Skip to content
OpenAdvisories

Archive

June 2007

Vulnerabilities first published in this month (UTC), newest first.

← May 2007 2007 / June July 2007 →
  1. 131
  2. 2 
  3. 3 
  4. 424
  5. 510
  6. 658
  7. 722
  8. 813
  9. 9 
  10. 10 
  11. 1150
  12. 1237
  13. 131
  14. 1432
  15. 1515
  16. 16 
  17. 17 
  18. 1810
  19. 1929
  20. 2019
  21. 2136
  22. 2235
  23. 23 
  24. 24 
  25. 259
  26. 2647
  27. 2753
  28. 2819
  29. 2920
  30. 305
All Critical High Medium Low Exploited only Public exploit

575 results · Feed

  • Unscored —
    CVE-2007-3252

    PortalApp stores sensitive information under the web root with insufficient access control, which allows remote attacke…

  • Unscored —
    CVE-2007-2923

    The launch method in the LocalExec ActiveX control (LocalExec.ocx) in Novell exteNd Director 4.1 and Portal Services al…

  • Unscored —
    CVE-2007-3242

    The Menu Manager Mod for (1) web-app.net WebAPP (aka WebAPP NE) 0.9.9.3.3 through 0.9.9.8, and (2) web-app.org WebAPP b…

  • Unscored —
    CVE-2007-3237 Public exploit EPSS 68%

    PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the TinyContent 1.5 module for XOOPS al…

  • Unscored —
    CVE-2007-3245

    IRC Services before 5.0.62, and 5.1 before 5.1pre3, allows remote attackers to disconnect users with guest nicknames by…

  • Unscored —
    CVE-2007-3233 Public exploit

    The TEC-IT TBarCode OCX ActiveX control (TBarCode7.ocx) 7.0.2.3524 allows remote attackers to overwrite arbitrary files…

  • Unscored —
    CVE-2007-3240

    Cross-site scripting (XSS) vulnerability in 404.php in the Vistered-Little theme for WordPress allows remote attackers …

    Web / CMS
  • Unscored —
    CVE-2007-3239

    Cross-site scripting (XSS) vulnerability in searchform.php in the AndyBlue theme before 20070607 for WordPress allows r…

  • Unscored —
    CVE-2007-3244

    SQL injection vulnerability in bb-includes/formatting-functions.php in bbPress before 0.8.1 might allow remote attacker…

  • Unscored —
    CVE-2007-3238

    Cross-site scripting (XSS) vulnerability in functions.php in the default theme in WordPress 2.2 allows remote authentic…

    wordpress Debian
  • Unscored —
    CVE-2007-3234 Public exploit

    SQL injection vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to execute arbitrary SQL commands…

  • Unscored —
    CVE-2007-3243 Public exploit

    Cross-site scripting (XSS) vulnerability in bb-login.php in bbPress 0.8.1 allows remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2007-3232

    The IBM TotalStorage DS400 with firmware 4.15 uses a blank password for the (1) root, (2) user, (3) manager, (4) admini…

  • Unscored —
    CVE-2007-3241

    Cross-site scripting (XSS) vulnerability in blogroll.php in the cordobo-green-park theme for WordPress allows remote at…

    Web / CMS
  • Unscored —
    CVE-2007-3236 Public exploit EPSS 77%

    PHP remote file inclusion vulnerability in footer.php in the Horoscope 1.0 module for XOOPS allows remote attackers to …

  • Unscored —
    CVE-2007-3246

    The do_set_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileg…

  • Unscored —
    CVE-2007-3235 Public exploit

    Cross-site scripting (XSS) vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2007-3231

    Buffer overflow in MeCab before 0.96 has unknown impact and attack vectors.

    mecab Debian
  • Unscored —
    CVE-2007-3222 Public exploit

    PHP remote file inclusion vulnerability in modify.php in the XFsection 1.07 module for XOOPS allows remote attackers to…

