Archive
May 2007
Vulnerabilities first published in this month (UTC), newest first.
263 results · Clear filters · Feed
-
Unscored —CVE-2007-0609 Public exploit
Directory traversal vulnerability in Advanced Guestbook 2.4.2 allows remote attackers to bypass .htaccess settings, and…
-
Unscored —CVE-2007-2553 Public exploit
Unspecified vulnerability in dop in HP Tru64 UNIX 5.1B-4, 5.1B-3, and 5.1A PK6 allows local users to gain privileges vi…
-
Unscored —CVE-2007-2547 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attack…
-
Unscored —CVE-2007-2549 Public exploit
SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to execut…
-
Unscored —CVE-2007-2536 Public exploit
PicoZip allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structur…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Persism CMS 0.9.2 and earlier allow remote attackers to execute a…
-
Unscored —CVE-2007-2539 Public exploit
The show_files function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive information (file exist…
-
Unscored —CVE-2007-2543 Public exploit
SQL injection vulnerability in game.php in the Flashgames 1.0.1 module for XOOPS allows remote attackers to execute arb…
-
Unscored —CVE-2007-2540 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PMECMS 1.0 and earlier allow remote attackers to execute arbitrar…
-
Unscored —CVE-2007-2538 Public exploit
SQL injection vulnerability in class/debug/debug_show.php in RunCms 1.5.2 and earlier allows remote attackers to execut…
-
Unscored —CVE-2007-2544 Public exploit
PHP remote file inclusion vulnerability in templates/default/tpl_message.php in PHP TopTree BBS 2.0.1a and earlier allo…
-
Unscored —CVE-2007-2541 Public exploit
PHP remote file inclusion vulnerability in includes/ajax_listado.php in Versado CMS 1.07 allows remote attackers to exe…
-
Unscored —CVE-2007-2542 Public exploit
PHP remote file inclusion vulnerability in header.php in workbench survival guide 0.11 allows remote attackers to execu…
-
Unscored —CVE-2007-2537 Public exploit
Multiple SQL injection vulnerabilities in mainfile.php in NPDS 5.10 and earlier allow remote authenticated users to exe…
-
Unscored —
zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with viru…
-
Unscored —CVE-2007-2530 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Tropicalm Crowell Resource 4.5.2 allow remote attackers to execut…
-
Unscored —CVE-2007-2532 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Minh Nguyen Duong Obie Website Mini Web Shop 2 allow remote atta…
-
Unscored —CVE-2007-2531 Public exploit
PHP remote file inclusion vulnerability in berylium-classes.php in Berylium2 2003-08-18 allows remote attackers to exec…
-
Unscored —
Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, w…
-
Unscored —CVE-2007-2527 Public exploit
Multiple PHP remote file inclusion vulnerabilities in DynamicPAD before 1.03.31 allow remote attackers to execute arbit…
-
Unscored —CVE-2007-2524 Public exploit
Cross-site scripting (XSS) vulnerability in index.pl in Open Ticket Request System (OTRS) 2.0.x allows remote attackers…
-
Unscored —CVE-2007-2526 Public exploit
Heap-based buffer overflow in the ConnectAsyncEx function in VNC Viewer ActiveX control (scvncctrl.dll) in the SmartCod…
-
Unscored —
Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote…
-
Unscored —
Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Exp…
-
Unscored —CVE-2007-2521 Public exploit
PHP remote file inclusion vulnerability in common.php in E-GADS! before 2.2.7 allows remote attackers to execute arbitr…
-
Unscored —CVE-2007-1861 Public exploit
The nl_fib_lookup function in net/ipv4/fib_frontend.c in Linux Kernel before 2.6.20.8 allows attackers to cause a denia…
-
Unscored —
Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40…
-
Unscored —CVE-2007-2506 Public exploit
WebSpeed 3.x in OpenEdge 10.x in Progress Software Progress 9.1e, and certain other 9.x versions, allows remote attacke…
-
Unscored —CVE-2007-2507 Public exploit
Directory traversal vulnerability in includes/download.php in Treble Designs 1024 CMS 0.7 allows remote attackers to re…
-
Unscored —CVE-2007-2503 Public exploit
Directory traversal vulnerability in turbulence.php in PHP Turbulence 0.0.1 alpha allows remote attackers to include an…
-
Unscored —CVE-2007-2494 Public exploit
Multiple stack-based buffer overflows in the PowerPointOCX ActiveX control in PowerPointViewer.ocx 3.1.0.3 allow remote…
-
Unscored —CVE-2007-2492 Public exploit
SQL injection vulnerability in index.php in the v4bJournal module for PostNuke allows remote authenticated users to exe…
-
Unscored —CVE-2007-2493 Public exploit
PHP remote file inclusion vulnerability in faq.php in the FAQ & RULES 2.0.0 and earlier module for mxBB allows remote a…
-
Unscored —CVE-2007-2496 Public exploit
The WordOCX ActiveX control in WordViewer.ocx 3.2.0.5 allows remote attackers to cause a denial of service (Internet Ex…
-
Unscored —CVE-2007-2497 Public exploit
RealNetworks RealPlayer 10 Gold allows remote attackers to cause a denial of service (memory consumption) via a certain…
-
Unscored —CVE-2007-2495 Public exploit
Multiple stack-based buffer overflows in the ExcelOCX ActiveX control in ExcelViewer.ocx 3.1.0.6 allow remote attackers…
-
Unscored —
libmp4v2.dll in Winamp 5.02 through 5.34 allows user-assisted remote attackers to execute arbitrary code via a certain …
-
Unscored —
PHP remote file inclusion vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, w…
-
Unscored —
PHP remote file inclusion vulnerability in myflash-button.php in the myflash 1.00 and earlier plugin for WordPress allo…
-
Unscored —
PHP remote file inclusion vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress,…