Skip to content
OpenAdvisories

Archive

7 June 2007

Vulnerabilities first published on this day (UTC), newest first.

22 results · Feed

  • Unscored —

    libclamav/others.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 uses insecure permissions for temporary files that a…

  • Unscored —

    Buffer overflow in backup/src/vmsbackup.c (aka the backup utility) in FreeVMS before 0.3.6 might allow local users to g…

  • Unscored —

    Unspecified vulnerability in libclamav/phishcheck.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1, when running on So…

  • Unscored —
    CVE-2005-4840 EPSS 12%

    The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers to cause a denial of …

  • Unscored —

    unrar.c in libclamav in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to cause a denial of servi…

  • Unscored —

    The parsing engine in ClamAV before 0.90.3 and 0.91 before 0.91rc1 allows remote attackers to bypass scanning via a RAR…

  • Unscored —

    Buffer overflow in the CCdecode function in contrib/ntsc-cc.c in the zvbi-ntsc-cc tool in Zapping VBI Library (ZVBI) be…

  • Unscored —

    unsp.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1 does not properly calculate the end of a certain buffer, with un…

  • Unscored —

    graph_image.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of se…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the Andy Frank Beatnik 1.0 extension for Firefox allows remote attackers to…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in public/code/cp_dpage.php in All In One Control Panel (AIOCP) before 1.3.017…

  • Unscored —

    Memory leak in server/MaraDNS.c in MaraDNS before 1.2.12.05, and 1.3.x before 1.3.03, allows remote attackers to cause …

  • Unscored —
    CVE-2007-3118 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Kravchuk letter (K-letter) 1.0 allow remote attackers to execute …

  • Unscored —

    Memory leak in server/MaraDNS.c in MaraDNS 1.2.12.06 and 1.3.05 allows remote attackers to cause a denial of service (m…

  • Unscored —

    Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers …

  • Unscored —
    CVE-2007-3119 Public exploit

    SQL injection vulnerability in news.asp in Kartli Alisveris Sistemi (aka Free-PayPal-Shopping-Cart) 1.0 allows remote a…

  • Unscored —

    Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumpt…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the SEO module in ADPLAN 3 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2007-3109 EPSS 11%

    The CERN Image Map Dispatcher (htimage.exe) in Microsoft FrontPage allows remote attackers to determine the existence, …

  • Unscored —
    CVE-2007-3111 Public exploit EPSS 44%

    Buffer overflow in the Provideo Camimage ActiveX control in ISSCamControl.dll 1.0.1.5, when Internet Explorer 6 is used…

  • Unscored —

    Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to ex…

  • Unscored —

    Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which al…