Archive
July 2007
Vulnerabilities first published in this month (UTC), newest first.
587 results · Feed
-
Unscored —CVE-2007-3808 Public exploit
SQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2007-3810 Public exploit
SQL injection vulnerability in index.php in Realtor 747 allows remote attackers to execute arbitrary SQL commands via t…
-
Unscored —CVE-2007-3809 Public exploit
Multiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2007-3811 Public exploit
Multiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute arbitrary SQL commands via (1) th…
-
Unscored —CVE-2007-3812 Public exploit
SQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to execute arbitrary SQL …
-
Unscored —
The AntiVirus engine in the HTTP-ALG in Clavister CorePlus before 8.81.00 and 8.80.03 might allow remote attackers to b…
-
Unscored —
Unspecified vulnerability in the Real-time scanner (RTVScan) component in Symantec AntiVirus Corporate Edition 9.0 thro…
-
Unscored —
The IKE implementation in Clavister CorePlus before 8.80.03, and 8.80.00, does not properly validate certificates durin…
-
Unscored —
The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properly parse SMTP commands in certain circum…
-
Critical 9.8
Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute ar…
-
Unscored —CVE-2007-3799 Public exploit
The session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert …
-
Unscored —
The eSoft InstaGate EX2 UTM device does not require entry of the old password when changing the admin password, which m…
-
Unscored —
Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java b…
-
Unscored —CVE-2007-3790 Public exploit
The com_print_typeinfo function in the bz2 extension in PHP 5.2.3 allows context-dependent attackers to cause a denial …
-
Unscored —
The eSoft InstaGate EX2 UTM device stores the admin password within the settings HTML document, which might allow conte…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the Belkin G Plus Router F5D7231-4 with firmware 4.05.03 allows remote atta…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability on the eSoft InstaGate EX2 UTM device before firmware 3.1.20070615 allo…
-
Unscored —CVE-2007-3785 Public exploit
Absolute path traversal vulnerability in a certain ActiveX control in PGPBBox.dll in EldoS SecureBlackbox (sbb) 5.1.0.1…
-
Unscored —CVE-2007-3789 Public exploit
SQL injection vulnerability in admin/index.php in Inmostore 4.0 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2007-3013 Public exploit
SQL injection vulnerability in activeWeb contentserver before 5.6.2964 allows remote authenticated users with edit perm…
-
Unscored —
Buffer overflow in the w_read function in sockets.c in Cami Sardinha and Nigel Kukard policyd before 1.81 for Postfix a…
-
Unscored —
SQL injection vulnerability in Job Management Partner 1/NETM/DM (JP1/NETM/DM) Manager on Windows before 20070413 allows…
-
Unscored —CVE-2007-3792 Public exploit
Multiple PHP remote file inclusion vulnerabilities in AzDG Dating Gold 3.0.5 allow remote attackers to execute arbitrar…
-
Unscored —
Unspecified vulnerability in Hitachi TP1/Server Base before 03-05-/P, 05-00-x before 05-00-/G, 05-01-x before 05-01-/A,…
-
Unscored —CVE-2007-3014 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in activeWeb contentserver before 5.6.2964 allow remote attackers t…
-
Unscored —
Multiple directory traversal vulnerabilities in the G/PGP (GPG) Plugin 2.0, and 2.1dev before 20070614, for Squirrelmai…
-
Unscored —
Integer overflow in the Real-Time Information Server (RIS) Data Collector service (RisDC.exe) in Cisco Unified Communic…
-
Unscored —
The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allow remote authenticated users to execute arbitrary commands …
-
Unscored —
MySQL Community Server before 5.0.45 does not require privileges such as SELECT for the source table in a CREATE TABLE …
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the Email-Template module in Generic YouTube Clone Script allows rem…
-
Unscored —CVE-2007-3780 EPSS 14%
MySQL Community Server before 5.0.45 allows remote attackers to cause a denial of service (daemon crash) via a malforme…
-
Unscored —
MySQL Community Server before 5.0.45 allows remote authenticated users to gain update privileges for a table in another…
-
Unscored —
avg7core.sys 7.5.0.444 in Grisoft AVG Anti-Virus 7.5.448 and Free Edition 7.5.446, provides an internal function that c…
-
Unscored —
Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition before …
-
Unscored —CVE-2007-3103 Public exploit
The init.d script for the X.Org X11 xfs font server on various Linux distributions might allow local users to change th…
-
Unscored —
Cisco Unified Communications Manager (CUCM, formerly CallManager) and Unified Presence Server (CUPS) allow remote attac…
-
Unscored —
Dvbbs 7.1.0 SP1 stores sensitive information under the web root with insufficient access control, which allows remote a…
-
Unscored —
The G/PGP (GPG) Plugin 2.0, and 2.1dev before 20060912, for Squirrelmail allows remote attackers to execute arbitrary c…
-
Unscored —CVE-2007-3772 Public exploit
Directory traversal vulnerability in news/show.php in PsNews 1.1 allows remote attackers to include and execute arbitra…
-
Unscored —
SQL injection vulnerability in default.asp in enVivo!CMS allows remote attackers to execute arbitrary SQL commands via …