Skip to content
OpenAdvisories

Archive

15 June 2007

Vulnerabilities first published on this day (UTC), newest first.

15 results · Feed

  • Unscored —

    The Menu Manager Mod for (1) web-app.net WebAPP (aka WebAPP NE) 0.9.9.3.3 through 0.9.9.8, and (2) web-app.org WebAPP b…

  • Unscored —
    CVE-2007-3237 Public exploit EPSS 68%

    PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the TinyContent 1.5 module for XOOPS al…

  • Unscored —

    IRC Services before 5.0.62, and 5.1 before 5.1pre3, allows remote attackers to disconnect users with guest nicknames by…

  • Unscored —
    CVE-2007-3233 Public exploit

    The TEC-IT TBarCode OCX ActiveX control (TBarCode7.ocx) 7.0.2.3524 allows remote attackers to overwrite arbitrary files…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in 404.php in the Vistered-Little theme for WordPress allows remote attackers …

  • Unscored —

    Cross-site scripting (XSS) vulnerability in searchform.php in the AndyBlue theme before 20070607 for WordPress allows r…

  • Unscored —

    SQL injection vulnerability in bb-includes/formatting-functions.php in bbPress before 0.8.1 might allow remote attacker…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in functions.php in the default theme in WordPress 2.2 allows remote authentic…

  • Unscored —
    CVE-2007-3234 Public exploit

    SQL injection vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2007-3243 Public exploit

    Cross-site scripting (XSS) vulnerability in bb-login.php in bbPress 0.8.1 allows remote attackers to inject arbitrary w…

  • Unscored —

    The IBM TotalStorage DS400 with firmware 4.15 uses a blank password for the (1) root, (2) user, (3) manager, (4) admini…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in blogroll.php in the cordobo-green-park theme for WordPress allows remote at…

  • Unscored —
    CVE-2007-3236 Public exploit EPSS 77%

    PHP remote file inclusion vulnerability in footer.php in the Horoscope 1.0 module for XOOPS allows remote attackers to …

  • Unscored —

    The do_set_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileg…

  • Unscored —
    CVE-2007-3235 Public exploit

    Cross-site scripting (XSS) vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to inject arbitrary …