Archive
June 2007
Vulnerabilities first published in this month (UTC), newest first.
193 results · Clear filters · Feed
-
Unscored —CVE-2007-3186 Public exploit
Apple Safari Beta 3.0.1 for Windows allows remote attackers to execute arbitrary commands via shell metacharacters in a…
-
Unscored —
Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as us…
-
Unscored —
Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and…
-
Unscored —CVE-2007-3168 Public exploit
A certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions bef…
-
Unscored —CVE-2007-3170 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Uebimiau Webmail allow remote attackers to inject arbitrary web …
-
Unscored —CVE-2007-3151 Public exploit
rpttop.htm in the web management interface in Packeteer PacketShaper 7.3.0g2 and 7.5.0g1 allows remote attackers to cau…
-
Unscored —CVE-2007-3159 Public exploit
http.c in MiniWeb Http Server 0.8.x allows remote attackers to cause a denial of service (application crash) via a nega…
-
Unscored —CVE-2007-3160 Public exploit
PHP remote file inclusion vulnerability in admin/header.php in PHP Real Estate Classifieds Premium Plus allows remote a…
-
Unscored —CVE-2007-3162 Public exploit
Buffer overflow in the NotSafe function in the idaiehlp ActiveX control in idaiehlp.dll 1.9.1.74 in Internet Download A…
-
Unscored —CVE-2007-3166 Public exploit
Buffer overflow in Qualcomm Eudora 7.1.0.9 allows user-assisted, remote IMAP servers to execute arbitrary code via a lo…
-
Unscored —CVE-2007-3157 Public exploit
IPSecDrv.sys 10.4.0.12 in SafeNET High Assurance Remote 1.4.0 Build 12, and SoftRemote, allows remote attackers to caus…
-
Unscored —CVE-2007-3171 Public exploit
Uebimiau Webmail allows remote attackers to obtain sensitive information via a request to demo/pop3/error.php with an i…
-
Unscored —CVE-2007-3167 Public exploit
Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control (aka MjpegControl) in MjpegDecoder.dll 2.0.0.13 …
-
Unscored —CVE-2007-3161 Public exploit
Buffer overflow in Ace-FTP Client 1.24a allows user-assisted, remote FTP servers to execute arbitrary code via a long r…
-
Unscored —CVE-2007-3158 Public exploit
download_script.asp in ASP Folder Gallery allows remote attackers to read arbitrary files via a filename in the file pa…
-
Unscored —CVE-2006-3974 Public exploit
Cross-site scripting (XSS) vulnerability in cgi-bin/admin in 3Com OfficeConnect Secure Router with firmware 1.04-168 al…
-
Unscored —
Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows…
-
Unscored —
Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows…
-
Unscored —CVE-2007-3141 Public exploit
PHP remote file inclusion vulnerability in core/editor.php in phpWebThings 1.5.2 allows remote attackers to execute arb…
-
Unscored —
Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows…
-
Unscored —CVE-2007-3138 Public exploit
Directory traversal vulnerability in index.php in Open Solution Quick.Cart 2.2 and earlier allows remote attackers to i…
-
Unscored —CVE-2007-3133 Public exploit
SQL injection vulnerability in urunbak.asp in W1L3D4 WEBmarket 0.1 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2007-3136 Public exploit
PHP remote file inclusion vulnerability in inc/nuke_include.php in newsSync 1.5.0rc6 allows remote attackers to execute…
-
Unscored —CVE-2007-3139 Public exploit
config/general.php in Quick.Cart 2.2 and earlier uses a default username and password, which allows remote attackers to…
-
Unscored —CVE-2007-3140 Public exploit
SQL injection vulnerability in xmlrpc.php in WordPress 2.2 allows remote authenticated users to execute arbitrary SQL c…
-
Unscored —CVE-2007-3137 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in 4print.asp in WmsCMS 2.0 and earlier allow remote attackers to i…
-
Unscored —CVE-2007-3130 Public exploit
Multiple PHP remote file inclusion vulnerabilities in the OpenWiki (formerly JD-Wiki) component (com_jd-wiki) 1.0.2, an…
-
Unscored —CVE-2007-3134 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in atomPhotoBlog.php in Atom PhotoBlog 1.0.9 and earlier allow remo…
-
Unscored —CVE-2007-3118 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Kravchuk letter (K-letter) 1.0 allow remote attackers to execute …
-
Unscored —CVE-2007-3119 Public exploit
SQL injection vulnerability in news.asp in Kartli Alisveris Sistemi (aka Free-PayPal-Shopping-Cart) 1.0 allows remote a…
-
Unscored —
Buffer overflow in the Provideo Camimage ActiveX control in ISSCamControl.dll 1.0.1.5, when Internet Explorer 6 is used…
-
Unscored —CVE-2007-3096 Public exploit
Directory traversal vulnerability in login.php in PBLang (PBL) 4.67.16.a and earlier, when magic_quotes_gpc is disabled…
-
Unscored —CVE-2007-3098 Public exploit
The SNMPc Server (crserv.exe) process in Castle Rock Computing SNMPc before 7.0.19 allows remote attackers to cause a d…
-
Unscored —
Multiple stack-based buffer overflows in the FViewerLoading ActiveX control (FlipViewerX.dll) in E-Book Systems FlipVie…
-
Unscored —
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Assoc…
-
Unscored —
Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent attackers to cause a denial of…
-
Unscored —CVE-2007-3076 Public exploit
A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files t…
-
Unscored —CVE-2007-3077 Public exploit
SQL injection vulnerability in listmembers.php in EQdkp 1.3.2 and earlier allows remote attackers to execute arbitrary …
-
Unscored —CVE-2007-3080 Public exploit
SQL injection vulnerability in haberoku.asp in Hunkaray Okul Portaly 1.1 allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2007-3088 Public exploit
SQL injection vulnerability in index.php in Comicsense allows remote attackers to execute arbitrary SQL commands via th…