrar…

  • Unscored —
    CVE-2007-2947 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in OpenBASE Alpha 0.6 allow remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2007-2940 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in FlaP 1.0b (1.0 Beta) allow remote attackers to execute arbitrary …

  • Unscored —
    CVE-2007-2942 Public exploit

    SQL injection vulnerability in user.php in My Little Forum 1.7 and earlier allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2007-0693 Public exploit

    SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2007-0694 Public exploit

    Cross-site scripting (XSS) vulnerability in footer.php in DGNews 2.1 allows remote attackers to inject arbitrary web sc…

  • Unscored —
    CVE-2007-2900 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Scallywag 2005-04-25 allow remote attackers to execute arbitrary …

  • Unscored —
    CVE-2007-2908 Public exploit

    Cross-site scripting (XSS) vulnerability in calendar.php in Jelsoft vBulletin before 3.6.6 allows remote attackers to i…

  • Unscored —
    CVE-2007-2902 Public exploit

    SQL injection vulnerability in main/auth/my_progress.php in Dokeos 1.8.0 and earlier allows remote authenticated users …

  • Unscored —
    CVE-2007-2903 Public exploit EPSS 29%

    Buffer overflow in the HelpPopup method in the Microsoft Office 2000 Controllo UA di Microsoft Office ActiveX control (…

  • Unscored —
    CVE-2007-2899 Public exploit

    Direct static code injection vulnerability in admin_config.php in NavBoard 2.6.0 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2007-2901 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.0 and earlier allow remote attackers to inject arbitr…

  • Unscored —
    CVE-2007-2892 Public exploit

    Cross-site scripting (XSS) vulnerability in news.asp in ASP-Nuke 2.0.7 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2007-2884 Public exploit EPSS 36%

    Multiple stack-based buffer overflows in Microsoft Visual Basic 6 allow user-assisted remote attackers to cause a denia…

  • Unscored —
    CVE-2007-2888 Public exploit EPSS 55%

    Stack-based buffer overflow in UltraISO 8.6.2.2011 and earlier allows user-assisted remote attackers to execute arbitra…

  • Unscored —
    CVE-2007-2895 Public exploit

    Buffer overflow in a certain ActiveX control in LTRDF14e.DLL 14.5.0.44 in LeadTools Raster Dialog File Object allows re…

  • Unscored —
    CVE-2007-2894 Public exploit

    The emulated floppy disk controller in Bochs 2.3 allows local users of the guest operating system to cause a denial of …

  • Unscored —
    CVE-2007-2890 Public exploit

    SQL injection vulnerability in category.php in cpCommerce 1.1.0 and earlier allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2007-2887 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Web Icerik Yonetim Sistemi (WIYS) 1.0 allows remote attackers …

  • Unscored —
    CVE-2007-2889 Public exploit

    SQL injection vulnerability in tracking/courseLog.php in Dokeos 1.6.5 and earlier allows remote attackers to execute ar…

  • Unscored —
    CVE-2007-2891 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in FirmWorX 0.1.2 allow remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2007-2879 Public exploit

    Cross-site scripting (XSS) vulnerability in mods.php in GTP GNUTurk Portal System 3G allows remote attackers to inject …

  • Unscored —
    CVE-2007-2878 Public exploit

    The VFAT compat ioctls in the Linux kernel before 2.6.21.2, when run on a 64-bit system, allow local users to corrupt a…

  • Unscored —
    CVE-2007-2865 Public exploit

    Cross-site scripting (XSS) vulnerability in sqledit.php in phpPgAdmin 4.1.1 allows remote attackers to inject arbitrary…

  • Unscored —
    CVE-2007-0753 Public exploit

    Format string vulnerability in the VPN daemon (vpnd) in Apple Mac OS X 10.3.9 and 10.4.9 allows local users to execute …

  • Unscored —
    CVE-2007-0752 Public exploit

    The PPP daemon (pppd) in Apple Mac OS X 10.4.8 checks ownership of the stdin file descriptor to determine if the invoke…

  • Unscored —
    CVE-2007-2386 Public exploit EPSS 50%

    Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of servi…