Archive
May 2007
Vulnerabilities first published in this month (UTC), newest first.
263 results · Clear filters · Feed
-
Unscored —CVE-2007-2486 Public exploit
Directory traversal vulnerability in download.asp in Motobit 1.3 and 1.5 (aka PStruh-CZ) allows remote attackers to rea…
-
Unscored —CVE-2007-2482 Public exploit
Directory traversal vulnerability in wordtube-button.php in the wordTube 1.43 and earlier plugin for WordPress, when re…
-
Unscored —CVE-2007-2487 Public exploit
Stack-based buffer overflow in AtomixMP3 allows remote attackers to execute arbitrary code via a long filename in an MP…
-
Unscored —CVE-2007-2483 Public exploit
Directory traversal vulnerability in js/wptable-button.php in the wp-Table 1.43 and earlier plugin for WordPress, when …
-
Unscored —CVE-2007-2474 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart 4.0 allow remote attacker…
-
Unscored —CVE-2007-2473 Public exploit
SQL injection vulnerability in stylesheet.php in CMS Made Simple 1.0.5 and earlier allows remote attackers to execute a…
-
Unscored —CVE-2007-2471 Public exploit
Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to read arbitra…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Pixaria Gallery before 1.4.3 allow remote attackers to execute ar…
-
Unscored —
PHP remote file inclusion vulnerability in resources/includes/class.Smarty.php in Pixaria Gallery before 1.4.3 allows r…
-
Unscored —CVE-2007-2456 Public exploit
Multiple PHP remote file inclusion vulnerabilities in FireFly 1.1.01 allow remote attackers to execute arbitrary PHP co…
-
Unscored —
Buffer overflow in asnsp.dll in Aventail Connect 4.1.2.13 allows remote attackers to cause a denial of service (applica…
-
Unscored —CVE-2007-2437 Public exploit
The X render (Xrender) extension in X.org X Window System 7.0, 7.1, and 7.2, with Xserver 1.3.0 and earlier, allows rem…
-
Unscored —CVE-2007-2423 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in MoinMoin 1.5.7 allows remote attackers to inject arbitrary web…
-
Unscored —CVE-2007-2424 Public exploit
PHP remote file inclusion vulnerability in help/index.php in The Merchant (themerchant) 2.2 allows remote attackers to …
-
Unscored —CVE-2007-2429 Public exploit
ManageEngine PasswordManager Pro (PMP) allows remote attackers to obtain administrative access to a database by injecti…
-
Unscored —CVE-2007-2430 Public exploit
shared/code/tce_tmx.php in TCExam 4.0.011 and earlier allows remote attackers to create arbitrary PHP files in cache/ b…
-
Unscored —CVE-2007-2420 Public exploit
SQL injection vulnerability in bry.asp in Burak Yilmaz Blog 1.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2007-2427 Public exploit
SQL injection vulnerability in index.php in the pnFlashGames 1.5 module for PostNuke allows remote attackers to execute…
-
Unscored —CVE-2007-2428 Public exploit
Multiple PHP remote file inclusion vulnerabilities in page.php in Ahhp-Portal allow remote attackers to execute arbitra…
-
Unscored —CVE-2007-2425 Public exploit
Directory traversal vulnerability in fileview.php in Imageview 5.3 allows remote attackers to read arbitrary files via …
-
Unscored —CVE-2007-2431 Public exploit
Dynamic variable evaluation vulnerability in shared/config/tce_config.php in TCExam 4.0.011 and earlier allows remote a…
-
Unscored —
PHP remote file inclusion vulnerability in myfunctions/mygallerybrowser.php in the myGallery 1.4b4 and earlier plugin f…
-
Unscored —CVE-2007-2416 Public exploit
SQL injection vulnerability in home.php in E-Annu allows remote attackers to execute arbitrary SQL commands via the a p…