Archive
17 July 2007
Vulnerabilities first published on this day (UTC), newest first.
39 results · Feed
-
Unscored —
The password reset feature in the Spam Quarantine HTTP interface for MailMarshal SMTP 6.2.0.x before 6.2.1 allows remot…
-
Unscored —
Heap-based buffer overflow in HydraIRC 0.3.151 allows remote IRC servers to cause a denial of service (application cras…
-
Unscored —CVE-2007-3838 Public exploit
Cross-site scripting (XSS) vulnerability in takeprofedit.php in TBDev.NET DR 11-10-05-BETA-SF1:111005 and earlier allow…
-
Unscored —
Format string vulnerability in HydraIRC 0.3.151 allows remote attackers to cause a denial of service via format string …
-
Unscored —
Buffer overflow in the AOL Instant Messenger (AIM) protocol handler in AIM.DLL in Cerulean Studios Trillian allows remo…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Ex Libris MetaLib 3.13 and 4 allows remote attackers to inject arbitrary we…
-
Unscored —CVE-2007-3840 Public exploit
SQL injection vulnerability in referralUrl.php in Traffic Stats allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in Ex Libris ALEPH allow remote attackers to inject arbitrary web s…
-
Unscored —
Cross-site scripting (XSS) vulnerability in takeprofedit.php in TBDev.NET DR 010306 and earlier allows remote attackers…
-
Unscored —
Unspecified vulnerability in Pidgin (formerly Gaim) 2.0.2 for Linux allows remote authenticated users, who are listed i…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the 8e6 R3000 Enterprise Filter before 2.0.05 allows remote attackers to in…
-
Unscored —
The AOL Instant Messenger (AIM) protocol handler in Cerulean Studios Trillian allows remote attackers to create files w…
-
Unscored —CVE-2007-3826 EPSS 29%
Microsoft Internet Explorer 7 on Windows XP SP2 allows remote attackers to prevent users from leaving a site, spoof the…
-
Unscored —
Multiple stack-based buffer overflows in (a) InterActual Player 2.60.12.0717 and (b) Roxio CinePlayer 3.2 allow remote …
-
Unscored —CVE-2007-3831 Public exploit
PHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows remote attackers to…
-
Unscored —
Unspecified vulnerability in mDNSResponder in Apple Mac OS X allows remote attackers to execute arbitrary code via unsp…
-
Unscored —CVE-2007-3830 Public exploit
Cross-site scripting (XSS) vulnerability in alert.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5 allows rem…
-
Unscored —
Mozilla Firefox allows for cookies to be set with a null domain (aka "domainless cookies"), which allows remote attacke…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the LoginToboggan module 5.x-1.x-dev before 20070712 for Drupal allows remo…
-
Unscored —CVE-2007-3823 EPSS 25%
The Logging Server (Logsrv.exe) in IPSwitch WS_FTP 7.5.29.0 allows remote attackers to cause a denial of service (daemo…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in Webcit before 7.11 allows remote attackers to modify configurations …
-
Unscored —CVE-2007-3822 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Webcit before 7.11 allow remote attackers to inject arbitrary we…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the LoginToboggan module 4.7.x-1.0, 4.7.x-1.x-dev, and 5.x-1.x-dev before 2…
-
Unscored —CVE-2007-3824 Public exploit
SQL injection vulnerability in katgoster.asp in MzK Blog (tr) allows remote attackers to execute arbitrary SQL commands…
-
Unscored —
Opera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whites…
-
Unscored —
konqueror/konq_combo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via…
-
Unscored —
Buffer overflow in pirs32.exe in Poslovni informator Republike Slovenije (PIRS) 2007 allows local users to cause a deni…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in SiteScape Forum before 7.3 allow remote attackers to inject arbi…
-
Unscored —CVE-2007-3017 Public exploit
The WYSIWYG editor applet in activeWeb contentserver CMS before 5.6.2964 only filters malicious tags from articles sent…
-
Unscored —
activeWeb contentserver CMS before 5.6.2964 does not limit the file-creation ability of editors who have restricted acc…
-
High 7.5
JWIG might allow context-dependent attackers to cause a denial of service (service degradation) via loops of references…
-
Unscored —CVE-2007-3814 Public exploit
Multiple SQL injection vulnerabilities in MKPortal 1.1.1 allow remote attackers to execute arbitrary SQL commands via (…
-
Unscored —
PHP remote file inclusion vulnerability in include/user.php in the NoBoard BETA module for MKPortal allows remote attac…
-
Unscored —
The glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service and possibly execute arb…
-
Unscored —CVE-2007-3808 Public exploit
SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2007-3810 Public exploit
SQL injection vulnerability in index.php in Realtor 747 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2007-3809 Public exploit
Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2007-3811 Public exploit
Multiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute arbitrary SQL commands via (1) th…
-
Unscored —CVE-2007-3812 Public exploit
SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL …