Archive
May 2007
Vulnerabilities first published in this month (UTC), newest first.
570 results · Feed
-
Unscored —CVE-2007-2668 Public exploit
Buffer overflow in webdesproxy 0.0.1 allows remote attackers to execute arbitrary code via a long URL, possibly involvi…
-
Unscored —CVE-2007-2661 Public exploit
SQL injection vulnerability in archshow.asp in BlogMe 3.0 allows remote attackers to execute arbitrary SQL commands via…
-
Unscored —CVE-2007-2672 Public exploit
SQL injection vulnerability in index.php in PHP Coupon Script 3.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —
Stack-based buffer overflow in LexRuby.cxx (SciLexer.dll) in Scintilla 1.73, as used by notepad++ 4.1.1 and earlier, al…
-
Unscored —CVE-2007-2677 Public exploit
Multiple PHP remote file inclusion vulnerabilities in phpChess Community Edition 2.0 allow remote attackers to execute …
-
Unscored —CVE-2007-2667 Public exploit
Buffer overflow in the DB Software Laboratory VImpX ActiveX control in VImpX.ocx 4.7.3 allows remote attackers to execu…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in PHPChain 1.0 and earlier allow remote attackers to inject arbitr…
-
Unscored —
PHPChain 1.0 and earlier allows remote attackers to obtain the installation path via invalid values of the catid parame…
-
Unscored —CVE-2007-2658 Public exploit
Unspecified vulnerability in the ID Automation Linear Barcode 1.6.0.5 ActiveX control in IDAutomationLinear6.dll allows…
-
Unscored —CVE-2007-2665 Public exploit
PHP remote file inclusion vulnerability in block.php in PhpFirstPost 0.1 allows remote attackers to execute arbitrary P…
-
Unscored —
PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine (OTE) 0.7.8 allows remote attack…
-
Unscored —CVE-2007-2656 Public exploit
Stack-based buffer overflow in the Hewlett-Packard (HP) Magview ActiveX control in hpqvwocx.dll 1.0.0.309 allows remote…
-
Unscored —
MyBB 1.2.4 allows remote attackers to obtain sensitive information via the (1) action[] parameter to member.php, (2) im…
-
Unscored —
Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary c…
-
Unscored —
SonicBB 1.0 allows remote attackers to obtain sensitive information via the (1) by[] parameter to search.php, (2) p[] p…
-
Unscored —CVE-2007-1902 Public exploit
Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the …
-
Unscored —CVE-2007-1903 Public exploit
Cross-site scripting (XSS) vulnerability in search.php in SonicBB 1.0 allows remote attackers to inject arbitrary web s…
-
Unscored —
Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to…
-
Unscored —
Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted…
-
Unscored —
Multiple off-by-one errors in VooDoo cIRCle before 1.1.beta27 allow remote attackers to cause a denial of service (conn…
-
Unscored —
xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or ov…
-
Unscored —
Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers…
-
Unscored —
The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) …
-
Unscored —
The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands…
-
Unscored —
Multiple unspecified vulnerabilities in Free-SA before 1.2.2 allow remote attackers to execute arbitrary code via unspe…
-
Unscored —CVE-2007-2648 Public exploit
Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control (comparerax.ocx) allows remote attacker…
-
Unscored —
Deutsche Telekom (T-com) Speedport W 700v uses JavaScript delays for invalid authentication attempts to the CGI script,…
-
Unscored —
Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vecto…
-
Unscored —
Heap-based buffer overflow in yEnc32 1.0.7.207 allows user-assisted remote attackers to execute arbitrary code via a lo…
-
Unscored —CVE-2007-2647 Public exploit
Static code injection vulnerability in admin/admin_configuration.php in Monalbum 0.8.7 allows remote authenticated user…
-
Unscored —
The compat_sys_mount function in fs/compat.c in Linux kernel 2.6.20 and earlier allows local users to cause a denial of…
-
Unscored —
eFileCabinet 3.3 allows remote attackers to bypass authentication and access restricted portions of the interface via a…
-
Unscored —
Unspecified vulnerability in phpTodo before 0.8.1 allows remote attackers to have an unknown impact via newlines in reg…
-
Unscored —
Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, a…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in SquirrelMail 1.4.8-4.fc6 and earlier allows remote attackers to perf…
-
Unscored —CVE-2007-2642 Public exploit
Directory traversal vulnerability in galeria.php in R2K Gallery 1.7 allows remote attackers to read arbitrary files via…
-
Unscored —CVE-2007-2639 Public exploit
Directory traversal vulnerability in TFTPdWin 0.4.2 allows remote attackers to read or modify arbitrary files outside t…
-
Unscored —
LibTMCG before 1.1.1 does not perform a range check to avoid "trivial group generators," which allows attackers to obta…
-
Unscored —CVE-2007-2643 Public exploit
Directory traversal vulnerability in phpThumb.php in PinkCrow Designs Gallery or maGAZIn 2.0 allows remote attackers to…
-
Unscored —CVE-2007-2644 Public exploit
A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitra…