Archive
May 2007
Vulnerabilities first published in this month (UTC), newest first.
263 results · Clear filters · Feed
-
Unscored —CVE-2007-2709 Public exploit
PHP remote file inclusion vulnerability in functions/prepend_adm.php in NagiosQL 2005 2.00 allows remote attackers to e…
-
Unscored —CVE-2007-2683 Public exploit
Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, …
-
Unscored —CVE-2007-2678 Public exploit
Buffer overflow in the isChecked function in toolbar.dll in Netsprint Toolbar 1.1 might allow remote attackers to execu…
-
Unscored —CVE-2007-2673 Public exploit
SQL injection vulnerability in includes/funcs_vendors.php in Censura 1.15.04, and other versions before 1.16.04, allows…
-
Unscored —CVE-2007-2660 Public exploit
PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, …
-
Unscored —CVE-2007-2659 Public exploit
Directory traversal vulnerability in index.php in PHP Advanced Transfer Manager (phpATM) 1.30 allows remote attackers t…
-
Unscored —CVE-2007-2663 Public exploit
PHP remote file inclusion vulnerability in language/1/splash.lang.php in Beacon 0.2.0 allows remote attackers to execut…
-
Unscored —CVE-2007-2671 Public exploit
Mozilla Firefox 2.0.0.3 allows remote attackers to cause a denial of service (application crash) via a long hostname in…
-
Unscored —CVE-2007-2657 Public exploit
Unspecified vulnerability in the PrecisionID Barcode 1.3 ActiveX control in PrecisionID_DataMatrix.DLL allows remote at…
-
Unscored —CVE-2007-2662 Public exploit
SQL injection vulnerability in EfesTECH Haber 5.0 allows remote attackers to execute arbitrary SQL commands via the id …
-
Unscored —CVE-2007-2675 Public exploit
SQL injection vulnerability in search.php in Pre Classifieds Listings 1.0 allows remote attackers to execute arbitrary …
-
Unscored —CVE-2007-2664 Public exploit
PHP remote file inclusion vulnerability in includes/common.php in Yaap 1.5 and earlier allows remote attackers to execu…
-
Unscored —CVE-2007-2674 Public exploit
SQL injection vulnerability in detail.php in Pre Shopping Mall 1.0 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2007-2668 Public exploit
Buffer overflow in webdesproxy 0.0.1 allows remote attackers to execute arbitrary code via a long URL, possibly involvi…
-
Unscored —CVE-2007-2661 Public exploit
SQL injection vulnerability in archshow.asp in BlogMe 3.0 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2007-2672 Public exploit
SQL injection vulnerability in index.php in PHP Coupon Script 3.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
Stack-based buffer overflow in LexRuby.cxx (SciLexer.dll) in Scintilla 1.73, as used by notepad++ 4.1.1 and earlier, al…
-
Unscored —CVE-2007-2677 Public exploit
Multiple PHP remote file inclusion vulnerabilities in phpChess Community Edition 2.0 allow remote attackers to execute …
-
Unscored —CVE-2007-2667 Public exploit
Buffer overflow in the DB Software Laboratory VImpX ActiveX control in VImpX.ocx 4.7.3 allows remote attackers to execu…
-
Unscored —CVE-2007-2658 Public exploit
Unspecified vulnerability in the ID Automation Linear Barcode 1.6.0.5 ActiveX control in IDAutomationLinear6.dll allows…
-
Unscored —CVE-2007-2665 Public exploit
PHP remote file inclusion vulnerability in block.php in PhpFirstPost 0.1 allows remote attackers to execute arbitrary P…
-
Unscored —
PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine (OTE) 0.7.8 allows remote attack…
-
Unscored —CVE-2007-2656 Public exploit
Stack-based buffer overflow in the Hewlett-Packard (HP) Magview ActiveX control in hpqvwocx.dll 1.0.0.309 allows remote…
-
Unscored —CVE-2007-1902 Public exploit
Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2007-1903 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in SonicBB 1.0 allows remote attackers to inject arbitrary web s…
-
Unscored —
Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted…
-
Unscored —
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers…
-
Unscored —
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands…
-
Unscored —CVE-2007-2648 Public exploit
Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control (comparerax.ocx) allows remote attacker…
-
Unscored —CVE-2007-2647 Public exploit
Static code injection vulnerability in admin/admin_configuration.php in Monalbum 0.8.7 allows remote authenticated user…
-
Unscored —CVE-2007-2642 Public exploit
Directory traversal vulnerability in galeria.php in R2K Gallery 1.7 allows remote attackers to read arbitrary files via…
-
Unscored —CVE-2007-2639 Public exploit
Directory traversal vulnerability in TFTPdWin 0.4.2 allows remote attackers to read or modify arbitrary files outside t…
-
Unscored —CVE-2007-2643 Public exploit
Directory traversal vulnerability in phpThumb.php in PinkCrow Designs Gallery or maGAZIn 2.0 allows remote attackers to…
-
Unscored —CVE-2007-2644 Public exploit
A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitra…
-
Unscored —CVE-2007-2641 Public exploit
SQL injection vulnerability in W1L3D4_bolum.asp in W1L3D4 Philboard 0.2 allows remote attackers to execute arbitrary SQ…
-
Unscored —CVE-2007-2632 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in PHP Multi User Randomizer (phpMUR) 2006.09.13 allow remote attac…
-
Unscored —CVE-2007-2634 Public exploit
PHP remote file inclusion vulnerability in common/errormsg.php in aForum 1.32 and possibly earlier, when register_globa…
-
Unscored —CVE-2007-2628 Public exploit
PHP remote file inclusion vulnerability in include/logout.php in Justin Koivisto SecurityAdmin for PHP (aka PHPSecurity…
-
Unscored —CVE-2007-2620 Public exploit
PHP remote file inclusion vulnerability in inc/config.inc.php in Jakub Steiner (aka jimmac) original 0.11 allows remote…
-
Unscored —CVE-2007-2617 Public exploit
srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file pe…