Archive
July 2007
Vulnerabilities first published in this month (UTC), newest first.
587 results · Feed
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php AlstraSoft E-Friends allows remote attackers to inject arbitrary …
-
Unscored —
Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote atta…
-
Unscored —CVE-2007-4068 Public exploit
Multiple SQL injection vulnerabilities in Webyapar 2.0 allow remote attackers to execute arbitrary SQL commands via (1)…
-
Unscored —CVE-2007-4054 Public exploit
SQL injection vulnerability in category.php in PHP123 Top Sites allows remote attackers to execute arbitrary SQL comman…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to inject arbitrary …
-
Unscored —CVE-2007-4057 Public exploit
Unrestricted file upload vulnerability in pfs.php in Neocrome Seditio 121 and earlier allows remote authenticated users…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.2 allow remote attackers to (1) delet…
-
Unscored —CVE-2007-4055 Public exploit
SQL injection vulnerability in comments_get.asp in SimpleBlog 3.0 allows remote attackers to execute arbitrary SQL comm…
-
Unscored —CVE-2007-4075 Public exploit
Cross-site scripting (XSS) vulnerability in index.asp in Alisveris Sitesi Scripti allows remote attackers to inject arb…
-
Unscored —CVE-2007-4088 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Text Ads Enterprise allow remote attackers to inject …
-
Unscored —CVE-2007-4056 Public exploit
SQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers to execute arbitrary S…
-
Unscored —
Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in EMC VMware 6.0.0 allows…
-
Unscored —
The default configuration of Centre for Speech Technology Research (CSTR) Festival 1.95 beta (aka 2.0 beta) on Gentoo L…
-
Unscored —CVE-2007-4059 Public exploit
Absolute path traversal vulnerability in a certain ActiveX control in IntraProcessLogging.dll 5.5.3.42958 in EMC VMware…
-
Unscored —CVE-2007-4067 Public exploit
Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Inte…
-
Unscored —CVE-2007-4062 Public exploit
The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers t…
-
Unscored —CVE-2007-4053 Public exploit
SQL injection vulnerability in include/img_view.class.php in LinPHA 1.3.1 and earlier allows remote attackers to execut…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in uploader/index.php in Webbler CMS before 3.1.6 allow remote atta…
-
Unscored —CVE-2007-4085 Public exploit
Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands…
-
Unscored —CVE-2007-4089 Public exploit
Vikingboard 0.1.2 allows remote attackers to obtain sensitive information via the debug parameter to (1) forum.php, (2)…
-
Unscored —CVE-2007-4079 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers …
-
Unscored —
Cross-site scripting (XSS) vulnerability in contact_author.php AlstraSoft Article Manager Pro allows remote attackers t…
-
Unscored —
Multiple heap-based buffer overflows in (1) clsscheduler.exe (aka scheduler client) and (2) srvscheduler.exe (aka sched…
-
Unscored —CVE-2007-4052 Public exploit
Cross-site scripting (XSS) vulnerability in utilities/login.asp in nukedit 4.9.7 and earlier allows remote attackers to…
-
Unscored —
Heap-based buffer overflow in the FindFiles function in UltraDefrag 1.0.3 allows local users to gain privileges via a f…
-
Unscored —
Unspecified vulnerability in WebUI in ADempiere Bazaar before 3.3 beta Victoria edition allows remote attackers to acce…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in phpSysInfo 2.5.4-dev and earlier allows remote attackers to in…
-
Unscored —
Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent a…
-
Unscored —
Guidance Software EnCase does not properly handle (1) certain malformed MBR partition tables with many entries, which a…
-
Unscored —CVE-2007-4041 EPSS 20%
Multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and 3.0alpha allow remote attackers to execute a…
-
Unscored —
Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before…
-
Unscored —CVE-2007-4031 Public exploit
Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote atta…
-
Unscored —
Argument injection vulnerability in Mozilla Firefox before 2.0.0.5, when running on systems with Thunderbird 1.5 instal…
-
High 8.8CVE-2007-4040 EPSS 13%
Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, all…
-
Unscored —CVE-2007-4042 EPSS 10%
Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary command…
-
Critical 9.8
file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) before 4.6.3 allows remote attackers to b…
-
Unscored —CVE-2007-4046 Public exploit
SQL injection vulnerability in index.php in the Pony Gallery (com_ponygallery) 1.5 and earlier component for Joomla! al…
-
Unscored —
Guidance Software EnCase allows user-assisted remote attackers to cause a denial of service via (1) a corrupted Microso…
-
Unscored —CVE-2007-4047 Public exploit
geoBlog (aka BitDamaged) 1 does not require authentication for (1) deletecomment.php, (2) deleteblog.php, and (3) listc…