Archive
May 2007
Vulnerabilities first published in this month (UTC), newest first.
570 results · Feed
-
Unscored —
zoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3.4 and later with viru…
-
Unscored —
avast! antivirus before 4.7.981 allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive …
-
Unscored —
Panda Software Antivirus before 20070402 allows remote attackers to cause a denial of service (infinite loop) via a ZOO…
-
Unscored —
Buffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has unknown impact and remo…
-
Unscored —CVE-2007-2530 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Tropicalm Crowell Resource 4.5.2 allow remote attackers to execut…
-
Unscored —
Integer signedness error in the acl (facl) system call in Solaris 10 before 20070507 allows local users to cause a deni…
-
Critical 9.8
Multiple SQL injection vulnerabilities in admin.php in phpHoo3 allow remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2007-2532 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Minh Nguyen Duong Obie Website Mini Web Shop 2 allow remote atta…
-
Unscored —
Buffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and remote attack vectors…
-
Unscored —
CRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2 allows remote attacke…
-
Unscored —
Multiple buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2- Build 1174 allow remote attackers …
-
Unscored —CVE-2007-2531 Public exploit
PHP remote file inclusion vulnerability in berylium-classes.php in Berylium2 2003-08-18 allows remote attackers to exec…
-
Unscored —
Buffer overflow in the user_filter_factory_create function in PHP before 5.2.2 has unknown impact and local attack vect…
-
Unscored —CVE-2007-0942 EPSS 32%
Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Wind…
-
Unscored —CVE-2007-0220 EPSS 33%
Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2000 SP3, and 2003 SP…
-
Unscored —CVE-2007-0039 EPSS 45%
The Exchange Collaboration Data Objects (EXCDO) functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, …
-
Unscored —
Buffer overflow in the SetLanguage function in Research In Motion (RIM) TeamOn Import Object ActiveX control (TOImport.…
-
Unscored —CVE-2007-0940 EPSS 76%
Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control (CAPICOM.dll) in…
-
Unscored —CVE-2007-0221 EPSS 37%
Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a d…
-
Unscored —
Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, w…
-
Unscored —CVE-2007-0944 EPSS 35%
Unspecified vulnerability in the CTableCol::OnPropertyChange method in Microsoft Internet Explorer 5.01 SP4 on Windows …
-
Unscored —CVE-2007-0945 EPSS 31%
Microsoft Internet Explorer 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; an…
-
Unscored —CVE-2007-0947 EPSS 32%
Use-after-free vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Win…
-
Unscored —CVE-2007-0946 EPSS 31%
Unspecified vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Window…
-
Unscored —CVE-2007-1202 EPSS 29%
Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 200…
-
Unscored —CVE-2007-1747 EPSS 32%
Unspecified vulnerability in MSO.dll in Microsoft Office 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and 2007 allows us…
-
Unscored —
Memory leak in the PPP over Ethernet (PPPoE) socket implementation in the Linux kernel before 2.6.21-git8 allows local …
-
Unscored —
Buffer overflow in AgRpcCln.dll for Trend Micro ServerProtect 5.58 for Windows before Security Patch 3 Build 1176 allow…
-
Unscored —CVE-2007-2527 Public exploit
Multiple PHP remote file inclusion vulnerabilities in DynamicPAD before 1.03.31 allow remote attackers to execute arbit…
-
Unscored —CVE-2007-2524 Public exploit
Cross-site scripting (XSS) vulnerability in index.pl in Open Ticket Request System (OTRS) 2.0.x allows remote attackers…
-
Unscored —CVE-2007-2526 Public exploit
Heap-based buffer overflow in the ConnectAsyncEx function in VNC Viewer ActiveX control (scvncctrl.dll) in the SmartCod…
-
Unscored —
Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote…
-
Unscored —
Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Exp…
-
Unscored —CVE-2007-0035 EPSS 32%
Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 200…
-
Unscored —CVE-2007-1203 EPSS 31%
Unspecified vulnerability in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, 2004 for Mac, and 2007 allows u…
-
Unscored —CVE-2007-1214 EPSS 28%
Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to ex…
-
Unscored —CVE-2007-2521 Public exploit
PHP remote file inclusion vulnerability in common.php in E-GADS! before 2.2.7 allows remote attackers to execute arbitr…
-
Unscored —CVE-2007-1861 Public exploit
The nl_fib_lookup function in net/ipv4/fib_frontend.c in Linux Kernel before 2.6.20.8 allows attackers to cause a denia…
-
Unscored —
Stack-based buffer overflow in the SaveBMP method in the AXIS Camera Control (aka CamImage) ActiveX control before 2.40…
-
Unscored —
The IAX2 channel driver (chan_iax2) in Asterisk before 20070504 does not properly null terminate data, which allows rem…