Archive
June 2007
Vulnerabilities first published in this month (UTC), newest first.
575 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in public/code/cp_dpage.php in All In One Control Panel (AIOCP) before 1.3.017…
-
Unscored —
Memory leak in server/MaraDNS.c in MaraDNS before 1.2.12.05, and 1.3.x before 1.3.03, allows remote attackers to cause …
-
Unscored —CVE-2007-3118 Public exploit
Multiple PHP remote file inclusion vulnerabilities in Kravchuk letter (K-letter) 1.0 allow remote attackers to execute …
-
Unscored —
Memory leak in server/MaraDNS.c in MaraDNS 1.2.12.06 and 1.3.05 allows remote attackers to cause a denial of service (m…
-
Unscored —
Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers …
-
Unscored —CVE-2007-3119 Public exploit
SQL injection vulnerability in news.asp in Kartli Alisveris Sistemi (aka Free-PayPal-Shopping-Cart) 1.0 allows remote a…
-
Unscored —
Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service (CPU consumpt…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the SEO module in ADPLAN 3 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2007-3109 EPSS 11%
The CERN Image Map Dispatcher (htimage.exe) in Microsoft FrontPage allows remote attackers to determine the existence, …
-
Unscored —
Buffer overflow in the Provideo Camimage ActiveX control in ISSCamControl.dll 1.0.1.5, when Internet Explorer 6 is used…
-
Unscored —
Multiple stack-based buffer overflows in stream/stream_cddb.c in MPlayer before 1.0rc1try3 allow remote attackers to ex…
-
Unscored —
Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise 7.0 and later enables the mini switch by default, which al…
-
Unscored —
Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Syman…
-
Unscored —CVE-2007-3096 Public exploit
Directory traversal vulnerability in login.php in PBLang (PBL) 4.67.16.a and earlier, when magic_quotes_gpc is disabled…
-
Unscored —CVE-2007-3098 Public exploit
The SNMPc Server (crserv.exe) process in Castle Rock Computing SNMPc before 7.0.19 allows remote attackers to cause a d…
-
Unscored —
my.activation.php3 in F5 FirePass 4100 SSL VPN allows remote attackers to execute arbitrary shell commands via shell me…
-
Unscored —
Multiple stack-based buffer overflows in the FViewerLoading ActiveX control (FlipViewerX.dll) in E-Book Systems FlipVie…
-
Unscored —
IBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent after the agent is mo…
-
Unscored —
Unspecified vulnerability in the authentication mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through …
-
Unscored —CVE-2007-3092 EPSS 20%
Microsoft Internet Explorer 6 allows remote attackers to spoof the URL bar, and page properties including SSL certifica…
-
Unscored —CVE-2007-3091 EPSS 28%
Race condition in Microsoft Internet Explorer 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7…
-
Unscored —
Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or…
-
Unscored —
Unspecified vulnerability in the logging mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through 10 befo…
-
Unscored —
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Assoc…
-
Unscored —CVE-2007-2863 EPSS 23%
Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Assoc…
-
Unscored —
Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent attackers to cause a denial of…
-
Unscored —
Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as user cred…
-
Unscored —CVE-2007-0067 EPSS 14%
Unspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x before 7.0.3 allows remote …
-
Unscored —CVE-2007-3076 Public exploit
A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files t…
-
Unscored —CVE-2007-3077 Public exploit
SQL injection vulnerability in listmembers.php in EQdkp 1.3.2 and earlier allows remote attackers to execute arbitrary …
-
Unscored —
Directory traversal vulnerability in Mozilla Firefox 2.0.0.4 and earlier on Mac OS X and Unix allows remote attackers t…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in PBSite allow remote attackers to execute arbitrary PHP code via a…
-
Unscored —
Z-Blog 1.7 stores sensitive information under the web root with insufficient access control, which allows remote attack…
-
Unscored —
Mozilla Firefox 2.0.0.4 and earlier allows remote attackers to read files in the local Firefox installation directory v…
-
Unscored —
Directory traversal vulnerability in Mozilla Firefox before 2.0.0.4 on Windows allows remote attackers to read arbitrar…
-
Unscored —CVE-2007-3075 EPSS 16%
Directory traversal vulnerability in Microsoft Internet Explorer allows remote attackers to read arbitrary files via di…
-
Unscored —CVE-2007-3080 Public exploit
SQL injection vulnerability in haberoku.asp in Hunkaray Okul Portaly 1.1 allows remote attackers to execute arbitrary S…
-
Unscored —CVE-2007-3088 Public exploit
SQL injection vulnerability in index.php in Comicsense allows remote attackers to execute arbitrary SQL commands via th…
-
Unscored —CVE-2007-3082 Public exploit
Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to include and …
-
Unscored —
PHP remote file inclusion vulnerability in sampleecommerce.php in Comdev eCommerce 4.1 allows remote attackers to execu…