Archive
June 2007
Vulnerabilities first published in this month (UTC), newest first.
575 results · Feed
-
Unscored —CVE-2007-3212 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in links.php in Beehive Forum 0.7.1 allow remote attackers to injec…
-
Unscored —
Integer overflow in the exif_data_load_data_entry function in libexif/exif-data.c in Libexif before 0.6.16 allows remot…
-
Unscored —
Mail Notification 4.0, when WITH_SSL is set to 0 at compile time, uses unencrypted connections for accounts configured …
-
Unscored —
Stack-based buffer overflow in nptoken.mox in the Cellosoft Tokens Object 2.0.0.6 extension for Vitalize! allows remote…
-
Unscored —
CRLF injection vulnerability in Yet another Bulletin Board (YaBB) 2.1 allows remote attackers to obtain administrative …
-
Unscored —
Cross-site scripting (XSS) vulnerability in 404.php in Domain Technologie Control (DTC) before 0.25.9 allows remote att…
-
Unscored —
usr/mgmt_ipc.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 checks the client's UID on the listening …
-
Unscored —
usr/log.c in iscsid in open-iscsi (iscsi-initiator-utils) before 2.0-865 uses a semaphore with insecure permissions (wo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Apple Safari Beta 3.0.1 for Windows allows remote attackers to inject arbit…
-
Unscored —
The parse_str function in (1) PHP, (2) Hardened-PHP, and (3) Suhosin, when called without a second parameter, might all…
-
Unscored —
Stack-based buffer overflow in smtpdll.dll in the SMTP service in 602Pro LAN SUITE 2003 2003.0.03.0828 allows remote at…
-
Unscored —CVE-2007-3189 Public exploit
Cross-site scripting (XSS) vulnerability in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.3 allows re…
-
Unscored —
NMASINST in Novell Modular Authentication Service (NMAS) 3.1.2 and earlier on NetWare logs its invoking command line to…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the rich text editor in Webwiz allows remote attackers to inject arbitrary …
-
Unscored —CVE-2007-3198 Public exploit
Cross-site scripting (XSS) vulnerability in comments.php in Maran PHP Blog (Maran Blog), possibly only versions before …
-
Unscored —CVE-2007-3201 Public exploit
Visual truncation vulnerability in Windows Privacy Tray (WinPT) 1.2.0 allows user-assisted remote attackers to install …
-
Unscored —
SQL injection vulnerability in vBSupport.php in vBSupport 1.1 before 1.1a allows remote attackers to execute arbitrary …
-
Unscored —
SQL injection vulnerability in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.4-pre2 allows remote att…
-
Unscored —CVE-2007-3196 Public exploit
SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows remote attackers to exec…
-
Unscored —
Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a …
-
Unscored —CVE-2007-3192 Public exploit
admin/setup.php in Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to read and modify con…
-
Unscored —CVE-2007-3188 Public exploit
SQL injection vulnerability in down_indir.asp in Fullaspsite GeometriX Download Portal allows remote attackers to execu…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in ERFAN WIKI 1.00 allows remote attackers to inject arbitrary we…
-
Unscored —
lib/WikiUser/LDAP.php in PhpWiki before 1.3.13p1, when the configuration lacks a nonzero PASSWORD_LENGTH_MINIMUM, might…
-
Unscored —CVE-2007-3199 Public exploit
Unrestricted file upload vulnerability in Link Request Contact Form 3.4 allows remote attackers to execute arbitrary PH…
-
Unscored —CVE-2007-3190 Public exploit
Multiple SQL injection vulnerabilities in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.3, when magic…
-
Critical 9.8
Multiple PHP remote file inclusion vulnerabilities in myBloggie 2.1.5 allow remote attackers to execute arbitrary PHP c…
-
Unscored —CVE-2007-3191 Public exploit
Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to obtain configuration information via a…
-
Unscored —CVE-2007-3186 Public exploit
Apple Safari Beta 3.0.1 for Windows allows remote attackers to execute arbitrary commands via shell metacharacters in a…
-
Unscored —
Multiple unspecified vulnerabilities in Apple Safari for Windows allow remote attackers to cause a denial of service or…
-
Unscored —
Apple Safari Beta 3.0.1 for Windows public beta allows remote attackers to cause a denial of service (crash) via unspec…
-
Unscored —
Heap-based buffer overflow in OpenOffice.org (OOo) 2.2.1 and earlier allows remote attackers to execute arbitrary code …
-
Unscored —
Cisco Trust Agent (CTA) before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass auth…
-
Unscored —CVE-2007-2227 EPSS 25%
The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Co…
-
Unscored —CVE-2007-2225 EPSS 25%
A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP head…
-
Unscored —CVE-2007-2219 EPSS 32%
Unspecified vulnerability in the Win32 API on Microsoft Windows 2000, XP SP2, and Server 2003 SP1 and SP2 allows remote…
-
Unscored —CVE-2007-0936 EPSS 31%
Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-assisted attackers to execute arbitrary …
-
Unscored —CVE-2007-0218 EPSS 31%
Microsoft Internet Explorer 5.01 and 6 allows remote attackers to execute arbitrary code by instantiating certain COM o…
-
Unscored —CVE-2007-0934 EPSS 31%
Unspecified vulnerability in Microsoft Visio 2002 allows remote user-assisted attackers to execute arbitrary code via a…
-
Unscored —CVE-2007-1750 EPSS 31%
Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via a craf…