Archive
August 2007
Vulnerabilities first published in this month (UTC), newest first.
162 results · Clear filters · Feed
-
Unscored —
Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of serv…
-
Unscored —CVE-2007-4641 Public exploit
Directory traversal vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to include and e…
-
Unscored —
Multiple buffer overflows in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allow remote attackers to execute arbitrary …
-
Unscored —CVE-2007-4639 Public exploit
EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to …
-
Unscored —CVE-2007-4648 Public exploit
The nvcoaft51 driver in Norman Virus Control (NVC) 5.82 uses weak permissions (unrestricted write access) for the NvcOa…
-
Unscored —CVE-2007-4637 Public exploit
xGB.php in xGB 2.0 does not require authentication for an admin edit action, which allows remote attackers to make unsp…
-
Unscored —CVE-2007-4635 Public exploit
Yahoo! Messenger 8.1.0.209 and 8.1.0.402 allows remote attackers to cause a denial of service (application crash) via c…
-
Unscored —CVE-2007-4640 Public exploit
Unrestricted file upload vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to upload a…
-
Unscored —CVE-2007-4638 Public exploit
Blizzard Entertainment StarCraft Brood War 1.15.1 and earlier allows remote attackers to cause a denial of service (app…
-
Unscored —CVE-2007-4649 Public exploit
MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1 use weak permissions (E…
-
Unscored —CVE-2007-4647 Public exploit
newswire/uploadmedia.cgi in 2coolcode Our Space (Ourspace) 2.0.9 allows remote attackers to upload certain files via un…
-
Unscored —CVE-2007-4645 Public exploit
SQL injection vulnerability in index.php in NMDeluxe 2.0.0 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code …
-
Unscored —CVE-2007-4634 Public exploit
Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b…
-
Unscored —
Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo!…
-
Unscored —
Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted re…
-
Unscored —CVE-2007-4628 Public exploit
SQL injection vulnerability in shownews.php in phpns 1.1 allows remote attackers to execute arbitrary SQL commands via …
-
Unscored —CVE-2007-4627 Public exploit
SQL injection vulnerability in index.php in ABC eStore 3.0 allows remote attackers to execute arbitrary SQL commands vi…
-
Unscored —CVE-2007-4630 Public exploit
Cross-site scripting (XSS) vulnerability in xlaapmview.asp in Absolute Poll Manager XE 4.1 allows remote attackers to i…
-
Unscored —CVE-2007-4604 Public exploit
SQL injection vulnerability in viewitem.php in DL PayCart 1.01 allows remote attackers to execute arbitrary SQL command…
-
Unscored —CVE-2007-4602 Public exploit
SQL injection vulnerability in cms/revert-content.php in Implied by Design Micro CMS (Micro-CMS) 3.5 allows remote atta…
-
Unscored —CVE-2007-4605 Public exploit
PHP remote file inclusion vulnerability in convert/mvcw.php in Virtual War (VWar) 1.5.0 R15 and earlier allows remote a…
-
Unscored —CVE-2007-4606 Public exploit
PHP remote file inclusion vulnerability in convert/mvcw_conver.php in the Virtual War (VWar) module for PHPNuke-Clan (P…
-
Unscored —
Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as use…
-
Unscored —CVE-2007-4603 Public exploit
Multiple SQL injection vulnerabilities in index.php in ACG News 1.0 allow remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2007-4611 Public exploit
SQL injection vulnerability in viewevent.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to execute a…
-
Unscored —CVE-2007-4596 Public exploit
The perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent attackers to execute a…
-
Unscored —CVE-2007-4597 Public exploit
SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 RC 6 allows remote attackers to e…
-
Unscored —CVE-2007-4585 Public exploit
Directory traversal vulnerability in activateuser.php in 2532|Gigs 1.2.1 allows remote attackers to include and execute…
-
Unscored —CVE-2007-4586 Public exploit
Multiple buffer overflows in php_iisfunc.dll in the iisfunc extension for PHP 5.2.0 and earlier allow context-dependent…
-
Unscored —CVE-2007-4582 Public exploit
Buffer overflow in the nvUnifiedControl.AUnifiedControl.1 ActiveX control in nvUnifiedControl.dll 1.1.45.0 in ACTi Netw…
-
Unscored —CVE-2007-4581 Public exploit
SQL injection vulnerability in acrotxt.php in WBB2-Addon: Acrotxt 1 allows remote attackers to execute arbitrary SQL co…
-
Unscored —
Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string i…
-
Unscored —CVE-2007-4220 Public exploit
Directory traversal vulnerability in Motorola Timbuktu Pro before 8.6.5 for Windows allows remote attackers to create o…
-
Unscored —CVE-2007-4583 Public exploit
Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in nvUtility.dll 1.0.14.0 i…
-
Unscored —CVE-2006-7222 Public exploit
Buffer overflow in the CFLICStream::_deltachunk function in FLICSource.cpp in Media Player Classic (MPC) 6.4.9.0 allows…
-
Unscored —
clamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to execute arbitrary comman…
-
Unscored —
Multiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault LDAP Server before 2.0…
-
Unscored —CVE-2007-4552 Public exploit
SQL injection vulnerability in index.php in Agares Media Arcadem 2.01 allows remote attackers to execute arbitrary SQL …
-
Unscored —CVE-2007-4551 Public exploit
PHP remote file inclusion vulnerability in index.php in Agares Media Arcadem 2.01 allows remote attackers to execute ar…