Archive
September 2007
Vulnerabilities first published in this month (UTC), newest first.
448 results · Feed
-
Unscored —CVE-2007-5018 Public exploit
Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to execute arbitrary code via…
-
Unscored —
Stack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow remote IMAP servers to exec…
-
Unscored —
Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in jetAudio 7.0.3 Basic a…
-
Unscored —CVE-2007-4984 Public exploit
SQL injection vulnerability in index.php in the Ktauber.com StylesDemo mod for phpBB 2.0.xx allows remote attackers to …
-
Unscored —CVE-2007-4977 Public exploit
Cross-site scripting (XSS) vulnerability in mode.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote…
-
Unscored —
Cross-site scripting (XSS) vulnerability in the save function in Obedit 3.03 allows user-assisted remote attackers to i…
-
Unscored —CVE-2007-4980 Public exploit
The readRequest method in org/gcaldaemon/core/http/HTTPListener.java in GCALDaemon 1.0-beta13 allows remote attackers t…
-
Unscored —
Unspecified vulnerability in the Modbus/TCP Diagnostic function in MiniHMI.exe for the Automated Solutions Modbus Slave…
-
Unscored —CVE-2007-4978 Public exploit
Multiple PHP remote file inclusion vulnerabilities in phpSyncML 0.1.2 and earlier allow remote attackers to execute arb…
-
Unscored —CVE-2007-4975 Public exploit
Cross-site scripting (XSS) vulnerability in hilfe.php in b1gMail 6.3.1 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2007-4979 Public exploit
SQL injection vulnerability in index.php in the sondages module in KwsPHP 1.0 allows remote attackers to execute arbitr…
-
Unscored —
Multiple absolute path traversal vulnerabilities in the MW6QRCode.QRCode.1 ActiveX control in MW6QRCode.dll in MW6 Tech…
-
Unscored —CVE-2007-4976 Public exploit
Directory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and earlier allows remote aut…
-
Unscored —
Multiple buffer overflows in unspecified ActiveX controls in COM objects in Avaya IP Softphone R5.2 before SP3, and R6.…
-
Unscored —
Heap-based buffer overflow in the flac_buffer_copy function in libsndfile 1.0.17 and earlier might allow remote attacke…
-
Unscored —
ProcessGuard 3.410 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function han…
-
Unscored —
Online Armor Personal Firewall 2.0.1.215 does not properly validate certain parameters to System Service Descriptor Tab…
-
Unscored —
RegMon 7.04 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, …
-
Unscored —
ProSecurity 1.40 Beta 2 does not properly validate certain parameters to System Service Descriptor Table (SSDT) functio…
-
Unscored —
Privatefirewall 5.0.14.2 does not properly validate certain parameters to System Service Descriptor Table (SSDT) functi…
-
Unscored —
Process Monitor 1.22 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function h…
-
Unscored —CVE-2007-4964 Public exploit
WinImage 8.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via an invalid BPB_BytsP…
-
Unscored —CVE-2007-4966 Public exploit
SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execut…
-
Unscored —
Visual truncation vulnerability in WinImage 8.10 and earlier allows remote attackers to spoof a destination filename vi…
-
Unscored —
Argument injection vulnerability in the Linden Lab Second Life secondlife:// protocol handler, as used in Internet Expl…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) 1.6.3.4 allow remote attackers to inject ar…
-
Unscored —
The login_to_simulator method in Linden Lab Second Life, as used by the secondlife:// protocol handler and possibly oth…
-
Unscored —CVE-2007-4962 Public exploit
Directory traversal vulnerability in WinImage 8.10 and earlier allows user-assisted remote attackers to create or overw…
-
Unscored —
Cross-site scripting (XSS) vulnerability in catalog_products_with_images.php in osCMax 2.0.0-RC3-0-1 allows remote atta…
-
Unscored —
Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause…
-
Unscored —
RemoteDocs R-Viewer before 1.6.3768 stores encrypted RDZ file data in unencrypted temporary files, which allows local u…
-
Unscored —
Unspecified vulnerability in RemoteDocs R-Viewer before 1.6.3768 allows user-assisted remote attackers to execute arbit…
-
Critical 9.8
masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows re…
KEV Apr 15, 2022 -
Unscored —CVE-2007-2834 EPSS 12%
Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (St…
-
Unscored —
Multiple stack-based buffer overflows in the PhotoChannel Networks PNI Digital Media Photo Upload Plugin ActiveX contro…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in php(Reactor) 1.2.7pl1 allow remote attackers to execute arbitrary…
-
Unscored —CVE-2007-4957 Public exploit
Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or over…
-
Unscored —
Multiple PHP remote file inclusion vulnerabilities in Webmedia Explorer (webmex) 3.2.2 allow remote attackers to execut…
-
Unscored —CVE-2007-4956 Public exploit
Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) t…
-
Unscored —
PHP remote file inclusion vulnerability in form/db_form/employee.php in PHPortal 0.2.7 allows remote attackers to execu…