Skip to content
OpenAdvisories

Archive

September 2007

Vulnerabilities first published in this month (UTC), newest first.

← August 2007 2007 / September October 2007 →
  1. 1 
  2. 2 
  3. 3 
  4. 422
  5. 524
  6. 621
  7. 7 
  8. 812
  9. 9 
  10. 1027
  11. 1124
  12. 1231
  13. 131
  14. 1429
  15. 15 
  16. 16 
  17. 1725
  18. 1851
  19. 1919
  20. 2013
  21. 2123
  22. 22 
  23. 239
  24. 2443
  25. 251
  26. 2634
  27. 2731
  28. 288
  29. 29 
  30. 30 
All Critical High Medium Low Exploited only Public exploit

174 results · Clear filters · Feed

  • Unscored —
    CVE-2007-5061 Public exploit

    SQL injection vulnerability in mods/banners/navlist.php in Clansphere 2007.4 allows remote attackers to execute arbitra…

  • Unscored —
    CVE-2007-5060 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the cpass functionality in an admin action in index.php in XCMS allo…

  • Unscored —
    CVE-2007-5056 Public exploit EPSS 28%

    Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including…

  • Unscored —
    CVE-2007-5050 Public exploit

    Directory traversal vulnerability in index.php in Neuron News 1.0 allows remote attackers to include and execute arbitr…

  • Unscored —
    CVE-2007-5052 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in index.php in Vigile CMS 1.8 allow remote attackers to inject arb…

  • Unscored —
    CVE-2007-5036 Public exploit

    Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 and 4.4.1.4 allow remote authenticated…

  • Unscored —
    CVE-2004-2687 Public exploit Scanner template EPSS 87%

    distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote a…

    distcc Debian
  • Unscored —
    CVE-2004-2686 Public exploit

    Directory traversal vulnerability in the vfs_getvfssw function in Solaris 2.6, 7, 8, and 9 allows local users to load a…

  • Unscored —
    CVE-2001-1583 Public exploit EPSS 83%

    lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request wi…

  • Unscored —
    CVE-2001-1582 Public exploit

    Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary…

  • Unscored —
    CVE-2002-2226 Public exploit EPSS 63%

    Buffer overflow in tftpd of TFTP32 2.21 and earlier allows remote attackers to execute arbitrary code via a long filena…

  • Unscored —
    CVE-2003-1336 Public exploit EPSS 36%

    Buffer overflow in mIRC before 6.11 allows remote attackers to execute arbitrary code via a long irc:// URL.

  • Unscored —
    CVE-2003-1339 Public exploit EPSS 49%

    Stack-based buffer overflow in eZnet.exe, as used in eZ (a) eZphotoshare, (b) eZmeeting, (c) eZnetwork, and (d) eZshare…

  • Unscored —
    CVE-2007-5026 Public exploit

    dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows…

  • Unscored —
    CVE-2007-5027 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/ddns in the web management panel for the WBR3404TX broad…

  • Unscored —
    CVE-2007-5010 Public exploit

    Cross-site scripting (XSS) vulnerability in WebBatch allows remote attackers to inject arbitrary web script or HTML via…

  • Unscored —
    CVE-2007-5011 Public exploit

    webbatch.exe in WebBatch allows remote attackers to obtain sensitive information via the dumpinputdata parameter.

  • Unscored —
    CVE-2007-5016 Public exploit

    SQL injection vulnerability in userreviews.php in OneCMS 2.4 allows remote attackers to execute arbitrary SQL commands …

  • Unscored —
    CVE-2007-5019 Public exploit EPSS 10%

    Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attac…

  • Unscored —
    CVE-2007-5009 Public exploit EPSS 45%

    PHP remote file inclusion vulnerability in language/lang_german/lang_main_album.php in phpBB Plus 1.53, and 1.53a befor…

  • Unscored —
    CVE-2007-5017 Public exploit

    Absolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll in Yahoo! Messenger 8…

  • Unscored —
    CVE-2007-5015 Public exploit EPSS 39%

    Multiple PHP remote file inclusion vulnerabilities in Streamline PHP Media Server 1.0-beta4 allow remote attackers to e…

  • Unscored —
    CVE-2007-5018 Public exploit

    Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to execute arbitrary code via…

  • Unscored —
    CVE-2007-4983 Public exploit EPSS 47%

    Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in jetAudio 7.0.3 Basic a…

  • Unscored —
    CVE-2007-4984 Public exploit

    SQL injection vulnerability in index.php in the Ktauber.com StylesDemo mod for phpBB 2.0.xx allows remote attackers to …

  • Unscored —
    CVE-2007-4977 Public exploit

    Cross-site scripting (XSS) vulnerability in mode.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote…

  • Unscored —
    CVE-2007-4980 Public exploit

    The readRequest method in org/gcaldaemon/core/http/HTTPListener.java in GCALDaemon 1.0-beta13 allows remote attackers t…

  • Unscored —
    CVE-2007-4978 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in phpSyncML 0.1.2 and earlier allow remote attackers to execute arb…

  • Unscored —
    CVE-2007-4975 Public exploit

    Cross-site scripting (XSS) vulnerability in hilfe.php in b1gMail 6.3.1 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2007-4979 Public exploit

    SQL injection vulnerability in index.php in the sondages module in KwsPHP 1.0 allows remote attackers to execute arbitr…

  • Unscored —
    CVE-2007-4982 Public exploit EPSS 10%

    Multiple absolute path traversal vulnerabilities in the MW6QRCode.QRCode.1 ActiveX control in MW6QRCode.dll in MW6 Tech…

  • Unscored —
    CVE-2007-4976 Public exploit

    Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote aut…

  • Unscored —
    CVE-2007-4964 Public exploit

    WinImage 8.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via an invalid BPB_BytsP…

  • Unscored —
    CVE-2007-4966 Public exploit

    SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execut…

  • Unscored —
    CVE-2007-4962 Public exploit

    Directory traversal vulnerability in WinImage 8.10 and earlier allows user-assisted remote attackers to create or overw…

  • Unscored —
    CVE-2007-4965 Public exploit EPSS 14%

    Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause…

    python-py Azure Linux
  • Critical 9.8
    CVE-2007-3010 Exploited Public exploit Scanner template EPSS 97%

    masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows re…

    KEV Apr 15, 2022
  • Unscored —
    CVE-2007-4957 Public exploit

    Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or over…

  • Unscored —
    CVE-2007-4956 Public exploit

    Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) t…

  • Unscored —
    CVE-2007-4952 Public exploit

    SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL…