Archive
15 July 2007
Vulnerabilities first published on this day (UTC), newest first.
44 results · Feed
-
Unscored —
The eSoft InstaGate EX2 UTM device does not require entry of the old password when changing the admin password, which m…
-
Unscored —
Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java b…
-
Unscored —CVE-2007-3790 Public exploit
The com_print_typeinfo function in the bz2 extension in PHP 5.2.3 allows context-dependent attackers to cause a denial …
-
Unscored —
The eSoft InstaGate EX2 UTM device stores the admin password within the settings HTML document, which might allow conte…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Belkin G Plus Router F5D7231-4 with firmware 4.05.03 allows remote atta…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability on the eSoft InstaGate EX2 UTM device before firmware 3.1.20070615 allo…
-
Unscored —CVE-2007-3785 Public exploit
Absolute path traversal vulnerability in a certain ActiveX control in PGPBBox.dll in EldoS SecureBlackbox (sbb) 5.1.0.1…
-
Unscored —CVE-2007-3789 Public exploit
SQL injection vulnerability in admin/index.php in Inmostore 4.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2007-3013 Public exploit
SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote authenticated users with edit perm…
-
Unscored —
Buffer overflow in the w_read function in sockets.c in Cami Sardinha and Nigel Kukard policyd before 1.81 for Postfix a…
-
Unscored —
SQL injection vulnerability in Job Management Partner 1/NETM/DM (JP1/NETM/DM) Manager on Windows before 20070413 allows…
-
Unscored —CVE-2007-3792 Public exploit
Multiple PHP remote file inclusion vulnerabilities in AzDG Dating Gold 3.0.5 allow remote attackers to execute arbitrar…
-
Unscored —
Unspecified vulnerability in Hitachi TP1/Server Base before 03-05-/P, 05-00-x before 05-00-/G, 05-01-x before 05-01-/A,…
-
Unscored —CVE-2007-3014 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in activeWeb contentserver before 5.6.2964 allow remote attackers t…
-
Unscored —
Multiple directory traversal vulnerabilities in the G/PGP (GPG) Plugin 2.0, and 2.1dev before 20070614, for Squirrelmai…
-
Unscored —
Integer overflow in the Real-Time Information Server (RIS) Data Collector service (RisDC.exe) in Cisco Unified Communic…
-
Unscored —
The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands …
-
Unscored —
MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Email-Template module in Generic YouTube Clone Script allows rem…
-
Unscored —CVE-2007-3780 EPSS 14%
MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malforme…
-
Unscored —
MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another…
-
Unscored —
avg7core.sys 7.5.0.444 in Grisoft AVG Anti-Virus 7.5.448 and Free Edition 7.5.446, provides an internal function that c…
-
Unscored —
Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition before …
-
Unscored —CVE-2007-3103 Public exploit
The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change th…
-
Unscored —
Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allow remote attac…
-
Unscored —
Dvbbs 7.1.0 SP1 stores sensitive information under the web root with insufficient access control, which allows remote a…
-
Unscored —
The G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for Squirrelmail allows remote attackers to execute arbitrary c…
-
Unscored —CVE-2007-3772 Public exploit
Directory traversal vulnerability in news/show.php in PsNews 1.1 allows remote attackers to include and execute arbitra…
-
Unscored —
SQL injection vulnerability in default.asp in enVivo!CMS allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —
Unspecified vulnerability in Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Ser…
-
Unscored —
PHP local file inclusion vulnerability in gpg_pop_init.php in the G/PGP (GPG) Plugin before 20070707 for Squirrelmail a…
-
Unscored —
Off-by-one error in the Certificate Trust List (CTL) Provider service (CTLProvider.exe) in Cisco Unified Communications…
-
Unscored —
The mirror mechanism in SurgeFTP 2.3a1 allows user-assisted, remote FTP servers to cause a denial of service (restart) …
-
Unscored —
Cross-site scripting (XSS) vulnerability in the mirrored server management interface in SurgeFTP 2.3a1 allows user-assi…
-
Unscored —
archive_read_support_format_tar.c in libarchive before 2.2.4 allows user-assisted remote attackers to cause a denial of…
-
Unscored —
The terminal_helper_execute function in terminal/terminal.c in Xfce Terminal 0.2.6 allows user-assisted remote attacker…
-
Unscored —CVE-2007-3673 Public exploit
Symantec symtdi.sys before 7.0.0, as distributed in Symantec AntiVirus Corporate Edition 9 through 10.1 and Client Secu…
-
Unscored —
Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary cod…
-
Unscored —
QuickTime for Java in Apple Quicktime before 7.2 does not perform sufficient "access control," which allows remote atta…
-
Unscored —CVE-2007-2417 EPSS 16%
Heap-based buffer overflow in _mprosrv.exe in Progress Software Progress 9.1E and OpenEdge 10.1x, as used by the RSA Au…