Archive
July 2007
Vulnerabilities first published in this month (UTC), newest first.
202 results · Clear filters · Feed
-
Unscored —
Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to e…
-
Unscored —CVE-2007-3725 Public exploit
The RAR VM (unrarvm.c) in Clam Antivirus (ClamAV) before 0.91 allows user-assisted remote attackers to cause a denial o…
-
Unscored —CVE-2007-3693 Public exploit
Cross-site scripting (XSS) vulnerability in Gobi as of 20070711, built on Helma, allows remote attackers to inject arbi…
-
Unscored —CVE-2007-3714 Public exploit
Directory traversal vulnerability in Ada Image Server (ImgSvr) 0.6.5 allows remote attackers to read arbitrary files vi…
-
Unscored —CVE-2007-3703 Public exploit
Stack-based buffer overflow in a certain ActiveX control in sasatl.dll 1.5.0.531 in Zenturi Program Checker (ProgramChe…
-
Unscored —CVE-2007-3702 Public exploit
Directory traversal vulnerability in the load function in cgi-bin/mail/mailmachine.cgi in Mail Machine 3.989 and earlie…
-
Unscored —CVE-2007-3701 Public exploit
TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which …
-
Unscored —
PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to ex…
-
Unscored —CVE-2007-3682 Public exploit
SQL injection vulnerability in index.php in OpenLD 1.2.2 and earlier allows remote attackers to execute arbitrary SQL c…
-
Unscored —CVE-2007-3687 Public exploit
SQL injection vulnerability in inferno.php in the Inferno Technologies RPG Inferno 2.4 and earlier, a vBulletin module,…
-
Unscored —CVE-2007-3681 Public exploit
The IOCTL 9031 (BIOCGSTATS) handler in the NPF.SYS device driver in WinPcap before 4.0.1 allows local users to overwrit…
-
Unscored —CVE-2007-3683 Public exploit
SQL injection vulnerability in pagetopic.php in Aigaion 1.3.3 and earlier allows remote attackers to execute arbitrary …
-
Unscored —
Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via …
-
Unscored —
Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and…
-
Unscored —
Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and …
-
Unscored —
Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and cer…
-
Unscored —CVE-2007-3649 Public exploit
Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard (HP) Di…
-
Unscored —CVE-2007-3646 Public exploit
SQL injection vulnerability in index.php in FlashGameScript 1.7 and earlier allows remote attackers to execute arbitrar…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in LimeSurvey (aka PHPSurveyor) 1.49RC2 allow remote attackers to ex…
-
Unscored —CVE-2007-3631 Public exploit
SQL injection vulnerability in index.php in GameSiteScript (gss) 3.1 and earlier allows remote attackers to execute arb…
-
Unscored —CVE-2007-3630 Public exploit
changePW.php in AV Tutorial Script (avtutorial) 1.0 does not require authentication or knowledge of an old password for…
-
Unscored —CVE-2007-3638 Public exploit
Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users, who are listed in an address b…
-
Unscored —CVE-2007-3633 Public exploit
Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 a…
-
Unscored —CVE-2007-3636 Public exploit
Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin 2.1 for Squirrelmail allow remote attackers to execute a…
-
Unscored —CVE-2007-3619 Public exploit
Directory traversal vulnerability in login.php in Maia Mailguard 1.0.2 and earlier allows remote attackers to read arbi…
-
Unscored —
Heap-based buffer overflow in the Message HTTP Server in SAP Message Server allows remote attackers to execute arbitrar…
-
Unscored —CVE-2007-3627 Public exploit
Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL…
-
Unscored —CVE-2007-3629 Public exploit
SQL injection vulnerability in oku.asp in Levent Veysi Portal 1.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2007-3621 Public exploit
Multiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote attackers to inject a…
-
Unscored —CVE-2007-3613 Public exploit
Cross-site scripting (XSS) vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service (IGS) allows remote attacke…
-
Unscored —CVE-2007-3609 Public exploit
Multiple SQL injection vulnerabilities in eMeeting Online Dating Software 5.2 allow remote attackers to execute arbitra…
-
Unscored —CVE-2007-3612 Public exploit
Stack-based buffer overflow in Visual IRC (ViRC) 2.0 allows remote IRC servers to execute arbitrary code via a long res…
-
Unscored —CVE-2007-3606 Public exploit
Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI, on systems using ASC…
-
Unscored —CVE-2007-3610 Public exploit
SQL injection vulnerability in categories_type.php in phpVID 0.9.9 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2007-3607 Public exploit
Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a deni…
-
Unscored —CVE-2007-3611 Public exploit
admin.php in VRNews 1.1.1, and possibly other 1.x versions, does not require authentication, which allows remote attack…
-
Unscored —CVE-2007-3608 Public exploit
Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to create certa…
-
Unscored —
Stack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui\kwedit.dll in the EnjoySAP…
-
Unscored —
Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 through 7.5, al…
-
Unscored —CVE-2007-3594 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in AdventNet ManageEngine OpManager 6 and 7 allow remote attackers …