Archive
May 2007
Vulnerabilities first published in this month (UTC), newest first.
263 results · Clear filters · Feed
-
Unscored —CVE-2007-2854 Public exploit
Multiple SQL injection vulnerabilities in account_change.php in BtiTracker 1.4.1 and earlier allow remote attackers to …
-
Unscored —CVE-2007-2856 Public exploit
Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Intern…
-
Unscored —CVE-2007-2857 Public exploit
PHP remote file inclusion vulnerability in sample/xls2mysql in ABC Excel Parser Pro 4.0 allows remote attackers to exec…
-
Unscored —CVE-2007-2853 Public exploit
The VCDAPILibApi ActiveX control in vc9api.DLL 9.0.0.57 in Virtual CD 9.0.0.2 allows remote attackers to execute arbitr…
-
Unscored —CVE-2007-0448 Public exploit
The fopen function in PHP 5.2.0 does not properly handle invalid URI handlers, which allows context-dependent attackers…
-
Unscored —CVE-2007-2851 Public exploit
A certain ActiveX control in LeadTools Raster Variant Object Library (LTRVR14e.dll) 14.5.0.44 allows remote attackers t…
-
Unscored —CVE-2007-2843 Public exploit
Cross-domain vulnerability in Apple Safari 2.0.4 allows remote attackers to access restricted information from other do…
-
Unscored —CVE-2007-2832 Public exploit
Cross-site scripting (XSS) vulnerability in the web application firewall in Cisco CallManager before 3.3(5)sr3, 4.1 bef…
-
Unscored —CVE-2007-2817 Public exploit
SQL injection vulnerability in read/index.php in ol'bookmarks 0.7.4 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2007-2822 Public exploit
TutorialCMS 1.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication via th…
-
Unscored —CVE-2007-2827 Public exploit
Heap-based buffer overflow in LEAD Technologies LEADTOOLS ISIS ActiveX Control (ltisi14E.ocx) 14.5.0.44 and earlier all…
-
Unscored —CVE-2007-2824 Public exploit
SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2007-2826 Public exploit
PHP remote file inclusion vulnerability in lib/addressbook.php in Madirish Webmail 2.0 allows remote attackers to execu…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in ol'bookmarks 0.7.4 allow remote attackers to execute arbitrary PH…
-
Unscored —CVE-2007-2821 Public exploit
SQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote attackers to execute arbit…
-
Unscored —CVE-2007-2820 Public exploit
Multiple stack-based buffer overflows in the KSign KSignSWAT ActiveX Control (AxKSignSWAT.dll) 2.0.3.3 allow remote att…
-
Unscored —CVE-2007-2803 Public exploit
SQL injection vulnerability in default.asp in Vizayn Urun Tanitim Sitesi 0.2 allows remote attackers to execute arbitra…
-
Unscored —CVE-2007-2519 Public exploit
Directory traversal vulnerability in the installer in PEAR 1.0 through 1.5.3 allows user-assisted remote attackers to o…
-
Unscored —CVE-2007-2805 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in ClientExec (CE) 3.0 beta2, and possibly other versi…
-
Unscored —CVE-2007-2807 Public exploit
Stack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier, allows user-assisted,…
-
Unscored —CVE-2007-2814 Public exploit
Multiple stack-based buffer overflows in the Pegasus ImagN' ActiveX control (IMW32O40.OCX) 4.00.041 allow remote attack…
-
Unscored —CVE-2007-2686 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in Jetbox CMS 2.1 allows remote attackers to inject arbitrary web…
-
Unscored —
The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 onl…
-
Unscored —CVE-2007-2810 Public exploit
SQL injection vulnerability in down_indir.asp in Gazi Download Portal allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2007-2806 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in index.php in GaliX 2.0 allow remote attackers to inject arbitrar…
-
Unscored —CVE-2007-2792 Public exploit
SQL injection vulnerability in the Yet another Newsletter Component (aka YaNC or com_yanc) component before 1.5 beta 3 …
-
Unscored —
PHP remote file inclusion vulnerability in ImageImageMagick.php in Geeklog 2.x allows remote attackers to execute arbit…
-
Unscored —
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6…
-
Unscored —CVE-2007-2791 Public exploit
Unspecified vulnerability in the Secure Shell (SSH) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows remote attackers to ident…
-
Unscored —CVE-2007-2780 Public exploit
PsychoStats 3.0.6b and earlier allows remote attackers to obtain sensitive information via a request for server.php wit…
-
Unscored —CVE-2007-2787 Public exploit
Stack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL ActiveX control in Le…
-
Unscored —CVE-2007-2774 Public exploit
Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2007-2779 Public exploit
PHP remote file inclusion vulnerability in template_csv.php in Libstats 1.0.3 and earlier allows remote attackers to ex…
-
Unscored —CVE-2007-2773 Public exploit
SQL injection vulnerability in plugins/mp3playlist/mp3playlist.php in Zomplog 3.8 and earlier allows remote attackers t…
-
Unscored —CVE-2007-2778 Public exploit
Multiple directory traversal vulnerabilities in MolyX BOARD 2.5.0 allow remote attackers to read arbitrary files via a …
-
Unscored —CVE-2007-2776 Public exploit
AlstraSoft Template Seller Pro 3.25 and earlier sends a redirect to the web browser but does not exit when administrati…
-
Unscored —CVE-2007-2783 Public exploit
Unspecified vulnerability in Rational Soft Hidden Administrator 1.7 and earlier allows remote attackers to bypass authe…
-
Unscored —CVE-2007-2775 Public exploit
AlstraSoft Live Support 1.21 sends a redirect to the web browser but does not exit when administrative credentials are …
-
Unscored —CVE-2007-2777 Public exploit
Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier al…
-
Unscored —
(1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc.dll and rwxdr.dll) in CA BrightStor Backup 11.5.2.0 SP2 al…