Archive
May 2007
Vulnerabilities first published in this month (UTC), newest first.
570 results · Feed
-
Unscored —CVE-2007-2736 Public exploit
PHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to execute arbitrary PHP …
-
Unscored —CVE-2007-2738 Public exploit
SQL injection vulnerability in glossaire-p-f.php in the Glossaire 1.7 and earlier module for Xoops allows remote attack…
-
Unscored —
Stack-based buffer overflow in Little CMS (lcms) before 1.15 allows remote attackers to execute arbitrary code or cause…
-
Unscored —CVE-2007-2743 Public exploit
PHP remote file inclusion vulnerability in custom_vars.php in GlossWord 1.8.1 allows remote attackers to execute arbitr…
-
Unscored —CVE-2007-2737 Public exploit
SQL injection vulnerability in index.php in the MyConference 1.0 module for Xoops allows remote attackers to execute ar…
-
Unscored —CVE-2007-2735 Public exploit
SQL injection vulnerability in edit_day.php in the ResManager 1.2.1 and earlier module for Xoops allows remote attacker…
-
Unscored —
Unspecified vulnerability in xajax before 0.2.5 has unknown impact and attack vectors, not related to XSS.
-
Unscored —
Cross-site scripting (XSS) vulnerability in xajax before 0.2.5 allows remote attackers to inject arbitrary web script o…
-
Unscored —
Unrestricted file upload vulnerability in labs.beffa.org w2box 4.0.0 Beta4 allows remote attackers to upload arbitrary …
-
Unscored —
Multiple buffer overflows in the CentennialIPTransferServer service (XFERWAN.EXE), as used by (1) Centennial Discovery …
-
Unscored —CVE-2007-1898 Public exploit
formmail.php in Jetbox CMS 2.1 allows remote attackers to send arbitrary e-mails (spam) via modified recipient, _SETTIN…
-
Unscored —
CRLF injection vulnerability in formmail.php in Jetbox CMS 2.1 might allow remote attackers to inject arbitrary e-mail …
-
Unscored —
Unrestricted file upload vulnerability in Jetbox CMS allows remote authenticated users with author privileges to upload…
-
Unscored —
The 3Com TippingPoint IPS do not properly handle certain full-width and half-width Unicode character encodings in an HT…
-
Unscored —
Comodo Firewall Pro 2.4.18.184 and Comodo Personal Firewall 2.3.6.81, and probably older Comodo Firewall versions, do n…
-
Unscored —CVE-2007-2732 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Jetbox CMS allow remote attackers to inject arbitrary web script…
-
Unscored —
The png_handle_tRNS function in pngrutil.c in libpng before 1.0.25 and 1.2.x before 1.2.17 allows remote attackers to c…
-
Unscored —
Media Player Classic 6.4.9.0 allows user-assisted remote attackers to cause a denial of service (web browser crash) via…
-
Unscored —
Check Point ZoneAlarm Pro before 6.5.737.000 does not properly test for equivalence of process identifiers for certain …
-
Unscored —CVE-2007-2725 Public exploit
The DB Software Laboratory DeWizardX (DEWizardAX.ocx) ActiveX control allows remote attackers to overwrite arbitrary fi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in all_photos.html in fotolog allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2007-2568 Public exploit
Multiple stack-based buffer overflows in VCDGear 3.55 allow user-assisted remote attackers to execute arbitrary code vi…
-
Unscored —
The mcrypt_create_iv function in ext/mcrypt/mcrypt.c in PHP before 4.4.7, 5.2.1, and possibly 5.0.x and other PHP 5 ver…
-
Unscored —
The soap extension in PHP calls php_rand_r with an uninitialized seed variable, which has unknown impact and attack vec…
-
Unscored —CVE-2007-2722 Public exploit
Unspecified vulnerability in NewzCrawler 1.8 allows remote attackers to cause a denial of service (application instabil…
-
Unscored —CVE-2007-2726 Public exploit
BitsCast 0.13.0 allows remote attackers to cause a denial of service (application crash) via an RSS 2.0 feed item with …
-
Unscored —
Buffer overflow in the ISAlertDataCOM ActiveX control in ISLALERT.DLL for Norton Personal Firewall 2004 and Internet Se…
-
Unscored —
The jpc_qcx_getcompparms function in jpc/jpc_cs.c for the JasPer JPEG-2000 library (libjasper) before 1.900 allows remo…
-
Unscored —CVE-2007-2716 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in EQdkp 1.3.2c and earlier allow remote attackers to inject arbitr…
-
Unscored —CVE-2007-2440 Public exploit
Directory traversal vulnerability in Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows all…
-
Unscored —CVE-2007-2441 Public exploit
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to obtain the sy…
-
Unscored —
Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to cause a denia…
-
Unscored —
Group-Office before 2.16-13 does not properly validate user IDs, which allows remote attackers to obtain sensitive info…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the WebMail system in Stalker CommuniGate Pro 5.1.8 and earlier, when using…
-
Unscored —CVE-2007-2717 Public exploit
SQL injection vulnerability in shop/page.php in iGeneric (iG) Shop 1.4 allows remote attackers to execute arbitrary SQL…
-
Unscored —
Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to h…
-
Unscored —
Unspecified vulnerability in MH Software Connect Daily before 3.3.3 has unknown impact and attack vectors.
-
Unscored —
Unspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress plugin, has unknown impact…
-
Unscored —
PHP remote file inclusion vulnerability in linksnet_linkslog_rss.php in Linksnet Newsfeed 1.0 allows remote attackers t…
-
Unscored —CVE-2007-2706 Public exploit
PHP remote file inclusion vulnerability in maint/ftpmedia.php in Media Gallery 1.4.8a and earlier for Geeklog allows re…