Skip to content
OpenAdvisories

Archive

June 2007

Vulnerabilities first published in this month (UTC), newest first.

← May 2007 2007 / June July 2007 →
  1. 131
  2. 2 
  3. 3 
  4. 424
  5. 510
  6. 658
  7. 722
  8. 813
  9. 9 
  10. 10 
  11. 1150
  12. 1237
  13. 131
  14. 1432
  15. 1515
  16. 16 
  17. 17 
  18. 1810
  19. 1929
  20. 2019
  21. 2136
  22. 2235
  23. 23 
  24. 24 
  25. 259
  26. 2647
  27. 2753
  28. 2819
  29. 2920
  30. 305
All Critical High Medium Low Exploited only Public exploit

575 results · Feed

  • Unscored —
    CVE-2007-3338

    Multiple stack-based buffer overflows in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (C…

  • Unscored —
    CVE-2007-3349

    The Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to (1) cause a de…

  • Unscored —
    CVE-2007-3355

    Multiple cross-site scripting (XSS) vulnerabilities in NetClassifieds Premium Edition allow remote attackers to inject …

  • Unscored —
    CVE-2007-3361

    The Nortel PC Client SIP Soft Phone 4.1 3.5.208[20051015] allows remote attackers to cause a denial of service (device …

  • Unscored —
    CVE-2007-3353

    PHP remote file inclusion vulnerability in includes/template.php in MyEvent 1.6 allows remote attackers to execute arbi…

  • Unscored —
    CVE-2007-3358 Public exploit EPSS 68%

    PHP remote file inclusion vulnerability in html/load_lang.php in SerWeb 0.9.6 and earlier allows remote attackers to ex…

  • Unscored —
    CVE-2007-3354 Public exploit

    Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition allow remote attackers to execute arbitrary SQ…

  • Unscored —
    CVE-2007-3350

    AOL Instant Messenger (AIM) 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service (application ha…

  • Unscored —
    CVE-2007-3367

    Simple CGI Wrapper (scgiwrap) in cPanel before 10.9.1, and 11.x before 11.4.19-R14378, allows remote attackers to obtai…

  • Unscored —
    CVE-2007-3348

    The D-Link DPH-540/DPH-541 phone allows remote attackers to cause a denial of service (device outage) via a malformed S…

  • Unscored —
    CVE-2007-3343

    Cross-site scripting (XSS) vulnerability in RaidenHTTPD before 2.0.14 allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2007-3359

    Multiple PHP remote file inclusion vulnerabilities in SerWeb 0.9.6 and earlier allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2007-3346 Public exploit

    Directory traversal vulnerability in index.php in PHPAccounts 0.5 allows remote attackers to include arbitrary local fi…

  • Unscored —
    CVE-2007-3345

    Multiple SQL injection vulnerabilities in index.php in PHPAccounts 0.5 allow remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2007-3360 Public exploit

    hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data con…

  • Unscored —
    CVE-2007-3365 Public exploit

    MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote at…

  • Unscored —
    CVE-2007-3336 Public exploit

    Multiple "pointer overwrite" vulnerabilities in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multipl…

  • Unscored —
    CVE-2007-3356

    NetClassifieds Premium Edition allows remote attackers to obtain sensitive information via certain requests that reveal…

  • Unscored —
    CVE-2007-3357

    NetClassifieds Premium Edition does not use encryption for (1) stored passwords or (2) sensitive data, which might allo…

  • Unscored —
    CVE-2007-3362

    ageet AGEphone before 1.6.2, running on Windows Mobile 5 on the HTC HyTN Pocket PC device, allows remote attackers to (…

  • Unscored —
    CVE-2007-3369

    Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote…

  • Unscored —
    CVE-2007-3366

    Cross-site scripting (XSS) vulnerability in Simple CGI Wrapper (scgiwrap) in cPanel before 10.9.1, and 11.x before 11.4…

  • Unscored —
    CVE-2007-3364 Public exploit

    Cross-site scripting (XSS) vulnerability in the cgi-bin/post.mscgi sample page in MyServer 0.8.9 allows remote attacker…

  • Unscored —
    CVE-2007-3337

    wakeup in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, a…

  • Unscored —
    CVE-2007-3344

    Multiple cross-site scripting (XSS) vulnerabilities in netjukebox 4.01b allow remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2007-3363

    Multiple unspecified vulnerabilities in ageet AGEphone before 1.6.3 allow remote attackers to have an unknown impact vi…

  • Unscored —
    CVE-2007-3370 Public exploit EPSS 75%

    Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitra…

  • Unscored —
    CVE-2006-7206 Public exploit EPSS 22%

    Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creatin…

  • Unscored —
    CVE-2007-3342

    Multiple cross-site scripting (XSS) vulnerabilities in Movable Type (MT) before 3.34 allow remote attackers to inject a…

  • Unscored —
    CVE-2007-3341 EPSS 11%

    Unspecified vulnerability in the FTP implementation in Microsoft Internet Explorer allows remote attackers to "see a va…

  • Unscored —
    CVE-2007-3334 Public exploit EPSS 10%

    Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe…

  • Unscored —
    CVE-2007-3340 Public exploit

    BugHunter HTTP SERVER (httpsv.exe) 1.6.2 allows remote attackers to cause a denial of service (application crash) via a…

  • Unscored —
    CVE-2007-3339 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in forum/include/error/autherror.cfm in FuseTalk Basic, Standard, E…

  • Unscored —
    CVE-2007-2833

    Emacs 21 allows user-assisted attackers to cause a denial of service (crash) via certain crafted images, as demonstrate…

  • Unscored —
    CVE-2007-3332 Public exploit

    Directory traversal vulnerability in Satellite.php in Satel Lite for PhpNuke allows remote attackers to read arbitrary …

  • Unscored —
    CVE-2007-3335

    Multiple SQL injection vulnerabilities in the admin panel in PHPEcho CMS before 1.6 allow remote attackers to execute a…

  • Unscored —
    CVE-2007-3313 Public exploit

    Multiple SQL injection vulnerabilities in Jasmine CMS 1.0 allow remote attackers to execute arbitrary SQL commands via …

  • Unscored —
    CVE-2007-3314 Public exploit EPSS 43%

    Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (Engli…

  • Unscored —
    CVE-2007-3325 Public exploit EPSS 64%

    PHP remote file inclusion vulnerability in lib/language.php in LAN Management System (LMS) 1.9.6 and earlier allows rem…

  • Unscored —
    CVE-2007-3331

    Cross-site request forgery (CSRF) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to change the admin p…