Skip to content
OpenAdvisories

Archive

July 2007

Vulnerabilities first published in this month (UTC), newest first.

← June 2007 2007 / July August 2007 →
  1. 1 
  2. 24
  3. 346
  4. 411
  5. 533
  6. 638
  7. 7 
  8. 8 
  9. 911
  10. 1048
  11. 1139
  12. 1220
  13. 13 
  14. 142
  15. 1544
  16. 166
  17. 1739
  18. 1840
  19. 196
  20. 201
  21. 2122
  22. 22 
  23. 233
  24. 2417
  25. 2538
  26. 2631
  27. 2720
  28. 28 
  29. 29 
  30. 3050
  31. 3118
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium —
    CVE-2007-3383

    Apache Tomcat SendMailServlet XSS

    Cross-site scripting (XSS) vulnerability in SendMailServlet in the examples web application (examples/jsp/mail/sendmail.jsp) in Apache Tomcat 4.0.0 through 4.0.6 and 4.1.0 through 4.1.36 allows remote attackers to inject arbitrary web script or HTML via the F…

    org.apache.tomcat:tomcat Maven
  • Medium 5.3
    CVE-2007-3968

    index.php in dirLIST before 0.1.1 allows remote attackers to list the contents of an excluded folder via a modified URL…

  • Medium —
    CVE-2006-7217

    Apache Derby SQL Injection

    Apache Derby before 10.2.1.6 does not determine schema privilege requirements during the DropSchemaNode bind phase, which allows remote authenticated users to execute arbitrary drop schema statements in SQL authorization mode.

    org.apache.derby:derby Maven
  • Medium —
    CVE-2005-4849

    Apache Derby exposes user and password attributes

    Apache Derby before 10.1.2.1 exposes the (1) user and (2) password attributes in cleartext via (a) the RDBNAM parameter of the ACCSEC command and (b) the output of the DatabaseMetaData.getURL function, which allows context-dependent attackers to obtain sensit…

    org.apache.derby:derby Maven