Skip to content
OpenAdvisories

Archive

22 June 2007

Vulnerabilities first published on this day (UTC), newest first.

35 results · Feed

  • Unscored —

    The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service (exit) via empty TXT data over D-…

  • Unscored —

    Buffer overflow in ageet AGEphone before 1.4.0 might allow remote attackers to have an unknown impact via unspecified v…

  • Unscored —

    The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote att…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in the preview form in Stephen Ostermiller Contact Form before 2.00.02 allows …

  • Unscored —

    The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allo…

  • Unscored —

    Buffer overflow in the HTTP server on the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ allows remote attacke…

  • Unscored —
    CVE-2007-3371 Public exploit EPSS 71%

    PHP remote file inclusion vulnerability in plugins/widgets/htmledit/htmledit.php in Powl 0.94 allows remote attackers t…

  • Unscored —

    Multiple stack-based buffer overflows in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (C…

  • Unscored —

    The Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to (1) cause a de…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in NetClassifieds Premium Edition allow remote attackers to inject …

  • Unscored —

    The Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to cause a denial of service (device …

  • Unscored —

    PHP remote file inclusion vulnerability in includes/template.php in MyEvent 1.6 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2007-3358 Public exploit EPSS 68%

    PHP remote file inclusion vulnerability in html/load_lang.php in SerWeb 0.9.6 and earlier allows remote attackers to ex…

  • Unscored —
    CVE-2007-3354 Public exploit

    Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition allow remote attackers to execute arbitrary SQ…

  • Unscored —

    AOL Instant Messenger (AIM) 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service (application ha…

  • Unscored —

    Simple CGI Wrapper (scgiwrap) in cPanel before 10.9.1, and 11.x before 11.4.19-R14378, allows remote attackers to obtai…

  • Unscored —

    The D-Link DPH-540/DPH-541 phone allows remote attackers to cause a denial of service (device outage) via a malformed S…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in RaidenHTTPD before 2.0.14 allows remote attackers to inject arbitrary web s…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in SerWeb 0.9.6 and earlier allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2007-3346 Public exploit

    Directory traversal vulnerability in index.php in PHPAccounts 0.5 allows remote attackers to include arbitrary local fi…

  • Unscored —

    Multiple SQL injection vulnerabilities in index.php in PHPAccounts 0.5 allow remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2007-3360 Public exploit

    hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data con…

  • Unscored —
    CVE-2007-3365 Public exploit

    MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote at…

  • Unscored —
    CVE-2007-3336 Public exploit

    Multiple "pointer overwrite" vulnerabilities in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multipl…

  • Unscored —

    NetClassifieds Premium Edition allows remote attackers to obtain sensitive information via certain requests that reveal…

  • Unscored —

    NetClassifieds Premium Edition does not use encryption for (1) stored passwords or (2) sensitive data, which might allo…

  • Unscored —

    ageet AGEphone before 1.6.2, running on Windows Mobile 5 on the HTC HyTN Pocket PC device, allows remote attackers to (…

  • Unscored —

    Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote…

  • Unscored —

    Cross-site scripting (XSS) vulnerability in Simple CGI Wrapper (scgiwrap) in cPanel before 10.9.1, and 11.x before 11.4…

  • Unscored —
    CVE-2007-3364 Public exploit

    Cross-site scripting (XSS) vulnerability in the cgi-bin/post.mscgi sample page in MyServer 0.8.9 allows remote attacker…

  • Unscored —

    wakeup in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, a…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in netjukebox 4.01b allow remote attackers to inject arbitrary web …

  • Unscored —

    Multiple unspecified vulnerabilities in ageet AGEphone before 1.6.3 allow remote attackers to have an unknown impact vi…

  • Unscored —
    CVE-2007-3370 Public exploit EPSS 75%

    Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-7206 Public exploit EPSS 22%

    Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creatin…