Skip to content
OpenAdvisories

Archive

July 2007

Vulnerabilities first published in this month (UTC), newest first.

← June 2007 2007 / July August 2007 →
  1. 1 
  2. 24
  3. 346
  4. 411
  5. 533
  6. 638
  7. 7 
  8. 8 
  9. 911
  10. 1048
  11. 1139
  12. 1220
  13. 13 
  14. 142
  15. 1544
  16. 166
  17. 1739
  18. 1840
  19. 196
  20. 201
  21. 2122
  22. 22 
  23. 233
  24. 2417
  25. 2538
  26. 2631
  27. 2720
  28. 28 
  29. 29 
  30. 3050
  31. 3118
All Critical High Medium Low Exploited only Public exploit

587 results · Feed

  • Unscored —
    CVE-2007-3526 Public exploit

    Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL co…

  • Unscored —
    CVE-2007-3519 Public exploit

    SQL injection vulnerability in eventdisplay.php in phpEventCalendar 0.2.3 and earlier allows remote attackers to execut…

  • Unscored —
    CVE-2007-3515 Public exploit

    SQL injection vulnerability in view_event.php in TotalCalendar 2.402 and earlier allows remote attackers to execute arb…

  • Unscored —
    CVE-2007-3518 Public exploit

    SQL injection vulnerability in msg.php in HispaH YouTube Clone Script (youtubeclone) allows remote attackers to execute…

  • Unscored —
    CVE-2007-3527

    Integer overflow in Firebird 2.0.0 allows remote authenticated users to cause a denial of service (CPU consumption) via…

  • Unscored —
    CVE-2007-3524 Public exploit EPSS 64%

    Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to …

  • Unscored —
    CVE-2007-3525

    Ripe Website Manager 0.8.9 and earlier allows remote attackers to obtain configuration information via a direct request…

  • Unscored —
    CVE-2007-3516

    Multiple cross-site scripting (XSS) vulnerabilities in kayit.asp in Gorki Online Santrac Sitesi allow remote attackers …

  • Unscored —
    CVE-2007-3523 Public exploit

    Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and ex…

  • Unscored —
    CVE-2007-3520 Public exploit

    SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbitrary SQL…

  • Unscored —
    CVE-2007-3522 Public exploit EPSS 66%

    Multiple PHP remote file inclusion vulnerabilities in sPHPell 1.01 allow remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2007-3530 Public exploit

    PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain…

  • Unscored —
    CVE-2007-3521 Public exploit

    SQL injection vulnerability in ArcadeBuilder Game Portal Manager 1.7 allows remote attackers to execute arbitrary SQL c…

  • Unscored —
    CVE-2007-3517 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.3 allow remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2007-3529 Public exploit

    videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empty value o…

  • Unscored —
    CVE-2007-3528

    The blowfish mode in DAR before 2.3.4 uses weak Blowfish-CBC cryptography by (1) discarding random bits by the blowfish…

    dar Debian
  • Unscored —
    CVE-2007-2837

    The (1) getRule and (2) getChains functions in server/rules.cpp in fireflierd (fireflier-server) in FireFlier 1.1.6 all…

  • Unscored —
    CVE-2007-3513

    The lcd_write function in drivers/usb/misc/usblcd.c in the Linux kernel before 2.6.22-rc7 does not limit the amount of …

  • Unscored —
    CVE-2007-3512

    Stack-based buffer overflow in Lhaca File Archiver before 1.22 allows user-assisted remote attackers to execute arbitra…

  • Unscored —
    CVE-2007-3514

    Cross-domain vulnerability in Apple Safari for Windows 3.0.2 allows remote attackers to bypass the Same Origin Policy a…

  • Unscored —
    CVE-2007-3511

    The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and …

  • Unscored —
    CVE-2007-2835

    Multiple stack-based buffer overflows in (1) CCE_pinyin.c and (2) xl_pinyin.c in ImmModules/cce/ in unicon-imc2 3.0.4, …

    unicon Debian
  • Unscored —
    CVE-2007-2838

    The populate_conns function in src/populate_conns.c in GSAMBAD 0.1.4 allows local users to overwrite arbitrary files vi…

  • Unscored —
    CVE-2007-3507

    Stack-based buffer overflow in the local__vcentry_parse_value function in vorbiscomment.c in flac123 (aka flac-tools or…

  • Unscored —
    CVE-2007-3505 Public exploit

    Multiple directory traversal vulnerabilities in QuickTalk forum 1.3 allow remote attackers to include and execute arbit…

  • Unscored —
    CVE-2007-3506

    The ft_bitmap_assure_buffer function in src/base/ftbimap.c in FreeType 2.3.3 allows context-dependent attackers to caus…

    freetype Debian
  • Unscored —
    CVE-2007-2836

    Directory traversal vulnerability in session.rb in Hiki 0.8.0 through 0.8.6 allows remote attackers to delete arbitrary…

    hiki Debian