Archive
May 2007
Vulnerabilities first published in this month (UTC), newest first.
570 results · Feed
-
Unscored —
The dofreePDF function in includes/pdf.php in Mambo 4.6.1 does not properly check access rights for database content, w…
-
Unscored —CVE-2007-0215 EPSS 32%
Stack-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remot…
-
Unscored —
Buffer overflow in the SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to exec…
-
Unscored —CVE-2007-2561 Public exploit
SQL injection vulnerability in index.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2007-2556 Public exploit
SQL injection vulnerability in Nuked-klaN 1.7.6 allows remote attackers to execute arbitrary SQL commands via the X-For…
-
Unscored —
Multiple stack-based buffer overflows in the Sienzo Digital Music Mentor (DMM) 2.6.0.4 ActiveX control (DSKernel2.dll) …
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 3.00.90 allows remote attackers to inject arbi…
-
Unscored —CVE-2007-2565 Public exploit
Cdelia Software ImageProcessing allows user-assisted remote attackers to cause a denial of service (application crash) …
-
Unscored —CVE-2007-2560 Public exploit
Directory traversal vulnerability in theme/acgv.php in ACGVannu 1.3 and earlier allows remote attackers to read arbitra…
-
Unscored —CVE-2007-2563 Public exploit
Buffer overflow in the AddFile function in VersalSoft HTTP File Upload ActiveX control (UFileUploaderD.dll) allows remo…
-
Unscored —
MOStlyDB Admin in Mambo 4.6.1 does not properly check privileges, which allows remote authenticated administrators to h…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in american cart 3.5 allow remote attackers to execute arbitrary PHP…
-
Unscored —CVE-2007-2566 Public exploit
The SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to cause a denial of servi…
-
Unscored —
PHP remote file inclusion vulnerability in index.php in phpFullAnnu CMS (pfa CMS) 6.0 allows remote attackers to execut…
-
Unscored —CVE-2007-0605 Public exploit
Cross-site scripting (XSS) vulnerability in picture.php in Advanced Guestbook 2.4.2 allows remote attackers to inject a…
-
Unscored —
Advanced Guestbook 2.4.2 allows remote attackers to obtain sensitive information via an invalid (1) GB_TBL parameter to…
-
Unscored —CVE-2007-0609 Public exploit
Directory traversal vulnerability in Advanced Guestbook 2.4.2 allows remote attackers to bypass .htaccess settings, and…
-
Unscored —
Associated Press (AP) Newspower 4.0.1 and earlier uses a default blank password for the MySQL root account, which allow…
-
Unscored —CVE-2007-2553 Public exploit
Unspecified vulnerability in dop in HP Tru64 UNIX 5.1B-4, 5.1B-3, and 5.1A PK6 allows local users to gain privileges vi…
-
Unscored —
Unspecified vulnerability in Default.aspx in Podium CMS allows remote attackers to have an unknown impact, possibly ses…
-
Unscored —
Cross-site scripting (XSS) vulnerability in usersettings.php in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote att…
-
Unscored —
Unspecified vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 has unknown impact and an l remote …
-
Unscored —
Multiple CRLF injection vulnerabilities in Devellion CubeCart 3.0.15 allow remote attackers to inject arbitrary HTTP he…
-
Unscored —CVE-2007-2547 Public exploit
Cross-site scripting (XSS) vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attack…
-
Unscored —
The RecentChanges feature in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to obtain the names, and pos…
-
Unscored —CVE-2007-2549 Public exploit
SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows remote attackers to execut…
-
Unscored —
Session fixation vulnerability in Simple Machines Forum (SMF) 1.1.2 and earlier allows remote attackers to hijack web s…
-
Unscored —
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of …
-
Unscored —CVE-2007-2536 Public exploit
PicoZip allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structur…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Persism CMS 0.9.2 and earlier allow remote attackers to execute a…
-
Unscored —CVE-2007-2539 Public exploit
The show_files function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive information (file exist…
-
Unscored —CVE-2007-2543 Public exploit
SQL injection vulnerability in game.php in the Flashgames 1.0.1 module for XOOPS allows remote attackers to execute arb…
-
Unscored —CVE-2007-2540 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PMECMS 1.0 and earlier allow remote attackers to execute arbitrar…
-
Unscored —CVE-2007-2538 Public exploit
SQL injection vulnerability in class/debug/debug_show.php in RunCms 1.5.2 and earlier allows remote attackers to execut…
-
Unscored —
WinAce allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure…
-
Unscored —CVE-2007-2544 Public exploit
PHP remote file inclusion vulnerability in templates/default/tpl_message.php in PHP TopTree BBS 2.0.1a and earlier allo…
-
Unscored —CVE-2007-2541 Public exploit
PHP remote file inclusion vulnerability in includes/ajax_listado.php in Versado CMS 1.07 allows remote attackers to exe…
-
Unscored —CVE-2007-2542 Public exploit
PHP remote file inclusion vulnerability in header.php in workbench survival guide 0.11 allows remote attackers to execu…
-
Unscored —CVE-2007-2537 Public exploit
Multiple SQL injection vulnerabilities in mainfile.php in NPDS 5.10 and earlier allow remote authenticated users to exe…
-
Unscored —
avpack32.dll before 7.3.0.6 in Avira AntiVir allows remote attackers to cause a denial of service (infinite loop) via a…