Skip to content
OpenAdvisories

Archive

25 July 2007

Vulnerabilities first published on this day (UTC), newest first.

← June 2007 2007 / July /25 August 2007 →
  1. 1 
  2. 24
  3. 346
  4. 411
  5. 533
  6. 638
  7. 7 
  8. 8 
  9. 911
  10. 1048
  11. 1139
  12. 1220
  13. 13 
  14. 142
  15. 1544
  16. 166
  17. 1739
  18. 1840
  19. 196
  20. 201
  21. 2122
  22. 22 
  23. 233
  24. 2417
  25. 2538
  26. 2631
  27. 2720
  28. 28 
  29. 29 
  30. 3050
  31. 3118
All Critical High Medium Low Exploited only Public exploit

38 results · Feed

  • Unscored —
    CVE-2007-3985

    Directory traversal vulnerability in file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) 4.6.…

  • Unscored —
    CVE-2007-3990

    SQL injection vulnerability in default.asp in Dora Emlak 1.0, when the goster parameter is set to emlakdetay, allows re…

  • Unscored —
    CVE-2007-3986

    file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) 4.6.3 allows remote attackers to bypass a…

  • Unscored —
    CVE-2007-3988

    Session fixation vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier allows remote attackers to …

  • Unscored —
    CVE-2007-3992

    SQL injection vulnerability in vir_login.asp in iExpress Property Pro allows remote attackers to execute arbitrary SQL …

  • Unscored —
    CVE-2007-3987 Public exploit

    SQL injection vulnerability in SearchResults.asp in ImageRacer 1.0, when WordSearchCrit is enabled, allows remote attac…

  • Unscored —
    CVE-2007-3989 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in default.asp in Dora Emlak 1.0, when the goster parameter is set …

  • Unscored —
    CVE-2007-3991 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in cv.asp in Asp cvmatik 1.1 and earlier allow remote attackers to …

  • Unscored —
    CVE-2007-3993

    Unspecified vulnerability in the attachment filter in Kerio MailServer before 6.4.1 has unknown impact and remote attac…

  • High 7.5
    CVE-2006-7221

    Multiple off-by-one errors in fsplib.c in fsplib before 0.8 allow attackers to cause a denial of service via unspecifie…

    gftp Debian
  • Unscored —
    CVE-2007-3984 Public exploit

    Buffer overflow in a certain ActiveX control in the NixonMyPrograms class in sasatl.dll 1.5.0.531 in Zenturi ProgramChe…

  • Unscored —
    CVE-2007-3973 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in JBlog 1.0 allow remote attackers to inject arbitrary web script …

  • Unscored —
    CVE-2007-3531

    The set_default_speeds function in backend/backend.c in NVidia NVClock before 0.8b2 allows local users to overwrite arb…

  • Unscored —
    CVE-2007-3979 Public exploit

    SQL injection vulnerability in index.php in BlogSite Professional (aka Blog System) 1.x allows remote attackers to exec…

  • Unscored —
    CVE-2007-3974 Public exploit

    admin/ajoutaut.php in JBlog 1.0 does not require authentication, which allows remote attackers to create arbitrary acco…

  • Unscored —
    CVE-2007-3969

    Buffer overflow in Panda Antivirus before 20070720 allows remote attackers to execute arbitrary code via a crafted EXE …

  • Medium —
    CVE-2007-3383

    Apache Tomcat SendMailServlet XSS

    Cross-site scripting (XSS) vulnerability in SendMailServlet in the examples web application (examples/jsp/mail/sendmail.jsp) in Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.36 allows remote attackers to inject arbitrary web script or HTML via the F…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2007-3961

    Off-by-one error in the fsp_readdir_r function in fsplib.c in fsplib before 0.9 allows remote attackers to cause a deni…

  • Unscored —
    CVE-2007-3964

    Itaka before 0.2.1, when using Authentication mode, allows remote attackers to bypass authentication and obtain sensiti…

  • Unscored —
    CVE-2007-3978 Public exploit

    Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parame…

  • Unscored —
    CVE-2007-3026

    Integer overflow in Panda Software AdminSecure allows remote attackers to execute arbitrary code via crafted packets wi…

  • Unscored —
    CVE-2007-3971

    Integer overflow in ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service (CPU and di…

  • Unscored —
    CVE-2007-3972

    ESET NOD32 Antivirus before 2.2289 allows remote attackers to cause a denial of service via a crafted (1) ASPACK or (2)…

  • Unscored —
    CVE-2007-3977 Public exploit

    Cross-site scripting (XSS) vulnerability in bwired allows remote attackers to inject arbitrary web script or HTML via u…

  • Unscored —
    CVE-2007-3679

    The Citrix EPA ActiveX control (aka the "endpoint checking control" or CCAOControl Object) before 4.5.0.0 in npCtxCAO.d…

  • Unscored —
    CVE-2007-3963 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote att…

  • Unscored —
    CVE-2007-3976 Public exploit

    SQL injection vulnerability in index.php in bwired allows remote attackers to execute arbitrary SQL commands via the ne…

  • Unscored —
    CVE-2007-3970

    Race condition in ESET NOD32 Antivirus before 2.2289 allows remote attackers to execute arbitrary code via a crafted CA…

  • Unscored —
    CVE-2007-3965

    Unspecified vulnerability in uFMOD before 1.2.5 has unknown impact and attack vectors, possibly related to malformed fi…

  • Unscored —
    CVE-2007-3980 Public exploit

    PHP remote file inclusion vulnerability in page.php in RCMS Pro RGameScript Pro allows remote attackers to execute arbi…

  • Unscored —
    CVE-2007-3962

    Multiple stack-based buffer overflows in fsplib.c in fsplib before 0.9 might allow remote attackers to execute arbitrar…

  • Unscored —
    CVE-2007-3966

    SQL injection vulnerability in Munch Pro allows remote attackers to execute arbitrary SQL commands via the login field …

  • Unscored —
    CVE-2007-3975

    Cross-site scripting (XSS) vulnerability in index.php in Elite Forum 1.0.0.0 allows remote attackers to inject arbitrar…

  • Medium 5.3
    CVE-2007-3968

    index.php in dirLIST before 0.1.1 allows remote attackers to list the contents of an excluded folder via a modified URL…

  • Unscored —
    CVE-2007-3982 Public exploit

    Absolute path traversal vulnerability in the Data Dynamics ActiveReport (ActiveReports) ActiveX control in actrpt2.dll …

  • Unscored —
    CVE-2007-3983 Public exploit

    Absolute path traversal vulnerability in the Data Dynamics DDActiveReports2.ActiveReport.2 (ActiveReports) ActiveX cont…

  • Unscored —
    CVE-2007-3981 Public exploit

    SQL injection vulnerability in index.php in WSN Links Basic Edition allows remote attackers to execute arbitrary SQL co…

  • High 7.5
    CVE-2007-3967

    Directory traversal vulnerability in index.php in PHP Directory Lister (dirLIST) before 0.1.1 allows remote attackers t…