Archive
9 October 2007
Vulnerabilities first published on this day (UTC), newest first.
63 results · Feed
-
Unscored —
Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote atta…
-
Unscored —CVE-2007-3892 EPSS 26%
Microsoft Internet Explorer 5.01 through 7 allows remote attackers to spoof the URL address bar and other "trust UI" co…
-
Unscored —CVE-2007-3897 EPSS 55%
Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Networ…
-
Unscored —CVE-2007-3893 EPSS 24%
Unspecified vulnerability in Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary co…
-
Unscored —CVE-2007-3899 EPSS 29%
Unspecified vulnerability in Microsoft Word 2000 SP3, Word 2002 SP3, and Office 2004 for Mac allows user-assisted remot…
-
Unscored —
Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote a…
-
Unscored —CVE-2007-2228 EPSS 43%
rpcrt4.dll (aka the RPC runtime library) in Microsoft Windows XP SP2, XP Professional x64 Edition, Server 2003 SP1 and …
-
Unscored —CVE-2007-5321 Public exploit
Directory traversal vulnerability in index.php in Verlihub Control Panel (VHCP) 1.7 and earlier allows remote attackers…
-
Unscored —
Insecure method vulnerability in the FPOLE.OCX 6.0.8450.0 ActiveX control in Microsoft Visual FoxPro 6.0 allows remote …
-
Unscored —CVE-2007-5320 Public exploit
Multiple absolute path traversal vulnerabilities in Pegasus Imaging ImagXpress 8.0 allow remote attackers to (1) delete…
-
Unscored —
Unspecified vulnerability in the vuidmice STREAMS modules in Sun Solaris 8, 9, and 10 allows local users with console (…
-
Unscored —CVE-2007-5316 Public exploit
SQL injection vulnerability in browsecats.php in Softbiz Jobs and Recruitment Script allows remote attackers to execute…
-
Unscored —
PHP remote file inclusion vulnerability in common.php in LiveAlbum 0.9.0, when register_globals is enabled, allows remo…
-
Unscored —
Unspecified vulnerability in preview.php in TYPOlight webCMS 2.4.6 allows remote attackers to download arbitrary files …
-
Unscored —CVE-2007-5314 Public exploit
PHP remote file inclusion vulnerability in system/funcs/xkurl.php in xKiosk WEB 3.0.1i, when register_globals is enable…
-
Unscored —CVE-2007-5313 Public exploit
PHP remote file inclusion vulnerability in install/config.php in Picturesolution 2.1 and earlier allows remote attacker…
-
Unscored —CVE-2007-5309 Public exploit
PHP remote file inclusion vulnerability in admin.wmtgallery.php in the webmaster-tips.net Flash Image Gallery (com_wmtg…
-
Unscored —CVE-2007-5312 Public exploit
Cross-site scripting (XSS) vulnerability in TorrentTrader Classic 1.07 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2007-5311 Public exploit
Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic Edition 1.07 allows remote at…
-
Unscored —CVE-2007-5310 Public exploit
PHP remote file inclusion vulnerability in admin.wmtportfolio.php in the webmaster-tips.net wmtportfolio 1.0 (com_wmtpo…
-
Unscored —CVE-2007-5306 Public exploit
ELSEIF CMS Beta 0.6 allows remote attackers to obtain sensitive information (full path) via unspecified vectors to util…
-
Unscored —CVE-2007-5305 Public exploit
Multiple PHP remote file inclusion vulnerabilities in ELSEIF CMS Beta 0.6 allow remote attackers to execute arbitrary P…
-
Unscored —CVE-2007-5308 Public exploit
SQL injection vulnerability in galerie.php in PHP Homepage M (phpHPm) 1.0, when magic_quotes_gpc is disabled, allows re…
-
Unscored —CVE-2007-5293 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in IDMOS 1.0-beta (aka Phoenix) allow remote attackers to inject ar…
-
Unscored —CVE-2007-5290 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in MailBee WebMail Pro 3.4 and earlier; and possibly MailBee WebMai…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Edit.asp in DB Manager 2.0 allows remote attackers to inject arbitrary web …
-
Unscored —CVE-2007-5307 Public exploit
ELSEIF CMS Beta 0.6 does not properly unset variables when the input data includes a numeric parameter with a value mat…
-
Unscored —CVE-2007-5294 Public exploit
PHP remote file inclusion vulnerability in core/aural.php in IDMOS 1.0-beta (aka Phoenix) allows remote attackers to ex…
-
Unscored —CVE-2007-5298 Public exploit
Multiple PHP remote file inclusion vulnerabilities in CMS Creamotion allow remote attackers to execute arbitrary PHP co…
-
Unscored —CVE-2007-5299 Public exploit
Multiple directory traversal vulnerabilities in SkaDate 5.0 and 6.0, and possibly later versions such as 6.482, allow r…
-
Unscored —
Cross-site scripting (XSS) vulnerability in photos.cfm in Directory Image Gallery 1.1 allows remote attackers to inject…
-
Unscored —CVE-2007-5300 Public exploit
Off-by-one error in the do_login_loop function in libwzd-core/wzd_login.c in wzdftpd 0.8.0, 0.8.2, and possibly other v…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in HP System Management Homepage (SMH) in HP-UX B.11.11, B.11.23, a…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in dblisttest.asp in dbList 8.1 allow remote attackers to inject ar…
-
Unscored —
Cross-site scripting (XSS) vulnerability in index.php in Minki 1.30 allows remote attackers to inject arbitrary web scr…
-
Unscored —CVE-2007-5304 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in ELSEIF CMS Beta 0.6 allow remote attackers to inject arbitrary w…
-
Unscored —
Cross-site scripting (XSS) vulnerability in news_page.php in SnewsCMS Rus 2.1 allows remote attackers to inject arbitra…
-
Unscored —
Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in Als…
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in index.php in (a) Wikepage Opus 13 2007.2 and (b) TipiWiki 2 allo…
-
Unscored —
Web Wiz Forums 7.7a uses invalid logic to determine user privileges, which allows remote attackers to (1) block arbitra…