Skip to content
OpenAdvisories

Archive

21 June 2007

Vulnerabilities first published on this day (UTC), newest first.

← May 2007 2007 / June /21 July 2007 →
  1. 131
  2. 2 
  3. 3 
  4. 424
  5. 510
  6. 658
  7. 722
  8. 813
  9. 9 
  10. 10 
  11. 1150
  12. 1237
  13. 131
  14. 1432
  15. 1515
  16. 16 
  17. 17 
  18. 1810
  19. 1929
  20. 2019
  21. 2136
  22. 2235
  23. 23 
  24. 24 
  25. 259
  26. 2647
  27. 2753
  28. 2819
  29. 2920
  30. 305
All Critical High Medium Low Exploited only Public exploit

36 results · Feed

  • Unscored —
    CVE-2007-3342

    Multiple cross-site scripting (XSS) vulnerabilities in Movable Type (MT) before 3.34 allow remote attackers to inject a…

  • Unscored —
    CVE-2007-3341 EPSS 11%

    Unspecified vulnerability in the FTP implementation in Microsoft Internet Explorer allows remote attackers to "see a va…

  • Unscored —
    CVE-2007-3334 Public exploit EPSS 10%

    Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe…

  • Unscored —
    CVE-2007-3340 Public exploit

    BugHunter HTTP SERVER (httpsv.exe) 1.6.2 allows remote attackers to cause a denial of service (application crash) via a…

  • Unscored —
    CVE-2007-3339 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in forum/include/error/autherror.cfm in FuseTalk Basic, Standard, E…

  • Unscored —
    CVE-2007-2833

    Emacs 21 allows user-assisted attackers to cause a denial of service (crash) via certain crafted images, as demonstrate…

  • Unscored —
    CVE-2007-3332 Public exploit

    Directory traversal vulnerability in Satellite.php in Satel Lite for PhpNuke allows remote attackers to read arbitrary …

  • Unscored —
    CVE-2007-3335

    Multiple SQL injection vulnerabilities in the admin panel in PHPEcho CMS before 1.6 allow remote attackers to execute a…

  • Unscored —
    CVE-2007-3313 Public exploit

    Multiple SQL injection vulnerabilities in Jasmine CMS 1.0 allow remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2007-3314 Public exploit EPSS 43%

    Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (Engli…

  • Unscored —
    CVE-2007-3325 Public exploit EPSS 64%

    PHP remote file inclusion vulnerability in lib/language.php in LAN Management System (LMS) 1.9.6 and earlier allows rem…

  • Unscored —
    CVE-2007-3331

    Cross-site request forgery (CSRF) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to change the admin p…

  • Unscored —
    CVE-2007-3312 Public exploit

    Directory traversal vulnerability in admin/plugin_manager.php in Jasmine CMS 1.0 allows remote authenticated administra…

  • Unscored —
    CVE-2007-3327 Public exploit

    httpsv.exe in HTTP Server 1.6.2 allows remote attackers to obtain sensitive information (script source code) via a URI …

  • Unscored —
    CVE-2007-3328

    Multiple cross-site scripting (XSS) vulnerabilities in Interact 2.4 beta 1 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2007-3330

    Cross-site scripting (XSS) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to inject arbitrary web scri…

  • Unscored —
    CVE-2007-3317

    The Session Initiation Protocol (SIP) User Access Client (UAC) message parsing module in Avaya one-X Desktop Edition 2.…

  • Unscored —
    CVE-2007-3315 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in YourFreeScreamer 1.0, when register_globals is enabled, allow rem…

  • Unscored —
    CVE-2007-3323 Public exploit

    SQL injection vulnerability in comersus_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows remote attackers to exe…

  • Unscored —
    CVE-2007-3318

    Buffer overflow in the Session Initiation Protocol (SIP) User Access Client (UAC) message parsing module in Avaya one-X…

  • Unscored —
    CVE-2007-3316 EPSS 17%

    Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to …

    vlc Debian
  • Unscored —
    CVE-2007-3322

    The Avaya 4602 SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware uses a constant media port number for c…

  • Unscored —
    CVE-2007-3329

    Multiple array index errors in the (1) get_intra_block, (2) get_inter_block_h263, and (3) get_inter_block_mpeg function…

  • Unscored —
    CVE-2007-3321

    The Avaya 4602 SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware allows remote attackers to cause a deni…

  • Unscored —
    CVE-2007-3324 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2007-3319

    The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware does not use the cnonce parameter in the…

  • Unscored —
    CVE-2007-3326

    Multiple directory traversal vulnerabilities in vBulletin 3.x.x allow remote attackers to redirect visitors to arbitrar…

  • Unscored —
    CVE-2007-3320

    The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware accepts SIP INVITE requests from arbitra…

  • Unscored —
    CVE-2007-3311 Public exploit

    SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to e…

  • Unscored —
    CVE-2007-2398

    Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while…

  • Unscored —
    CVE-2007-3306 Public exploit EPSS 64%

    PHP remote file inclusion vulnerability in crontab/run_billing.php in MiniBill 1.2.5 allows remote attackers to execute…

  • Unscored —
    CVE-2007-3305

    Heap-based buffer overflow in Cerulean Studios Trillian 3.x before 3.1.6.0 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2007-3307 Public exploit

    SQL injection vulnerability in game_listing.php in Solar Empire 2.9.1.1 and earlier allows remote attackers to execute …

  • Unscored —
    CVE-2007-3309

    Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.2 allows remote attackers to execute arbitrary PHP code du…

  • Unscored —
    CVE-2007-3308

    Simple Machines Forum (SMF) 1.1.2 uses a concatenation method with insufficient randomization when creating a WAV file …

  • Unscored —
    CVE-2007-3310 Public exploit

    Cross-site scripting (XSS) vulnerability in arama.asp in TDizin allows remote attackers to inject arbitrary web script …