Archive
July 2007
Vulnerabilities first published in this month (UTC), newest first.
587 results · Feed
-
Unscored —CVE-2007-3630 Public exploit
changePW.php in AV Tutorial Script (avtutorial) 1.0 does not require authentication or knowledge of an old password for…
-
Unscored —CVE-2007-3638 Public exploit
Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users, who are listed in an address b…
-
Unscored —CVE-2007-3633 Public exploit
Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 a…
-
Unscored —CVE-2007-3636 Public exploit
Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin 2.1 for Squirrelmail allow remote attackers to execute a…
-
Unscored —CVE-2007-3619 Public exploit
Directory traversal vulnerability in login.php in Maia Mailguard 1.0.2 and earlier allows remote attackers to read arbi…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Hitachi JP1/HiCommand Device Manager, Tiered Storage Manager, Replicati…
-
Unscored —
Heap-based buffer overflow in the Message HTTP Server in SAP Message Server allows remote attackers to execute arbitrar…
-
Unscored —
The Program Neighborhood Agent in Citrix Presentation Server Clients for 32-bit Windows before 10.100 allows remote att…
-
Unscored —CVE-2007-3627 Public exploit
Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL…
-
Unscored —
Multiple directory traversal vulnerabilities in Maia Mailguard 1.0.2 and earlier might allow remote attackers to read a…
-
Unscored —
Unspecified vulnerability in DomainPOP in Alt-N Technologies MDaemon before 9.61 allows remote attackers to cause a den…
-
Unscored —
Unspecified vulnerability in the fetch function in MDB2.php in PEAR Structures-DataGrid-DataSource-MDB2 0.1.9 and earli…
-
Unscored —
Unspecified vulnerability in the ADM daemon in Hitachi TPBroker before 20070706 allows remote attackers to cause a deni…
-
Unscored —CVE-2007-3629 Public exploit
SQL injection vulnerability in oku.asp in Levent Veysi Portal 1.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2007-3621 Public exploit
Multiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote attackers to inject a…
-
Unscored —
eZ publish before 3.8.5 does not properly enforce permissions for editing in a specific language, which allows remote a…
-
Unscored —
eZ publish before 3.8.1 does not properly enforce permissions for "content edit Language" when there are four or more l…
-
Unscored —
The admin interface in eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051110 does no…
-
Unscored —
eZ publish 3.5 through 3.7 before 20050830 does not use a folder's read permissions to restrict notifications, which al…
-
Unscored —
Unrestricted file upload vulnerability in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, and 3.8 b…
-
Unscored —
eZ publish 3.4.4 through 3.7 before 20050722 applies certain permissions on the node level, which allows remote authent…
-
Unscored —
The default configuration of the forum package in eZ publish 3.5 before 3.5.5, 3.6 before 3.6.2, 3.7 before 3.7.0rc2, a…
-
Unscored —
eZ publish 3.5 before 3.5.7, 3.6 before 3.6.5, 3.7 before 3.7.3, and 3.8 before 20051128 allows remote authenticated us…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in mimic2.cgi in mimicboard2 (Mimic2) 086 and earlier allow remote …
-
Unscored —
mimicboard2 (Mimic2) 086 and earlier stores sensitive information under the web root with insufficient access control, …
-
Unscored —
eZ publish 3.5 through 3.7 before 20050608 requires both edit and create permissions in order to submit data, which all…
-
Unscored —
The siteaccess URIMatching implementation in eZ publish 3.5 through 3.8 before 20050812 converts all non-alphanumeric c…
-
Unscored —CVE-2007-3613 Public exploit
Cross-site scripting (XSS) vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service (IGS) allows remote attacke…
-
Unscored —
The report module in vtiger CRM before 5.0.3 does not properly apply security rules, which allows remote authenticated …
-
Unscored —CVE-2007-3609 Public exploit
Multiple SQL injection vulnerabilities in eMeeting Online Dating Software 5.2 allow remote attackers to execute arbitra…
-
Unscored —CVE-2007-3612 Public exploit
Stack-based buffer overflow in Visual IRC (ViRC) 2.0 allows remote IRC servers to execute arbitrary code via a long res…
-
Unscored —CVE-2007-3606 Public exploit
Heap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI, on systems using ASC…
-
Unscored —
The SOAP webservice in vtiger CRM before 5.0.3 does not ensure that authenticated accounts are active, which allows rem…
-
Unscored —
vtiger CRM before 5.0.3 allows remote authenticated users to import and export the information for a contact even when …
-
Unscored —CVE-2007-3610 Public exploit
SQL injection vulnerability in categories_type.php in phpVID 0.9.9 allows remote attackers to execute arbitrary SQL com…
-
Unscored —
WordPlugin in the wordintegration component in vtiger CRM before 5.0.3 allows remote authenticated users to bypass fiel…
-
Unscored —
SQL injection vulnerability in the dashboard (include/utils/SearchUtils.php) in vtiger CRM before 5.0.3 allows remote a…
-
Unscored —CVE-2007-3607 Public exploit
Multiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote attackers to cause a deni…
-
Unscored —CVE-2007-3611 Public exploit
admin.php in VRNews 1.1.1, and possibly other 1.x versions, does not require authentication, which allows remote attack…
-
Unscored —
vtiger CRM before 5.0.3, when a migrated build is used, allows remote authenticated users to read certain other users' …