Skip to content
OpenAdvisories

Archive

1 June 2007

Vulnerabilities first published on this day (UTC), newest first.

← May 2007 2007 / June /1 July 2007 →
  1. 131
  2. 2 
  3. 3 
  4. 424
  5. 510
  6. 658
  7. 722
  8. 813
  9. 9 
  10. 10 
  11. 1150
  12. 1237
  13. 131
  14. 1432
  15. 1515
  16. 16 
  17. 17 
  18. 1810
  19. 1929
  20. 2019
  21. 2136
  22. 2235
  23. 23 
  24. 24 
  25. 259
  26. 2647
  27. 2753
  28. 2819
  29. 2920
  30. 305
All Critical High Medium Low Exploited only Public exploit

31 results · Feed

  • Unscored —
    CVE-2007-2987 Public exploit EPSS 34%

    Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to…

  • Unscored —
    CVE-2007-2990

    Unspecified vulnerability in inetd in Sun Solaris 10 before 20070529 allows local users to cause a denial of service (d…

  • Unscored —
    CVE-2007-2988 Public exploit

    A certain admin script in Inout Meta Search Engine sends a redirect to the web browser but does not exit when administr…

  • Unscored —
    CVE-2007-2984

    Multiple stack-based buffer overflows in the Media Technology Group CDPass ActiveX control in CDPass.dll allow remote a…

  • Unscored —
    CVE-2007-2989

    The libike library in Sun Solaris 9 before 20070529 contains a logic error related to a certain pointer, which allows r…

  • Unscored —
    CVE-2007-2986 Public exploit EPSS 64%

    PHP remote file inclusion vulnerability in lib/live_status.lib.php in AdminBot MX 9.0.5 allows remote attackers to exec…

  • Unscored —
    CVE-2007-2985 Public exploit

    Pheap 2.0 allows remote attackers to bypass authentication by setting a pheap_login cookie value to the administrator's…

  • Unscored —
    CVE-2007-2973

    Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to cause a denial of service (infinite loop and CPU c…

  • Unscored —
    CVE-2007-2971 Public exploit

    SQL injection vulnerability in getnewsitem.php in gCards 1.46 and earlier allows remote attackers to execute arbitrary …

  • Unscored —
    CVE-2007-2976

    Centrinity FirstClass 8.3 and earlier, and Server and Internet Services 8.0 and earlier, do not properly handle a URL w…

  • Unscored —
    CVE-2007-2917

    Multiple buffer overflows in a certain ActiveX control in odapi.dll in Authentium Command Antivirus before 4.93.8 allow…

  • Unscored —
    CVE-2007-2972

    The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of servi…

  • Unscored —
    CVE-2007-2969 Public exploit EPSS 62%

    PHP remote file inclusion vulnerability in newsletter.php in WAnewsletter 2.1.3 and earlier allows remote attackers to …

  • Unscored —
    CVE-2007-2982

    Multiple buffer overflows in the British Telecommunications Business Connect webhelper ActiveX control before 1.0.0.7 i…

  • Unscored —
    CVE-2007-2981 Public exploit

    Buffer overflow in a certain ActiveX control in LEAD Technologies LEADTOOLS Raster OCR Document Object Library (ltrdc14…

  • Unscored —
    CVE-2007-2978

    Session fixation vulnerability in eggblog 3.1.0 and earlier allows remote attackers to hijack web sessions by setting t…

  • Unscored —
    CVE-2007-2918 Public exploit EPSS 34%

    Multiple stack-based buffer overflows in ActiveX controls (1) VibeC in (a) vibecontrol.dll, (2) CallManager and (3) Vie…

  • Unscored —
    CVE-2007-2974

    Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to exec…

  • Unscored —
    CVE-2007-2979

    Techno Dreams Web Directory / Search Engine 2.0 stores sensitive information under the web root with insufficient acces…

  • Unscored —
    CVE-2007-2980 Public exploit

    Heap-based buffer overflow in a certain ActiveX control in LEADTOOLS LEAD Raster ISIS Object (LTRIS14e.DLL) 14.5.0.44 a…

  • Unscored —
    CVE-2007-2975

    The admin console in Ignite Realtime Openfire 3.3.0 and earlier (formerly Wildfire) does not properly specify a filter …

  • Unscored —
    CVE-2007-2970

    Multiple cross-site scripting (XSS) vulnerabilities in cgi/block.cgi in 8e6 R3000 Internet Filter allow remote attacker…

  • Unscored —
    CVE-2007-2977

    Buffer overflow in the receive function in submit/submitcommon.c in the submit daemon in DOMjudge before 2.0.0RC1 allow…

  • Unscored —
    CVE-2007-2968

    Cross-site scripting (XSS) vulnerability in register.php in cpCommerce 1.1.0 and earlier allows remote attackers to inj…

  • Unscored —
    CVE-2007-0328

    The DWUpdateService ActiveX control in the agent (agent.exe) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x …

  • Unscored —
    CVE-2007-1362 Public exploit

    Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to…

  • Unscored —
    CVE-2007-2867

    Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunder…

  • Unscored —
    CVE-2007-2869

    The form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12, 2.x before 2.0.0.4, and possibly earlier versio…

  • Unscored —
    CVE-2007-2870

    Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to…

  • Unscored —
    CVE-2007-2868

    Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thu…

  • Unscored —
    CVE-2007-2871

    Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to…