Archive
May 2007
Vulnerabilities first published in this month (UTC), newest first.
263 results · Clear filters · Feed
-
Unscored —CVE-2007-2621 Public exploit
SQL injection vulnerability in event_view.php in Thyme Calendar 1.3 allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2007-2622 Public exploit
Multiple SQL injection vulnerabilities in TaskDriver 1.2 and earlier allow remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2007-2623 Public exploit
Multiple buffer overflows in RControl.dll in Remote Display Dev kit 1.2.1.0 allow remote attackers to cause a denial of…
-
Unscored —CVE-2007-2609 Public exploit
Multiple PHP remote file inclusion vulnerabilities in gnuedu 1.3b2 allow remote attackers to execute arbitrary PHP code…
-
Unscored —CVE-2007-2611 Public exploit
Multiple PHP remote file inclusion vulnerabilities in CGX 20050314 allow remote attackers to execute arbitrary PHP code…
-
Unscored —CVE-2007-2608 Public exploit
PHP remote file inclusion vulnerability in lib/smarty/SmartyFU.class.php in Miplex2 Alpha 1 allows remote attackers to …
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in telltarget CMS 1.3.3 allow remote attackers to execute arbitrary …
-
Unscored —
PHP remote file inclusion vulnerability in views/print/printbar.php in LaVague 0.3 and earlier allows remote attackers …
-
Unscored —CVE-2007-2600 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow rem…
-
Unscored —CVE-2007-2598 Public exploit
SQL injection vulnerability in print.php in SimpleNews 1.0.0 FINAL allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2007-2615 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Crie seu PHPLojaFacil 0.1.5 allow remote attackers to execute arb…
-
Unscored —CVE-2007-2596 Public exploit
PHP remote file inclusion vulnerability in common/func.php in aForum 1.32 and earlier allows remote attackers to execut…
-
Unscored —CVE-2007-2594 Public exploit
PHP remote file inclusion vulnerability in inc/articles.inc.php in phpMyPortal 3.0.0 RC3 allows remote attackers to exe…
-
Unscored —CVE-2007-2599 Public exploit
Multiple SQL injection vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers…
-
Unscored —CVE-2007-2523 Public exploit
CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descripto…
-
Medium —
Cross-site scripting in Apache Tomcat
Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote attackers to inject arbitr…
-
Unscored —
The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.…
-
Unscored —CVE-2007-2584 Public exploit
Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBM…
-
Unscored —
The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-depe…
-
Unscored —CVE-2007-2585 Public exploit
Stack-based buffer overflow in the Verify function in the BarCodeWiz ActiveX control 2.0 and 2.52 (BarcodeWiz.dll) allo…
-
Unscored —CVE-2007-2588 Public exploit
Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denia…
-
Unscored —
The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which allows remote attackers…
-
Unscored —CVE-2007-2572 Public exploit
PHP remote file inclusion vulnerability in modules/noevents/templates/mfa_theme.php in NoAh (aka PHP Content Architect,…
-
Unscored —CVE-2007-2570 Public exploit
PHP remote file inclusion vulnerability in handlers/page/show.php in Wikivi5 allows remote attackers to execute arbitra…
-
Unscored —CVE-2007-2576 Public exploit
Buffer overflow in the East Wind Software advdaudio.ocx 1.5.1.1 ActiveX control allows user-assisted remote attackers t…
-
Unscored —CVE-2007-2571 Public exploit
SQL injection vulnerability in index.php in the wfquotes 1.0 0 module for XOOPS allows remote attackers to execute arbi…
-
Unscored —CVE-2007-2580 Public exploit
Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords)…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 200…
-
Unscored —CVE-2007-2569 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Friendly 1.0d1 and earlier allow remote attackers to execute arbi…
-
Unscored —CVE-2007-2575 Public exploit
PHP remote file inclusion vulnerability in watermark.php in the vm (aka Jean-Francois Laflamme) watermark 0.4.1 mod for…
-
Unscored —CVE-2007-2574 Public exploit
Directory traversal vulnerability in index.php in Archangel Weblog 0.90.02 allows remote attackers to read arbitrary fi…
-
Unscored —CVE-2007-2573 Public exploit
PHP remote file inclusion vulnerability in plugin/HP_DEV/cms2.php in PHPtree 1.3 allows remote attackers to execute arb…
-
Unscored —CVE-2007-2561 Public exploit
SQL injection vulnerability in index.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2007-2556 Public exploit
SQL injection vulnerability in Nuked-klaN 1.7.6 allows remote attackers to execute arbitrary SQL commands via the X-For…
-
Unscored —CVE-2007-2565 Public exploit
Cdelia Software ImageProcessing allows user-assisted remote attackers to cause a denial of service (application crash) …
-
Unscored —CVE-2007-2560 Public exploit
Directory traversal vulnerability in theme/acgv.php in ACGVannu 1.3 and earlier allows remote attackers to read arbitra…
-
Unscored —CVE-2007-2563 Public exploit
Buffer overflow in the AddFile function in VersalSoft HTTP File Upload ActiveX control (UFileUploaderD.dll) allows remo…
-
Unscored —CVE-2007-2566 Public exploit
The SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to cause a denial of servi…
-
Unscored —CVE-2007-0605 Public exploit
Cross-site scripting (XSS) vulnerability in picture.php in Advanced Guestbook 2.4.2 allows remote attackers to inject a…