Skip to content
OpenAdvisories

Archive

5 July 2007

Vulnerabilities first published on this day (UTC), newest first.

← June 2007 2007 / July /5 August 2007 →
  1. 1 
  2. 24
  3. 346
  4. 411
  5. 533
  6. 638
  7. 7 
  8. 8 
  9. 911
  10. 1048
  11. 1139
  12. 1220
  13. 13 
  14. 142
  15. 1544
  16. 166
  17. 1739
  18. 1840
  19. 196
  20. 201
  21. 2122
  22. 22 
  23. 233
  24. 2417
  25. 2538
  26. 2631
  27. 2720
  28. 28 
  29. 29 
  30. 3050
  31. 3118
All Critical High Medium Low Exploited only Public exploit

33 results · Feed

  • Unscored —
    CVE-2007-3590 Public exploit

    Cross-site scripting (XSS) vulnerability in visitenkarte.php in b1gBB 2.24.0 allows remote attackers to inject arbitrar…

  • Unscored —
    CVE-2007-3589 Public exploit

    Multiple SQL injection vulnerabilities in b1gbb 2.24.0 allow remote attackers to execute arbitrary SQL commands via the…

  • Unscored —
    CVE-2007-2839 Public exploit

    gfax 0.4.2 and probably other versions creates temporary files insecurely, which allows local users to execute arbitrar…

  • Unscored —
    CVE-2004-2681

    PeerSec MatrixSSL before 1.1 caches session keys for an indefinitely long time, which might make it easier for remote a…

  • Unscored —
    CVE-2004-2682

    PeerSec MatrixSSL before 1.1 does not implement RSA blinding, which allows context-dependent attackers to obtain the se…

  • Unscored —
    CVE-2006-7216

    Apache Derby before 10.2.1.6 does not determine privilege requirements for lock table statements at compilation time, a…

  • Medium —
    CVE-2006-7217

    Apache Derby SQL Injection

    Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote authenticated users to execute arbitrary drop schema statements in SQL authorization mode.

    org.apache.derby:derby Maven
  • Medium —
    CVE-2005-4849

    Apache Derby exposes user and password attributes

    Apache Derby before 10.1.2.1 exposes the (1) user and (2) password attributes in cleartext via (a) the RDBNAM parameter of the ACCSEC command and (b) the output of the DatabaseMetaData.getURL function, which allows context-dependent attackers to obtain sensit…

    org.apache.derby:derby Maven
  • Unscored —
    CVE-2007-3576 EPSS 13%

    Microsoft Internet Explorer 6 executes web script from URIs of arbitrary scheme names ending with the "script" characte…

  • Unscored —
    CVE-2007-3572 Public exploit

    Incomplete blacklist vulnerability in cgi-bin/runDiagnostics.cgi in the web interface on the Yoggie Pico and Pico Pro a…

  • Unscored —
    CVE-2007-3581

    The Jedox Palo 1.5 client transmits the password in cleartext, which might allow remote attackers to obtain the passwor…

  • Unscored —
    CVE-2007-3575

    SQL injection vulnerability in includes/functions in FreeDomain.co.nr Clone allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2007-3579

    PHPIDS before 20070703 does not properly handle setting the .text property of a SCRIPT element before its attachment to…

  • Unscored —
    CVE-2007-3585 Public exploit

    PHP remote file inclusion vulnerability in games.php in MyCMS 0.9.8 and earlier allows remote attackers to execute arbi…

  • Unscored —
    CVE-2007-3583 Public exploit

    SQL injection vulnerability in details_news.php in Girlserv ads 1.5 and earlier allows remote attackers to execute arbi…

  • Unscored —
    CVE-2007-3578

    PHPIDS before 20070703 does not properly handle (1) arithmetic expressions and (2) unclosed comments, which allows remo…

  • Unscored —
    CVE-2007-3580

    PHPIDS does not properly handle certain code containing newlines, as demonstrated by a try/catch block within a loop, w…

  • Unscored —
    CVE-2007-3574 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in setup.cgi on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway w…

  • Unscored —
    CVE-2007-3573

    Multiple SQL injection vulnerabilities in akocomment allow remote attackers to execute arbitrary SQL commands via the (…

  • Unscored —
    CVE-2007-3584 Public exploit

    SQL injection vulnerability in viewforum.php in PNphpBB2 1.2i and earlier for Postnuke allows remote attackers to execu…

  • Unscored —
    CVE-2007-3588

    SQL injection vulnerability in reply.php in VBZooM 1.12 allows remote attackers to execute arbitrary SQL commands via t…

  • Unscored —
    CVE-2007-3587 Public exploit

    MyCMS 0.9.8 and earlier allows remote attackers to gain privileges via the admin cookie parameter, as demonstrated by a…

  • Unscored —
    CVE-2007-3586 Public exploit

    Multiple direct static code injection vulnerabilities in MyCMS 0.9.8 and earlier allow remote attackers to inject arbit…

  • Unscored —
    CVE-2007-3577

    PHPIDS before 20070703 does not properly handle use of the substr method in (1) document.location.search and (2) docume…

  • Unscored —
    CVE-2007-3582 Public exploit

    SQL injection vulnerability in index.php in SuperCali PHP Event Calendar 0.4.0 allows remote attackers to execute arbit…

  • Unscored —
    CVE-1999-1591 EPSS 11%

    Microsoft Internet Information Services (IIS) server 4.0 SP4, without certain hotfixes released for SP4, does not requi…

  • Unscored —
    CVE-2007-3567

    MySQLDumper 1.21b through 1.23 REV227 uses a "Limit GET" statement in the .htaccess authentication mechanism, which all…

  • Unscored —
    CVE-2007-3570

    The Linux Access Gateway in Novell Access Manager before 3.0 SP1 Release Candidate 1 (RC1) allows remote attackers to b…

  • Unscored —
    CVE-2007-3569 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Oliver Library Management System allow remote attackers to injec…

  • Unscored —
    CVE-2007-3568

    The _LoadBMP function in imlib 1.9.15 and earlier allows context-dependent attackers to cause a denial of service (infi…

  • Unscored —
    CVE-2007-3571

    The Apache Web Server as used in Novell NetWare 6.5 and GroupWise allows remote attackers to obtain sensitive informati…

  • Unscored —
    CVE-2007-3011 Public exploit

    The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote …

  • Unscored —
    CVE-2007-3012

    The web interface in Fujitsu-Siemens Computers PRIMERGY BX300 Switch Blade allows remote attackers to obtain sensitive …