Skip to content
OpenAdvisories

Archive

18 September 2007

Vulnerabilities first published on this day (UTC), newest first.

51 results · Feed

  • Unscored —

    axis-cgi/buffer/command.cgi on the AXIS 207W camera allows remote authenticated users to cause a denial of service (reb…

  • Unscored —
    CVE-2007-4925 Public exploit

    The ewirePC_Decrypt function in ewirepcfunctions.php in eWire Payment Client (ePC) 1.60 and 1.70 allows remote attacker…

  • Unscored —

    The AXIS 207W camera stores a WEP or WPA key in cleartext in the configuration file, which might allow local users to o…

  • Unscored —
    CVE-2007-4930 Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 207W camera allow remote attackers to perform ce…

  • Unscored —
    CVE-2007-4932 Public exploit

    admin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not exit when administrative…

  • Unscored —

    HP System Management Homepage (SMH) for Windows, when used in conjunction with HP Version Control Agent or Version Cont…

  • Unscored —

    Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code …

  • Unscored —
    CVE-2007-4933 Public exploit

    Direct static code injection vulnerability in includes/admin/sub/conf_appearence.php in Shop-Script FREE 2.0 and earlie…

  • Unscored —
    CVE-2007-4934 Public exploit EPSS 22%

    Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code …

  • Unscored —

    The AXIS 207W camera uses a base64-encoded cleartext username and password for authentication, which allows remote atta…

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 207W camera allow remote attackers to inject arbitrary …