Skip to content
OpenAdvisories

Archive

August 2007

Vulnerabilities first published in this month (UTC), newest first.

← July 2007 2007 / August September 2007 →
  1. 112
  2. 2 
  3. 341
  4. 4 
  5. 5 
  6. 6 
  7. 711
  8. 884
  9. 922
  10. 102
  11. 11 
  12. 12 
  13. 1321
  14. 1442
  15. 1524
  16. 1610
  17. 1715
  18. 1835
  19. 19 
  20. 2018
  21. 2129
  22. 2218
  23. 2322
  24. 24 
  25. 2516
  26. 26 
  27. 2715
  28. 2823
  29. 2916
  30. 306
  31. 3147
All Critical High Medium Low Exploited only Public exploit

529 results · Feed

  • Unscored —
    CVE-2007-4361

    NETGEAR (formerly Infrant) ReadyNAS RAIDiator before 4.00b2-p2-T1 beta creates a default SSH root password derived from…

  • Unscored —
    CVE-2007-4358 Public exploit

    Zoidcom 0.6.7 and earlier allows remote attackers to cause a denial of service (application crash) via a JOIN packet (a…

  • Unscored —
    CVE-2007-4363

    Multiple cross-site scripting (XSS) vulnerabilities in the nodereference module in Drupal Content Construction Kit (CCK…

  • Unscored —
    CVE-2007-4359 Public exploit

    Multiple SQL injection vulnerabilities in SkilMatch Staffing Systems JobLister3 allow remote attackers to execute arbit…

  • Unscored —
    CVE-2007-4362 Public exploit

    SQL injection vulnerability in category.php in Prozilla Webring allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2007-4364

    Fedora Commons before 2.2.1 does not properly handle certain authentication requests involving Java Naming and Director…

  • Unscored —
    CVE-2007-2240

    The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibl…

  • Unscored —
    CVE-2007-2929

    The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibl…

  • Unscored —
    CVE-2007-2928

    Format string vulnerability in the IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller…

  • Unscored —
    CVE-2007-4357

    Mozilla Firefox 2.0.0.6 and earlier allows remote attackers to spoof the contents of the status bar via a link to a dat…

  • Unscored —
    CVE-2007-4355

    Buffer overflow in the at program on IBM AIX 5.3 allows local users to gain privileges via unspecified vectors.

  • Unscored —
    CVE-2007-4354

    Buffer overflow in fileplace in bos.perf.tools in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspeci…

  • Unscored —
    CVE-2007-4356

    Microsoft Internet Explorer 6 and 7 embeds FTP credentials in HTML files that are retrieved during an FTP session, whic…

  • Unscored —
    CVE-2007-4353

    Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unsp…

  • Unscored —
    CVE-2007-0948 EPSS 12%

    Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, …

  • Unscored —
    CVE-2007-1749 Public exploit EPSS 42%

    Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in I…

  • Unscored —
    CVE-2007-3891 EPSS 25%

    Unspecified vulnerability in Windows Vista Weather Gadgets in Windows Vista allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2007-3386 Public exploit EPSS 59%

    Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5…

  • Medium —
    CVE-2007-3385 EPSS 17%

    Apache Tomcat Mishandles Character Sequence in Cookies

    Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attacke…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2007-3032 EPSS 25%

    Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to ex…

  • Unscored —
    CVE-2007-3033 EPSS 28%

    Cross-site scripting (XSS) vulnerability in Windows Vista Feed Headlines Gadget (aka Sidebar RSS Feeds Gadget) in Windo…

  • Medium —
    CVE-2007-3382 Public exploit EPSS 37%

    Apache Tomcat treats single quotes as delimiters in cookies

    Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies, which might cause sensitive information such as session IDs to be leaked and allow remote attackers to cond…

    org.apache.tomcat:tomcat Maven
  • Unscored —
    CVE-2007-0943 EPSS 27%

    Unspecified vulnerability in Internet Explorer 5.01 and 6 SP1 allows remote attackers to execute arbitrary code via cra…

  • Unscored —
    CVE-2007-3037 EPSS 22%

    Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WM…

  • Unscored —
    CVE-2007-3041 EPSS 29%

    Unspecified vulnerability in the pdwizard.ocx ActiveX object for Internet Explorer 5.01, 6 SP1, and 7 allows remote att…

  • Unscored —
    CVE-2007-3890 EPSS 29%

    Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to …

  • Unscored —
    CVE-2007-3034 Public exploit EPSS 52%

    Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2,…

  • Unscored —
    CVE-2007-3035 EPSS 25%

    Unspecified vulnerability in Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2007-2224 EPSS 35%

    Object linking and embedding (OLE) Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, …

  • Unscored —
    CVE-2007-2216 Public exploit EPSS 41%

    The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjects…

  • Unscored —
    CVE-2007-2223 Public exploit EPSS 49%

    Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substring…

  • Unscored —
    CVE-2007-4332

    SQL injection vulnerability in article.php in Article Dashboard, when magic_quotes_gpc is disabled, allows remote attac…

  • Unscored —
    CVE-2007-4338 Public exploit

    index.php in Ryan Haudenschilt Family Connections (FCMS) before 0.9 allows remote attackers to access an arbitrary acco…

  • Unscored —
    CVE-2007-4334 Public exploit

    Cross-site scripting (XSS) vulnerability in whois.php in Php-stats 0.1.9.2 allows remote attackers to inject arbitrary …

  • Unscored —
    CVE-2007-4335

    Format string vulnerability in the SMTP server component in Qbik WinGate 5.x and 6.x before 6.2.2 allows remote attacke…

  • Unscored —
    CVE-2007-4333

    Multiple cross-site scripting (XSS) vulnerabilities in signup.php in Article Dashboard allow remote attackers to inject…

  • Unscored —
    CVE-2007-4342

    PHP remote file inclusion vulnerability in include.php in PHPCentral Login 1.0 allows remote attackers to execute arbit…

  • Unscored —
    CVE-2007-4340

    PHP remote file inclusion vulnerability in index.php in phpDVD 1.0.4 allows remote attackers to execute arbitrary PHP c…

  • Unscored —
    CVE-2007-4341 Public exploit

    PHP remote file inclusion vulnerability in adm/my_statistics.php in Omnistar Lib2 PHP 0.2 allows remote attackers to ex…

  • Unscored —
    CVE-2007-4337

    Multiple buffer overflows in the httplib_parse_sc_header function in lib/http.c in Streamripper before 1.62.2 allow rem…

    streamripper Debian