Skip to content
OpenAdvisories

Archive

June 2007

Vulnerabilities first published in this month (UTC), newest first.

← May 2007 2007 / June July 2007 →
  1. 131
  2. 2 
  3. 3 
  4. 424
  5. 510
  6. 658
  7. 722
  8. 813
  9. 9 
  10. 10 
  11. 1150
  12. 1237
  13. 131
  14. 1432
  15. 1515
  16. 16 
  17. 17 
  18. 1810
  19. 1929
  20. 2019
  21. 2136
  22. 2235
  23. 23 
  24. 24 
  25. 259
  26. 2647
  27. 2753
  28. 2819
  29. 2920
  30. 305
All Critical High Medium Low Exploited only Public exploit

193 results · Clear filters · Feed

  • Unscored —
    CVE-2007-3282 Public exploit EPSS 42%

    Buffer overflow in the Microsoft Office MSODataSourceControl ActiveX object allows remote attackers to cause a denial o…

  • Unscored —
    CVE-2007-3284 Public exploit

    corefoundation.dll in Apple Safari 3.0.1 (552.12.2) for Windows allows remote attackers to cause a denial of service (c…

  • Unscored —
    CVE-2007-3281 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Php Hosting Biller 1.0 allows remote attackers to inject arbit…

  • Unscored —
    CVE-2007-3272 Public exploit

    Directory traversal vulnerability in index.php in MiniBB 2.0.5 allows remote attackers to read arbitrary files via a ..…

  • Unscored —
    CVE-2007-3271 Public exploit

    PHP remote file inclusion vulnerability in templates/2blue/bodyTemplate.php in YourFreeScreamer 1.0 allows remote attac…

  • Unscored —
    CVE-2007-3280 Public exploit EPSS 25%

    The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary l…

  • Unscored —
    CVE-2007-3270 Public exploit

    PHP remote file inclusion vulnerability in Includes/global.inc.php in phpMyInventory 2.8 allows remote attackers to exe…

  • Unscored —
    CVE-2007-3267 Public exploit

    Cross-site scripting (XSS) vulnerability in low.php in Fuzzylime Forum 1.01b and earlier allows remote attackers to inj…

  • Unscored —
    CVE-2007-3266 Public exploit

    Directory traversal vulnerability in webif.cgi in ifnet WEBIF allows remote attackers to include and execute arbitrary …

  • Unscored —
    CVE-2007-3127 Public exploit

    content.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers to obtain sensitive information…

  • Unscored —
    CVE-2007-3251 Public exploit

    Multiple directory traversal vulnerabilities in e-Vision CMS 2.02 and earlier allow remote attackers to (1) include and…

  • Unscored —
    CVE-2007-3101 Public exploit EPSS 44%

    Multiple cross-site scripting (XSS) vulnerabilities in certain JSF applications in Apache MyFaces Tomahawk before 1.1.6…

  • Unscored —
    CVE-2007-3249 Public exploit

    Cross-site scripting (XSS) vulnerability in mod_lettermansubscribe.php in the Letterman Subscriber (mod_letterman) befo…

    Web / CMS
  • Unscored —
    CVE-2007-3237 Public exploit EPSS 68%

    PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the TinyContent 1.5 module for XOOPS al…

  • Unscored —
    CVE-2007-3233 Public exploit

    The TEC-IT TBarCode OCX ActiveX control (TBarCode7.ocx) 7.0.2.3524 allows remote attackers to overwrite arbitrary files…

  • Unscored —
    CVE-2007-3234 Public exploit

    SQL injection vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2007-3243 Public exploit

    Cross-site scripting (XSS) vulnerability in bb-login.php in bbPress 0.8.1 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2007-3236 Public exploit EPSS 77%

    PHP remote file inclusion vulnerability in footer.php in the Horoscope 1.0 module for XOOPS allows remote attackers to …

  • Unscored —
    CVE-2007-3235 Public exploit

    Cross-site scripting (XSS) vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2007-3222 Public exploit

    PHP remote file inclusion vulnerability in modify.php in the XFsection 1.07 module for XOOPS allows remote attackers to…

  • Unscored —
    CVE-2007-3230 Public exploit EPSS 68%

    PHP remote file inclusion vulnerability in phphtml.php in Idan Sofer PHP::HTML 0.6.4 allows remote attackers to execute…

  • Unscored —
    CVE-2007-3228 Public exploit EPSS 67%

    PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite C…

  • Unscored —
    CVE-2007-3221 Public exploit EPSS 68%

    PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the XT-Conteudo module for XOOPS allows…

  • Unscored —
    CVE-2007-3220 Public exploit EPSS 63%

    PHP remote file inclusion vulnerability in admin/editor2/spaw_control.class.php in the Cjay Content 3 module for XOOPS …

  • Medium —
    CVE-2007-3227 Public exploit

    Moderate severity vulnerability that affects rails

    Cross-site scripting (XSS) vulnerability in the to_json (ActiveRecord::Base#to_json) function in Ruby on Rails before edge 9606 allows remote attackers to inject arbitrary web script via the input values.

    rails rails Debian RubyGems
  • Medium —
    CVE-2007-2449 Public exploit Scanner template EPSS 77%

    Apache Tomcat XSS Vulnerabilities in Examples Web Application

    Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2007-3214 Public exploit

    SQL injection vulnerability in style.php in e-Vision CMS 2.02 and earlier, when magic_quotes_gpc is disabled, allows re…

  • Unscored —
    CVE-2007-3217 Public exploit EPSS 10%

    Multiple PHP remote file inclusion vulnerabilities in Prototype of an PHP application 0.1 allow remote attackers to exe…

  • Unscored —
    CVE-2007-3216 Public exploit EPSS 59%

    Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops …

  • Unscored —
    CVE-2007-3212 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in links.php in Beehive Forum 0.7.1 allow remote attackers to injec…

  • Unscored —
    CVE-2007-3189 Public exploit

    Cross-site scripting (XSS) vulnerability in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.3 allows re…

  • Unscored —
    CVE-2007-3198 Public exploit

    Cross-site scripting (XSS) vulnerability in comments.php in Maran PHP Blog (Maran Blog), possibly only versions before …

  • Unscored —
    CVE-2007-3201 Public exploit

    Visual truncation vulnerability in Windows Privacy Tray (WinPT) 1.2.0 allows user-assisted remote attackers to install …

  • Unscored —
    CVE-2007-3196 Public exploit

    SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows remote attackers to exec…

  • Unscored —
    CVE-2007-3181 Public exploit EPSS 13%

    Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a …

  • Unscored —
    CVE-2007-3192 Public exploit

    admin/setup.php in Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to read and modify con…

  • Unscored —
    CVE-2007-3188 Public exploit

    SQL injection vulnerability in down_indir.asp in Fullaspsite GeometriX Download Portal allows remote attackers to execu…

  • Unscored —
    CVE-2007-3199 Public exploit

    Unrestricted file upload vulnerability in Link Request Contact Form 3.4 allows remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2007-3190 Public exploit

    Multiple SQL injection vulnerabilities in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.3, when magic…

  • Unscored —
    CVE-2007-3191 Public exploit

    Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to obtain configuration information via a…