Skip to content
OpenAdvisories

Archive

14 August 2007

Vulnerabilities first published on this day (UTC), newest first.

← July 2007 2007 / August /14 September 2007 →
  1. 112
  2. 2 
  3. 341
  4. 4 
  5. 5 
  6. 6 
  7. 711
  8. 884
  9. 922
  10. 102
  11. 11 
  12. 12 
  13. 1321
  14. 1442
  15. 1524
  16. 1610
  17. 1715
  18. 1835
  19. 19 
  20. 2018
  21. 2129
  22. 2218
  23. 2322
  24. 24 
  25. 2516
  26. 26 
  27. 2715
  28. 2823
  29. 2916
  30. 306
  31. 3147
All Critical High Medium Low Exploited only Public exploit

17 results · Clear filters · Feed

  • Unscored —
    CVE-2007-1749 Public exploit EPSS 42%

    Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in I…

  • Unscored —
    CVE-2007-3386 Public exploit EPSS 59%

    Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5…

  • Medium —
    CVE-2007-3382 Public exploit EPSS 37%

    Apache Tomcat treats single quotes as delimiters in cookies

    Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to cond…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2007-3034 Public exploit EPSS 52%

    Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2,…

  • Unscored —
    CVE-2007-2216 Public exploit EPSS 41%

    The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjects…

  • Unscored —
    CVE-2007-2223 Public exploit EPSS 49%

    Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substring…

  • Unscored —
    CVE-2007-4338 Public exploit

    index.php in Ryan Haudenschilt Family Connections (FCMS) before 0.9 allows remote attackers to access an arbitrary acco…

  • Unscored —
    CVE-2007-4334 Public exploit

    Cross-site scripting (XSS) vulnerability in whois.php in Php-stats 0.1.9.2 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2007-4341 Public exploit

    PHP remote file inclusion vulnerability in adm/my_statistics.php in Omnistar Lib2 PHP 0.2 allows remote attackers to ex…

  • Unscored —
    CVE-2007-4336 Public exploit EPSS 51%

    Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX con…

  • Unscored —
    CVE-2007-4327 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in File Uploader 1.1 allow remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2007-4321 Public exploit

    fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts t…

    fail2ban Debian
  • Unscored —
    CVE-2007-4325 Public exploit

    PHP remote file inclusion vulnerability in index.php in Gaestebuch 1.5 allows remote attackers to execute arbitrary PHP…

  • Unscored —
    CVE-2007-4328 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Mapos Bilder Galerie 1.0 allow remote attackers to execute arbitr…

  • Unscored —
    CVE-2007-4329 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in Web News 1.1 allow remote attackers to execute arbitrary PHP code…

  • Unscored —
    CVE-2007-4320 Public exploit EPSS 72%

    PHP remote file inclusion vulnerability in admin/addons/archive/archive.php in Ncaster 1.7.2 allows remote attackers to…

  • Unscored —
    CVE-2007-4330 Public exploit

    PHP remote file inclusion vulnerability in shoutbox.php in Shoutbox 1.0 allows remote attackers to execute arbitrary PH…