Skip to content
OpenAdvisories

Archive

12 June 2007

Vulnerabilities first published on this day (UTC), newest first.

37 results · Feed

  • Unscored —

    Stack-based buffer overflow in smtpdll.dll in the SMTP service in 602Pro LAN SUITE 2003 2003.0.03.0828 allows remote at…

  • Unscored —
    CVE-2007-3189 Public exploit

    Cross-site scripting (XSS) vulnerability in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.3 allows re…

  • Unscored —

    NMASINST in Novell Modular Authentication Service (NMAS) 3.1.2 and earlier on NetWare logs its invoking command line to…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the rich text editor in Webwiz allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2007-3198 Public exploit

    Cross-site scripting (XSS) vulnerability in comments.php in Maran PHP Blog (Maran Blog), possibly only versions before …

  • Unscored —
    CVE-2007-3201 Public exploit

    Visual truncation vulnerability in Windows Privacy Tray (WinPT) 1.2.0 allows user-assisted remote attackers to install …

  • Unscored —

    SQL injection vulnerability in vBSupport.php in vBSupport 1.1 before 1.1a allows remote attackers to execute arbitrary …

  • Unscored —

    SQL injection vulnerability in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.4-pre2 allows remote att…

  • Unscored —
    CVE-2007-3196 Public exploit

    SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows remote attackers to exec…

  • Unscored —
    CVE-2007-3181 Public exploit EPSS 13%

    Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a …

  • Unscored —
    CVE-2007-3192 Public exploit

    admin/setup.php in Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to read and modify con…

  • Unscored —
    CVE-2007-3188 Public exploit

    SQL injection vulnerability in down_indir.asp in Fullaspsite GeometriX Download Portal allows remote attackers to execu…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in index.php in ERFAN WIKI 1.00 allows remote attackers to inject arbitrary we…

  • Unscored —

    lib/WikiUser/LDAP.php in PhpWiki before 1.3.13p1, when the configuration lacks a nonzero PASSWORD_LENGTH_MINIMUM, might…

  • Unscored —
    CVE-2007-3199 Public exploit

    Unrestricted file upload vulnerability in Link Request Contact Form 3.4 allows remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2007-3190 Public exploit

    Multiple SQL injection vulnerabilities in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.3, when magic…

  • Critical 9.8

    Multiple PHP remote file inclusion vulnerabilities in myBloggie 2.1.5 allow remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2007-3191 Public exploit

    Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to obtain configuration information via a…

  • Unscored —
    CVE-2007-3186 Public exploit

    Apple Safari Beta 3.0.1 for Windows allows remote attackers to execute arbitrary commands via shell metacharacters in a…

  • Unscored —

    Multiple unspecified vulnerabilities in Apple Safari for Windows allow remote attackers to cause a denial of service or…

  • Unscored —

    Apple Safari Beta 3.0.1 for Windows public beta allows remote attackers to cause a denial of service (crash) via unspec…

  • Unscored —

    Heap-based buffer overflow in OpenOffice.org (OOo) 2.2.1 and earlier allows remote attackers to execute arbitrary code …

  • Unscored —

    Cisco Trust Agent (CTA) before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass auth…

  • Unscored —
    CVE-2007-2227 EPSS 25%

    The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Co…

  • Unscored —
    CVE-2007-2225 EPSS 25%

    A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP head…

  • Unscored —
    CVE-2007-2219 EPSS 32%

    Unspecified vulnerability in the Win32 API on Microsoft Windows 2000, XP SP2, and Server 2003 SP1 and SP2 allows remote…

  • Unscored —
    CVE-2007-0936 EPSS 31%

    Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-assisted attackers to execute arbitrary …

  • Unscored —
    CVE-2007-0218 EPSS 31%

    Microsoft Internet Explorer 5.01 and 6 allows remote attackers to execute arbitrary code by instantiating certain COM o…

  • Unscored —
    CVE-2007-0934 EPSS 31%

    Unspecified vulnerability in Microsoft Visio 2002 allows remote user-assisted attackers to execute arbitrary code via a…

  • Unscored —
    CVE-2007-1750 EPSS 31%

    Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via a craf…

  • Unscored —
    CVE-2007-1751 EPSS 61%

    Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explor…

  • Unscored —
    CVE-2007-3027 EPSS 35%

    Race condition in Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causi…

  • Unscored —
    CVE-2007-2218 EPSS 13%

    Unspecified vulnerability in the Windows Schannel Security Package for Microsoft Windows 2000 SP4, XP SP2, and Server 2…

  • Unscored —

    Microsoft Windows Vista uses insecure default permissions for unspecified "local user information data stores" in the r…

  • Unscored —
    CVE-2007-2222 Public exploit EPSS 55%

    Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as us…

  • Unscored —

    Arris Cadant C3 CMTS allows remote attackers to cause a denial of service (service termination) via a malformed IP pack…

  • Unscored —

    Buffer overflow in Help and Support Center before 4.4 C on HP Windows systems allows remote attackers to read or write …