Archive
May 2007
Vulnerabilities first published in this month (UTC), newest first.
263 results · Clear filters · Feed
-
Unscored —CVE-2007-2771 Public exploit
Stack-based buffer overflow in the LEAD Technologies LeadTools JPEG 2000 LEADJ2K.LEADJ2K.140 ActiveX control (LTJ2K14.o…
-
Unscored —CVE-2007-2770 Public exploit
Stack-based buffer overflow in Eudora 7.1 allows user-assisted, remote SMTP servers to execute arbitrary code via a lon…
-
Medium —
Apache Tomcat Vulnerable to Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the appdev/sample/web/hello.jsp example application in Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.23, and 6.0.0 through 6.0.10 allow remote attackers to inje…
-
Unscored —CVE-2007-2685 Public exploit
Multiple SQL injection vulnerabilities in index.php in Jetbox CMS 2.1 allow remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2007-2762 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Build it Fast (bif3) 0.4.1 allow remote attackers to execute arbi…
-
Unscored —CVE-2007-2761 Public exploit
Stack-based buffer overflow in MagicISO 5.4 build 239 and earlier allows remote attackers to execute arbitrary code via…
-
Unscored —CVE-2007-2757 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Redoable 1.2 allow remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2007-2763 Public exploit
Buffer overflow in the UnlockSupport function in the LockModules subsystem in a certain ActiveX control in ltmm15.dll i…
-
Unscored —CVE-2007-2755 Public exploit
The PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode.dll, when Internet Explorer 6 is used, allows remote…
-
Unscored —CVE-2007-2750 Public exploit
SQL injection vulnerability in print.php in SimpNews 2.40.01 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2007-2747 Public exploit
Directory traversal vulnerability in rdw_helpers.py in rdiffWeb before 0.3.5.1 allows remote attackers to read arbitrar…
-
Unscored —CVE-2007-2751 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PHPGlossar 0.8 allow remote attackers to execute arbitrary PHP co…
-
Unscored —CVE-2007-2749 Public exploit
SQL injection vulnerability in question.php in FAQEngine 4.16.03 and earlier allows remote attackers to execute arbitra…
-
Unscored —CVE-2007-2753 Public exploit
RunawaySoft Haber portal 1.0 stores sensitive information under the web root with insufficient access control, which al…
-
Unscored —CVE-2007-2752 Public exploit
SQL injection vulnerability in devami.asp in RunawaySoft Haber portal 1.0 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2007-2744 Public exploit
Stack-based buffer overflow in the PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode.dll allows remote att…
-
Unscored —CVE-2007-2736 Public exploit
PHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2007-2738 Public exploit
SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attack…
-
Unscored —CVE-2007-2743 Public exploit
PHP remote file inclusion vulnerability in custom_vars.php in GlossWord 1.8.1 allows remote attackers to execute arbitr…
-
Unscored —CVE-2007-2737 Public exploit
SQL injection vulnerability in index.php in the MyConference 1.0 module for Xoops allows remote attackers to execute ar…
-
Unscored —CVE-2007-2735 Public exploit
SQL injection vulnerability in edit_day.php in the ResManager 1.2.1 and earlier module for Xoops allows remote attacker…
-
Unscored —CVE-2007-1898 Public exploit
formmail.php in Jetbox CMS 2.1 allows remote attackers to send arbitrary e-mails (spam) via modified recipient, _SETTIN…
-
Unscored —CVE-2007-2732 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script…
-
Unscored —CVE-2007-2725 Public exploit
The DB Software Laboratory DeWizardX (DEWizardAX.ocx) ActiveX control allows remote attackers to overwrite arbitrary fi…
-
Unscored —CVE-2007-2568 Public exploit
Multiple stack-based buffer overflows in VCDGear 3.55 allow user-assisted remote attackers to execute arbitrary code vi…
-
Unscored —CVE-2007-2722 Public exploit
Unspecified vulnerability in NewzCrawler 1.8 allows remote attackers to cause a denial of service (application instabil…
-
Unscored —CVE-2007-2726 Public exploit
BitsCast 0.13.0 allows remote attackers to cause a denial of service (application crash) via an RSS 2.0 feed item with …
-
Unscored —
Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Se…
-
Unscored —CVE-2007-2716 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in EQdkp 1.3.2c and earlier allow remote attackers to inject arbitr…
-
Unscored —CVE-2007-2440 Public exploit
Directory traversal vulnerability in Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows all…
-
Unscored —CVE-2007-2441 Public exploit
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to obtain the sy…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using…
-
Unscored —CVE-2007-2717 Public exploit
SQL injection vulnerability in shop/page.php in iGeneric (iG) Shop 1.4 allows remote attackers to execute arbitrary SQL…
-
Unscored —
Unspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress plugin, has unknown impact…
-
Unscored —
PHP remote file inclusion vulnerability in linksnet_linkslog_rss.php in Linksnet Newsfeed 1.0 allows remote attackers t…
-
Unscored —CVE-2007-2706 Public exploit
PHP remote file inclusion vulnerability in maint/ftpmedia.php in Media Gallery 1.4.8a and earlier for Geeklog allows re…
-
Unscored —CVE-2007-2710 Public exploit
PHP remote file inclusion vulnerability in functions/prepend_adm.php in NagiosQL 2.00-P00 and earlier allows remote att…
-
Unscored —
Stack-based buffer overflow in TinyIdentD 2.2 and earlier allows remote attackers to execute arbitrary code via a long …
-
Unscored —
Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1)…
-
Unscored —
PHP remote file inclusion vulnerability in newsadmin.php in Feindt Computerservice News (News-Script) 2.0 allows remote…