Skip to content
OpenAdvisories

Archive

19 June 2007

Vulnerabilities first published on this day (UTC), newest first.

← May 2007 2007 / June /19 July 2007 →
  1. 131
  2. 2 
  3. 3 
  4. 424
  5. 510
  6. 658
  7. 722
  8. 813
  9. 9 
  10. 10 
  11. 1150
  12. 1237
  13. 131
  14. 1432
  15. 1515
  16. 16 
  17. 17 
  18. 1810
  19. 1929
  20. 2019
  21. 2136
  22. 2235
  23. 23 
  24. 24 
  25. 259
  26. 2647
  27. 2753
  28. 2819
  29. 2920
  30. 305
All Critical High Medium Low Exploited only Public exploit

29 results · Feed

  • Unscored —
    CVE-2007-3282 Public exploit EPSS 42%

    Buffer overflow in the Microsoft Office MSODataSourceControl ActiveX object allows remote attackers to cause a denial o…

  • Unscored —
    CVE-2007-3283

    GNOME XScreenSaver in Sun Solaris 8 and 9 before 20070417, when root is logged into the console, does not automatically…

  • Unscored —
    CVE-2007-3284 Public exploit

    corefoundation.dll in Apple Safari 3.0.1 (552.12.2) for Windows allows remote attackers to cause a denial of service (c…

  • Unscored —
    CVE-2007-3278

    PostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the Database Link library (d…

  • Unscored —
    CVE-2007-3269

    Multiple cross-site scripting (XSS) vulnerabilities in Papoo Light 3.6 before 20070611 allow remote attackers to inject…

  • Unscored —
    CVE-2007-3281 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Php Hosting Biller 1.0 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2007-3275

    MailWasher Server before 2.2.1, when used with LDAP or Active Directory (AD), does not properly handle blank passwords,…

  • Unscored —
    CVE-2007-3272 Public exploit

    Directory traversal vulnerability in index.php in MiniBB 2.0.5 allows remote attackers to read arbitrary files via a ..…

  • Unscored —
    CVE-2007-3271 Public exploit

    PHP remote file inclusion vulnerability in templates/2blue/bodyTemplate.php in YourFreeScreamer 1.0 allows remote attac…

  • Unscored —
    CVE-2007-3274

    Apple Safari 3.0 and 3.0.1 on Windows XP SP2 allows attackers to cause a denial of service (application crash) via Java…

  • Unscored —
    CVE-2007-3273

    SQL injection vulnerability in index.cfm in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2007-3280 Public exploit EPSS 25%

    The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary l…

  • Unscored —
    CVE-2007-3279

    PostgreSQL 8.1 and probably later versions, when the PL/pgSQL (plpgsql) language has been created, grants certain plpgs…

  • Unscored —
    CVE-2007-3270 Public exploit

    PHP remote file inclusion vulnerability in Includes/global.inc.php in phpMyInventory 2.8 allows remote attackers to exe…

  • Unscored —
    CVE-2007-3277

    Unspecified vulnerability in the localization before 1.2 module for WIKINDX allows attackers to access certain administ…

  • Unscored —
    CVE-2007-3129

    Cross-site scripting (XSS) vulnerability in login.php in Utopia News Pro 1.4.0 allows remote attackers to inject arbitr…

  • Unscored —
    CVE-2007-3276

    Cross-site scripting (XSS) vulnerability in index.php in Site@School (S@S) 2.4.10 allows remote attackers to inject arb…

  • Unscored —
    CVE-2007-2924

    Multiple buffer overflows in RealNetworks GameHouse dldisplay ActiveX control (ghdlctl.dll) allow remote attackers to e…

  • Unscored —
    CVE-2007-3265

    Cross-site scripting (XSS) vulnerability in the Samples component in IBM WebSphere Application Server (WAS) 6.1.0.7 and…

  • Unscored —
    CVE-2007-3261

    Cross-site scripting (XSS) vulnerability in widgets/widget_search.php in dKret before 2.6 allows remote attackers to in…

  • Unscored —
    CVE-2007-3267 Public exploit

    Cross-site scripting (XSS) vulnerability in low.php in Fuzzylime Forum 1.01b and earlier allows remote attackers to inj…

  • Unscored —
    CVE-2007-3260

    HP System Management Homepage (SMH) before 2.1.9 for Linux, when used with Novell eDirectory, assigns the eDirectory me…

  • Unscored —
    CVE-2007-3263

    Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earl…

  • Unscored —
    CVE-2007-3266 Public exploit

    Directory traversal vulnerability in webif.cgi in ifnet WEBIF allows remote attackers to include and execute arbitrary …

  • Unscored —
    CVE-2007-3262

    Unspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earl…

  • Unscored —
    CVE-2007-3264

    Unspecified vulnerability in the PD tools component in IBM WebSphere Application Server (WAS) 6.1.0.7 and earlier has u…

  • Unscored —
    CVE-2007-3127 Public exploit

    content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers to obtain sensitive information…

  • Unscored —
    CVE-2007-3128

    SQL injection vulnerability in content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers …

  • Unscored —
    CVE-2007-3257

    Camel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote IMAP servers to execut…

    evolution evolution-data-server Debian