Archive
May 2007
Vulnerabilities first published in this month (UTC), newest first.
570 results · Feed
-
Unscored —CVE-2007-2776 Public exploit
AlstraSoft Template Seller Pro 3.25 and earlier sends a redirect to the web browser but does not exit when administrati…
-
Unscored —CVE-2007-2783 Public exploit
Unspecified vulnerability in Rational Soft Hidden Administrator 1.7 and earlier allows remote attackers to bypass authe…
-
Unscored —CVE-2007-2775 Public exploit
AlstraSoft Live Support 1.21 sends a redirect to the web browser but does not exit when administrative credentials are …
-
Unscored —CVE-2007-2777 Public exploit
Unrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller Pro 3.25 and earlier al…
-
Unscored —
Packeteer PacketShaper uses fixed increments in TCP initial sequence number (ISN) values, which allows remote attackers…
-
Unscored —
(1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc.dll and rwxdr.dll) in CA BrightStor Backup 11.5.2.0 SP2 al…
-
Unscored —CVE-2007-2771 Public exploit
Stack-based buffer overflow in the LEAD Technologies LeadTools JPEG 2000 LEADJ2K.LEADJ2K.140 ActiveX control (LTJ2K14.o…
-
Unscored —CVE-2007-2770 Public exploit
Stack-based buffer overflow in Eudora 7.1 allows user-assisted, remote SMTP servers to execute arbitrary code via a lon…
-
Unscored —
ftpd.c in wu-ftpd 2.6.2, when running on "operating systems that only allow one non-connected socket bound to the same …
-
Medium —
Apache Tomcat Vulnerable to Cross-Site Scripting
Multiple cross-site scripting (XSS) vulnerabilities in the appdev/sample/web/hello.jsp example application in Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.23, and 6.0.0 through 6.0.10 allow remote attackers to inje…
-
Unscored —
OpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to determine the existence…
-
Unscored —
Unspecified vulnerability in BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 allows remote attackers to list filesy…
-
Unscored —
BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 does not properly handle compressed files, which allows remote atta…
-
Unscored —CVE-2007-2685 Public exploit
Multiple SQL injection vulnerabilities in index.php in Jetbox CMS 2.1 allow remote attackers to execute arbitrary SQL c…
-
Unscored —
Jetbox CMS 2.1 allows remote attackers to obtain sensitive information via (1) a direct request to (a) main_page.php, (…
-
Unscored —
The canUpdate function in model/MRole.java in Adempiere before 3.1.6 does not properly validate user roles, which allow…
-
Unscored —
lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, …
-
Unscored —
Multiple SQL injection vulnerabilities in the insert function in the ValuePreference class (grid/ed/ValuePreference.jav…
-
Unscored —
The embedded Linux kernel in certain Sun-Brocade SilkWorm switches before 20070516 does not properly handle a situation…
-
Unscored —
Multiple buffer overflows in WinImage 8.0.8000 allow user-assisted remote attackers to execute arbitrary code via a FAT…
-
Unscored —CVE-2007-2762 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Build it Fast (bif3) 0.4.1 allow remote attackers to execute arbi…
-
Unscored —CVE-2007-2761 Public exploit
Stack-based buffer overflow in MagicISO 5.4 build 239 and earlier allows remote attackers to execute arbitrary code via…
-
Unscored —CVE-2007-2757 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Redoable 1.2 allow remote attackers to inject arbitrary web scri…
-
Unscored —CVE-2007-2763 Public exploit
Buffer overflow in the UnlockSupport function in the LockModules subsystem in a certain ActiveX control in ltmm15.dll i…
-
Unscored —
blockhosts.py in BlockHosts before 2.0.3 does not properly parse daemon log files, which allows remote attackers to add…
-
Unscored —
The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption…
-
Unscored —
The installer for Adobe Version Cue CS3 Server on Apple Mac OS X, as used in Adobe Creative Suite 3 (CS3), does not re-…
-
Unscored —CVE-2007-2755 Public exploit
The PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode.dll, when Internet Explorer 6 is used, allows remote…
-
Unscored —
Integer signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote attackers to execute ar…
-
Unscored —
The SIP channel module in Yet Another Telephony Engine (Yate) before 1.2.0 sets the caller_info_uri parameter using an …
-
Unscored —
The viewList function in lib/WebGUI/Asset/Wobject/DataForm.pm in Plain Black WebGUI before 7.3.14 does not properly use…
-
Unscored —CVE-2007-2750 Public exploit
SQL injection vulnerability in print.php in SimpNews 2.40.01 and earlier allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2007-2747 Public exploit
Directory traversal vulnerability in rdw_helpers.py in rdiffWeb before 0.3.5.1 allows remote attackers to read arbitrar…
-
Unscored —CVE-2007-2751 Public exploit
Multiple PHP remote file inclusion vulnerabilities in PHPGlossar 0.8 allow remote attackers to execute arbitrary PHP co…
-
Unscored —CVE-2007-2749 Public exploit
SQL injection vulnerability in question.php in FAQEngine 4.16.03 and earlier allows remote attackers to execute arbitra…
-
Unscored —
The substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain sensitive information v…
-
Unscored —CVE-2007-2753 Public exploit
RunawaySoft Haber portal 1.0 stores sensitive information under the web root with insufficient access control, which al…
-
Unscored —CVE-2007-2752 Public exploit
SQL injection vulnerability in devami.asp in RunawaySoft Haber portal 1.0 allows remote attackers to execute arbitrary …
-
Unscored —
Cross-site scripting (XSS) vulnerability in printcal.pl in vDesk Webmail 4.03 allows remote attackers to inject arbitra…
-
Unscored —CVE-2007-2744 Public exploit
Stack-based buffer overflow in the PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode.dll allows remote att…