Skip to content
OpenAdvisories

Archive

May 2007

Vulnerabilities first published in this month (UTC), newest first.

← April 2007 2007 / May June 2007 →
  1. 15
  2. 255
  3. 313
  4. 417
  5. 5 
  6. 6 
  7. 73
  8. 824
  9. 979
  10. 10 
  11. 1147
  12. 12 
  13. 1316
  14. 1441
  15. 156
  16. 1655
  17. 1722
  18. 1812
  19. 19 
  20. 20 
  21. 2125
  22. 2237
  23. 231
  24. 2434
  25. 253
  26. 26 
  27. 27 
  28. 28 
  29. 299
  30. 3039
  31. 3127
All Critical High Medium Low Exploited only Public exploit

570 results · Feed

  • Unscored —
    CVE-2007-2603

    Unspecified vulnerability in the Init function in the Audio CD Ripper OCX (AudioCDRipperOCX.ocx) 1.0 ActiveX control al…

  • Unscored —
    CVE-2007-2615 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Crie seu PHPLojaFacil 0.1.5 allow remote attackers to execute arb…

  • Unscored —
    CVE-2007-2596 Public exploit

    PHP remote file inclusion vulnerability in common/func.php in aForum 1.32 and earlier allows remote attackers to execut…

  • Unscored —
    CVE-2007-2594 Public exploit

    PHP remote file inclusion vulnerability in inc/articles.inc.php in phpMyPortal 3.0.0 RC3 allows remote attackers to exe…

  • Unscored —
    CVE-2007-2599 Public exploit

    Multiple SQL injection vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers…

  • Unscored —
    CVE-2007-0244

    pptpgre.c in PoPToP Point to Point Tunneling Server (pptpd) before 1.3.4 allows remote attackers to cause a denial of s…

    pptpd Debian
  • Unscored —
    CVE-2007-1262

    Multiple cross-site scripting (XSS) vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remot…

  • Unscored —
    CVE-2007-2523 Public exploit

    CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descripto…

  • Unscored —
    CVE-2007-2592

    Multiple cross-site scripting (XSS) vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2,…

  • Unscored —
    CVE-2007-2522 EPSS 27%

    Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Ant…

  • Unscored —
    CVE-2007-2591

    usrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Group…

  • Unscored —
    CVE-2007-2589

    Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attac…

  • Unscored —
    CVE-2007-2593

    The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-si…

  • Unscored —
    CVE-2007-2590

    Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and …

  • Medium —
    CVE-2006-7196 Public exploit EPSS 72%

    Cross-site scripting in Apache Tomcat

    Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time…

    org.apache.tomcat:tomcat Maven
  • Medium —
    CVE-2006-7195

    Apache Tomcat XSS Vulnerability

    Cross-site scripting (XSS) vulnerability in implicit-objects.jsp in Apache Tomcat 5.0.0 through 5.0.30 and 5.5.0 through 5.5.17 allows remote attackers to inject arbitrary web script or HTML via certain header values.

    org.apache.tomcat:tomcat Maven
  • High —
    CVE-2005-4836

    Apache Tomcat allows remote attackers to read JSP source files

    The HTTP/1.1 connector in Apache Tomcat 4.1.15 through 4.1.40 does not reject NULL bytes in a URL when allowLinking is configured, which allows remote attackers to read JSP source files and obtain sensitive information.

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2007-1280 Public exploit EPSS 14%

    Cross-site scripting (XSS) vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2007-1858 Public exploit EPSS 18%

    The default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.…

  • Low —
    CVE-2007-1358 EPSS 20%

    Apache Tomcat XSS In Accept-Language Headers

    Cross-site scripting (XSS) vulnerability in certain applications using Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.34 allows remote attackers to inject arbitrary web script or HTML via crafted "Accept-Language headers that do not conform to RFC 26…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2007-2584 Public exploit

    Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBM…

  • Unscored —
    CVE-2007-2583 Public exploit EPSS 11%

    The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-depe…

  • Unscored —
    CVE-2007-2585 Public exploit

    Stack-based buffer overflow in the Verify function in the BarCodeWiz ActiveX control 2.0 and 2.52 (BarcodeWiz.dll) allo…

  • Unscored —
    CVE-2007-2588 Public exploit

    Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denia…

  • Unscored —
    CVE-2007-2586 Public exploit EPSS 14%

    The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which allows remote attackers…

  • Unscored —
    CVE-2007-2582 EPSS 27%

    Multiple buffer overflows in the DB2 JDBC Applet Server (DB2JDS) service in IBM DB2 9.x and earlier allow remote attack…

  • Unscored —
    CVE-2007-2587

    The IOS FTP Server in Cisco IOS 11.3 through 12.4 allows remote authenticated users to cause a denial of service (IOS r…

  • Unscored —
    CVE-2007-2572 Public exploit

    PHP remote file inclusion vulnerability in modules/noevents/templates/mfa_theme.php in NoAh (aka PHP Content Architect,…

  • Unscored —
    CVE-2007-2570 Public exploit

    PHP remote file inclusion vulnerability in handlers/page/show.php in Wikivi5 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2007-2576 Public exploit

    Buffer overflow in the East Wind Software advdaudio.ocx 1.5.1.1 ActiveX control allows user-assisted remote attackers t…

  • Unscored —
    CVE-2007-2571 Public exploit

    SQL injection vulnerability in index.php in the wfquotes 1.0 0 module for XOOPS allows remote attackers to execute arbi…

  • Unscored —
    CVE-2007-2580 Public exploit

    Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords)…

  • Unscored —
    CVE-2007-2579

    Multiple cross-site scripting (XSS) vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2007-2581 Public exploit EPSS 36%

    Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 200…

  • Unscored —
    CVE-2007-2569 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Friendly 1.0d1 and earlier allow remote attackers to execute arbi…

  • Unscored —
    CVE-2007-2575 Public exploit

    PHP remote file inclusion vulnerability in watermark.php in the vm (aka Jean-Francois Laflamme) watermark 0.4.1 mod for…

  • Unscored —
    CVE-2007-2577

    Multiple SQL injection vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2007-2574 Public exploit

    Directory traversal vulnerability in index.php in Archangel Weblog 0.90.02 allows remote attackers to read arbitrary fi…

  • Unscored —
    CVE-2007-2578

    Unspecified vulnerability in search/list/action_search/index.php in ACP3 4.0 beta 3 allows remote attackers to have unk…

  • Unscored —
    CVE-2007-2573 Public exploit

    PHP remote file inclusion vulnerability in plugin/HP_DEV/cms2.php in PHPtree 1.3 allows remote attackers to execute arb…