Skip to content
OpenAdvisories

Archive

14 June 2007

Vulnerabilities first published on this day (UTC), newest first.

← May 2007 2007 / June /14 July 2007 →
  1. 131
  2. 2 
  3. 3 
  4. 424
  5. 510
  6. 658
  7. 722
  8. 813
  9. 9 
  10. 10 
  11. 1150
  12. 1237
  13. 131
  14. 1432
  15. 1515
  16. 16 
  17. 17 
  18. 1810
  19. 1929
  20. 2019
  21. 2136
  22. 2235
  23. 23 
  24. 24 
  25. 259
  26. 2647
  27. 2753
  28. 2819
  29. 2920
  30. 305
All Critical High Medium Low Exploited only Public exploit

32 results · Feed

  • Unscored —
    CVE-2007-3231

    Buffer overflow in MeCab before 0.96 has unknown impact and attack vectors.

    mecab Debian
  • Unscored —
    CVE-2007-3222 Public exploit

    PHP remote file inclusion vulnerability in modify.php in the XFsection 1.07 module for XOOPS allows remote attackers to…

  • Unscored —
    CVE-2007-3230 Public exploit EPSS 68%

    PHP remote file inclusion vulnerability in phphtml.php in Idan Sofer PHP::HTML 0.6.4 allows remote attackers to execute…

  • Unscored —
    CVE-2007-3228 Public exploit EPSS 67%

    PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite C…

  • Unscored —
    CVE-2007-3221 Public exploit EPSS 68%

    PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the XT-Conteudo module for XOOPS allows…

  • Unscored —
    CVE-2007-3223

    Unspecified vulnerability in the NFS server in Sun Solaris 10 before 20070613 allows remote attackers to cause a denial…

  • Unscored —
    CVE-2007-3220 Public exploit EPSS 63%

    PHP remote file inclusion vulnerability in admin/editor2/spaw_control.class.php in the Cjay Content 3 module for XOOPS …

  • Medium —
    CVE-2007-3227 Public exploit

    Moderate severity vulnerability that affects rails

    Cross-site scripting (XSS) vulnerability in the to_json (ActiveRecord::Base#to_json) function in Ruby on Rails before edge 9606 allows remote attackers to inject arbitrary web script via the input values.

    rails rails Debian RubyGems
  • Unscored —
    CVE-2007-3225

    Unspecified vulnerability in Sun Java System Directory Server (slapd) 6.0, and 5.2 with Patch 3 or 4, allows remote att…

  • Unscored —
    CVE-2007-3226

    Cross-site scripting (XSS) vulnerability in dotProject before 2.1 RC2 allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2007-3224

    Unspecified vulnerability in Sun ONE/Java System Directory Server (slapd) 6.0, and 5.x before 5.2 Patch 5, allows remot…

  • Unscored —
    CVE-2007-3229

    index.php in Singapore Gallery allows remote attackers to obtain sensitive information via a request with a non-directo…

  • Low —
    CVE-2007-2450

    Apache Tomcat vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenti…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2007-2921

    Multiple buffer overflows in acgm.dll in the Corel / Micrografx ActiveCGM Browser ActiveX control before 7.1.4.19 allow…

  • Medium —
    CVE-2007-2449 Public exploit Scanner template EPSS 77%

    Apache Tomcat XSS Vulnerabilities in Examples Web Application

    Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2007-2448

    Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to ch…

    subversion Debian
  • Unscored —
    CVE-2007-3219

    Unspecified vulnerability in sources/action_public/xmlout.php in Invision Power Board (IPB or IP.Board) 2.2.0 through 2…

  • Unscored —
    CVE-2007-3218

    Cross-site scripting (XSS) vulnerability in request.php in PHP Live! 3.2.2 and earlier allows remote attackers to injec…

  • Unscored —
    CVE-2007-3213

    Multiple cross-site scripting (XSS) vulnerabilities in comments.cgi in Sporum Forum 3.0.9 and earlier allow remote atta…

  • High —
    CVE-2007-3215

    PHPMailer Shell command injection

    PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php.

    wordpress phpmailer/phpmailer libphp-phpmailer Debian Packagist
  • Unscored —
    CVE-2007-3214 Public exploit

    SQL injection vulnerability in style.php in e-Vision CMS 2.02 and earlier, when magic_quotes_gpc is disabled, allows re…

  • Unscored —
    CVE-2007-3217 Public exploit EPSS 10%

    Multiple PHP remote file inclusion vulnerabilities in Prototype of an PHP application 0.1 allow remote attackers to exe…

  • Unscored —
    CVE-2007-3216 Public exploit EPSS 59%

    Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops …

  • Unscored —
    CVE-2007-3212 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in links.php in Beehive Forum 0.7.1 allow remote attackers to injec…

  • Unscored —
    CVE-2006-4168

    Integer overflow in the exif_data_load_data_entry function in libexif/exif-data.c in Libexif before 0.6.16 allows remot…

    libexif Debian
  • Unscored —
    CVE-2007-3209

    Mail Notification 4.0, when WITH_SSL is set to 0 at compile time, uses unencrypted connections for accounts configured …

  • Unscored —
    CVE-2007-3210

    Stack-based buffer overflow in nptoken.mox in the Cellosoft Tokens Object 2.0.0.6 extension for Vitalize! allows remote…

  • Unscored —
    CVE-2007-3208

    CRLF injection vulnerability in Yet another Bulletin Board (YaBB) 2.1 allows remote attackers to obtain administrative …

  • Unscored —
    CVE-2007-3211

    Cross-site scripting (XSS) vulnerability in 404.php in Domain Technologie Control (DTC) before 0.25.9 allows remote att…

  • Unscored —
    CVE-2007-3099

    usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's UID on the listening …

    open-iscsi Debian
  • Unscored —
    CVE-2007-3100

    usr/log.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 uses a semaphore with insecure permissions (wo…

    open-iscsi Debian
  • Unscored —
    CVE-2007-2391

    Cross-site scripting (XSS) vulnerability in Apple Safari Beta 3.0.1 for Windows allows remote attackers to inject arbit…