Archive
July 2007
Vulnerabilities first published in this month (UTC), newest first.
202 results · Clear filters · Feed
-
Unscored —CVE-2007-4003 Public exploit
pioout in IBM AIX 5.3 SP6 allows local users to execute arbitrary code by specifying a malicious library with the -R (P…
-
Unscored —CVE-2007-3333 Public exploit
Stack-based buffer overflow in capture in IBM AIX 5.3 SP6 and 5.2.0 allows remote attackers to execute arbitrary code v…
-
Unscored —CVE-2007-4024 Public exploit
Cross-site scripting (XSS) vulnerability in W1L3D4_aramasonuc.asp in W1L3D4 Philboard 0.3 allows remote attackers to in…
-
Unscored —CVE-2007-4022 Public exploit
Cross-site scripting (XSS) vulnerability in frontend/x/htaccess/changepro.html in cPanel 10.9.1 allows remote attackers…
-
Unscored —
Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote a…
-
Unscored —
Stack-based buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 allows remote attackers to execute arbitrary c…
-
Unscored —CVE-2007-4010 Public exploit
The win32std extension in PHP 5.2.3 does not follow safe_mode and disable_functions restrictions, which allows remote a…
-
Unscored —
Buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 has unknown impact and remote attack vectors, aka ZD-00000…
-
Unscored —CVE-2007-4007 Public exploit
PHP remote file inclusion vulnerability in index.php in Article Directory (Article Site Directory) allows remote attack…
-
Unscored —CVE-2007-4009 Public exploit
PHP remote file inclusion vulnerability in admin/business_inc/saveserver.php in SWSoft Confixx Pro 2.0.12 through 3.3.1…
-
Unscored —CVE-2007-4008 Public exploit
Directory traversal vulnerability in custom.php in Entertainment Media Sharing CMS allows remote attackers to include a…
-
Unscored —CVE-2007-3987 Public exploit
SQL injection vulnerability in SearchResults.asp in ImageRacer 1.0, when WordSearchCrit is enabled, allows remote attac…
-
Unscored —CVE-2007-3989 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in default.asp in Dora Emlak 1.0, when the goster parameter is set …
-
Unscored —CVE-2007-3991 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in cv.asp in Asp cvmatik 1.1 and earlier allow remote attackers to …
-
Unscored —CVE-2007-3984 Public exploit
Buffer overflow in a certain ActiveX control in the NixonMyPrograms class in sasatl.dll 1.5.0.531 in Zenturi ProgramChe…
-
Unscored —CVE-2007-3973 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in JBlog 1.0 allow remote attackers to inject arbitrary web script …
-
Unscored —CVE-2007-3979 Public exploit
SQL injection vulnerability in index.php in BlogSite Professional (aka Blog System) 1.x allows remote attackers to exec…
-
Unscored —CVE-2007-3974 Public exploit
admin/ajoutaut.php in JBlog 1.0 does not require authentication, which allows remote attackers to create arbitrary acco…
-
Unscored —CVE-2007-3978 Public exploit
Session fixation vulnerability in bwired allows remote attackers to hijack web sessions by setting the PHPSESSID parame…
-
Unscored —CVE-2007-3977 Public exploit
Cross-site scripting (XSS) vulnerability in bwired allows remote attackers to inject arbitrary web script or HTML via u…
-
Unscored —CVE-2007-3963 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in UseBB 1.0.7, and possibly other 1.0.x versions, allow remote att…
-
Unscored —CVE-2007-3976 Public exploit
SQL injection vulnerability in index.php in bwired allows remote attackers to execute arbitrary SQL commands via the ne…
-
Unscored —CVE-2007-3980 Public exploit
PHP remote file inclusion vulnerability in page.php in RCMS Pro RGameScript Pro allows remote attackers to execute arbi…
-
Unscored —CVE-2007-3982 Public exploit
Absolute path traversal vulnerability in the Data Dynamics ActiveReport (ActiveReports) ActiveX control in actrpt2.dll …
-
Unscored —CVE-2007-3983 Public exploit
Absolute path traversal vulnerability in the Data Dynamics DDActiveReports2.ActiveReport.2 (ActiveReports) ActiveX cont…
-
Unscored —CVE-2007-3981 Public exploit
SQL injection vulnerability in index.php in WSN Links Basic Edition allows remote attackers to execute arbitrary SQL co…
-
Unscored —CVE-2007-3955 Public exploit
Buffer overflow in the IEToolbar.IEContextMenu.1 ActiveX control in LinkedInIEToolbar.dll in the LinkedIn Toolbar 3.0.2…
-
Unscored —CVE-2007-3956 Public exploit
TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which a…
-
Unscored —CVE-2007-3957 Public exploit
Buffer overflow in Nipun Jain xserver 0.1 alpha allows remote attackers to cause a denial of service via a POST request…
-
Unscored —
Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service via a cert…
-
Unscored —
ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolv…
-
Unscored —CVE-2007-3947 Public exploit
request.c in lighttpd 1.4.15 allows remote attackers to cause a denial of service (daemon crash) by sending an HTTP req…
-
Unscored —CVE-2007-3939 Public exploit
SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) CMS 3.4 and earli…
-
Unscored —CVE-2007-3937 Public exploit
Multiple SQL injection vulnerabilities in A-shop 0.70 and earlier allow remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2007-3935 Public exploit
PHP remote file inclusion vulnerability in link_main.php in the SupaNav 1.0.0 module for phpBB allows remote attackers …
-
Unscored —CVE-2007-3932 Public exploit
uploadimg.php in the Expose RC35 and earlier (com_expose) component for Joomla! sends an error message but does not exi…
-
Unscored —
Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote a…
-
Unscored —
Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary …
-
Unscored —CVE-2007-3934 Public exploit
PHP remote file inclusion vulnerability in postscript/postscript.php in BBS E-Market allows remote attackers to execute…
-
Unscored —CVE-2007-3936 Public exploit
Directory traversal vulnerability in admin/filebrowser.asp in A-shop 0.70 and earlier, and possibly 0.71, allows remote…