  • Unscored —
    CVE-2007-3230 Public exploit EPSS 68%

    PHP remote file inclusion vulnerability in phphtml.php in Idan Sofer PHP::HTML 0.6.4 allows remote attackers to execute…

  • Unscored —
    CVE-2007-3228 Public exploit EPSS 67%

    PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite C…

  • Unscored —
    CVE-2007-3221 Public exploit EPSS 68%

    PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the XT-Conteudo module for XOOPS allows…

  • Unscored —
    CVE-2007-3223

    Unspecified vulnerability in the NFS server in Sun Solaris 10 before 20070613 allows remote attackers to cause a denial…

  • Unscored —
    CVE-2007-3220 Public exploit EPSS 63%

    PHP remote file inclusion vulnerability in admin/editor2/spaw_control.class.php in the Cjay Content 3 module for XOOPS …

  • Medium —
    CVE-2007-3227 Public exploit

    Moderate severity vulnerability that affects rails

    Cross-site scripting (XSS) vulnerability in the to_json (ActiveRecord::Base#to_json) function in Ruby on Rails before edge 9606 allows remote attackers to inject arbitrary web script via the input values.

    rails rails Debian RubyGems
  • Unscored —
    CVE-2007-3225

    Unspecified vulnerability in Sun Java System Directory Server (slapd) 6.0, and 5.2 with Patch 3 or 4, allows remote att…

  • Unscored —
    CVE-2007-3226

    Cross-site scripting (XSS) vulnerability in dotProject before 2.1 RC2 allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2007-3224

    Unspecified vulnerability in Sun ONE/Java System Directory Server (slapd) 6.0, and 5.x before 5.2 Patch 5, allows remot…

  • Unscored —
    CVE-2007-3229

    index.php in Singapore Gallery allows remote attackers to obtain sensitive information via a request with a non-directo…

  • Low —
    CVE-2007-2450

    Apache Tomcat vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in the (1) Manager and (2) Host Manager web applications in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote authenti…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2007-2921

    Multiple buffer overflows in acgm.dll in the Corel / Micrografx ActiveCGM Browser ActiveX control before 7.1.4.19 allow…

  • Medium —
    CVE-2007-2449 Public exploit Scanner template EPSS 77%

    Apache Tomcat XSS Vulnerabilities in Examples Web Application

    Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.36, 5.0.0 through 5.0.30, 5.5.0 through 5.5.24, and 6.0.0 through 6.0.13 allow remote attackers to…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2007-2448

    Subversion 1.4.3 and earlier does not properly implement the "partial access" privilege for users who have access to ch…

    subversion Debian
  • Unscored —
    CVE-2007-3219

    Unspecified vulnerability in sources/action_public/xmlout.php in Invision Power Board (IPB or IP.Board) 2.2.0 through 2…

  • Unscored —
    CVE-2007-3218

    Cross-site scripting (XSS) vulnerability in request.php in PHP Live! 3.2.2 and earlier allows remote attackers to injec…

  • Unscored —
    CVE-2007-3213

    Multiple cross-site scripting (XSS) vulnerabilities in comments.cgi in Sporum Forum 3.0.9 and earlier allow remote atta…

  • High —
    CVE-2007-3215

    PHPMailer Shell command injection

    PHPMailer 1.7, when configured to use sendmail, allows remote attackers to execute arbitrary shell commands via shell metacharacters in the SendmailSend function in class.phpmailer.php.

    wordpress phpmailer/phpmailer libphp-phpmailer Debian Packagist
  • Unscored —
    CVE-2007-3214 Public exploit

    SQL injection vulnerability in style.php in e-Vision CMS 2.02 and earlier, when magic_quotes_gpc is disabled, allows re…

  • Unscored —
    CVE-2007-3217 Public exploit EPSS 10%

    Multiple PHP remote file inclusion vulnerabilities in Prototype of an PHP application 0.1 allow remote attackers to exe…

  • Unscored —
    CVE-2007-3216 Public exploit EPSS 59%

    Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops …