Skip to content
OpenAdvisories

Archive

9 October 2007

Vulnerabilities first published on this day (UTC), newest first.

← September 2007 2007 / October /9 November 2007 →
  1. 138
  2. 2 
  3. 317
  4. 416
  5. 524
  6. 676
  7. 7 
  8. 818
  9. 963
  10. 10 
  11. 1119
  12. 1242
  13. 1315
  14. 1471
  15. 158
  16. 1616
  17. 1752
  18. 1894
  19. 1945
  20. 2029
  21. 218
  22. 224
  23. 2366
  24. 2440
  25. 2534
  26. 2633
  27. 27 
  28. 284
  29. 2955
  30. 3039
  31. 3144
All Critical High Medium Low Exploited only Public exploit

29 results · Clear filters · Feed

  • Unscored —
    CVE-2007-4466 Public exploit EPSS 31%

    Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote atta…

  • Unscored —
    CVE-2007-2217 Public exploit EPSS 41%

    Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote a…

  • Unscored —
    CVE-2007-5321 Public exploit

    Directory traversal vulnerability in index.php in Verlihub Control Panel (VHCP) 1.7 and earlier allows remote attackers…

  • Unscored —
    CVE-2007-5322 Public exploit EPSS 19%

    Insecure method vulnerability in the FPOLE.OCX 6.0.8450.0 ActiveX control in Microsoft Visual FoxPro 6.0 allows remote …

  • Unscored —
    CVE-2007-5320 Public exploit

    Multiple absolute path traversal vulnerabilities in Pegasus Imaging ImagXpress 8.0 allow remote attackers to (1) delete…

  • Unscored —
    CVE-2007-5316 Public exploit

    SQL injection vulnerability in browsecats.php in Softbiz Jobs and Recruitment Script allows remote attackers to execute…

  • Unscored —
    CVE-2007-5315 Public exploit EPSS 39%

    PHP remote file inclusion vulnerability in common.php in LiveAlbum 0.9.0, when register_globals is enabled, allows remo…

  • Unscored —
    CVE-2007-5314 Public exploit

    PHP remote file inclusion vulnerability in system/funcs/xkurl.php in xKiosk WEB 3.0.1i, when register_globals is enable…

  • Unscored —
    CVE-2007-5313 Public exploit

    PHP remote file inclusion vulnerability in install/config.php in Picturesolution 2.1 and earlier allows remote attacker…

  • Unscored —
    CVE-2007-5309 Public exploit

    PHP remote file inclusion vulnerability in admin.wmtgallery.php in the webmaster-tips.net Flash Image Gallery (com_wmtg…

  • Unscored —
    CVE-2007-5312 Public exploit

    Cross-site scripting (XSS) vulnerability in TorrentTrader Classic 1.07 allows remote attackers to inject arbitrary web …

  • Unscored —
    CVE-2007-5311 Public exploit

    Directory traversal vulnerability in backend/admin-functions.php in TorrentTrader Classic Edition 1.07 allows remote at…

  • Unscored —
    CVE-2007-5310 Public exploit

    PHP remote file inclusion vulnerability in admin.wmtportfolio.php in the webmaster-tips.net wmtportfolio 1.0 (com_wmtpo…

  • Unscored —
    CVE-2007-5306 Public exploit

    ELSEIF CMS Beta 0.6 allows remote attackers to obtain sensitive information (full path) via unspecified vectors to util…

  • Unscored —
    CVE-2007-5305 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in ELSEIF CMS Beta 0.6 allow remote attackers to execute arbitrary P…

  • Unscored —
    CVE-2007-5308 Public exploit

    SQL injection vulnerability in galerie.php in PHP Homepage M (phpHPm) 1.0, when magic_quotes_gpc is disabled, allows re…

  • Unscored —
    CVE-2007-5293 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in IDMOS 1.0-beta (aka Phoenix) allow remote attackers to inject ar…

  • Unscored —
    CVE-2007-5290 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in MailBee WebMail Pro 3.4 and earlier; and possibly MailBee WebMai…

  • Unscored —
    CVE-2007-5307 Public exploit

    ELSEIF CMS Beta 0.6 does not properly unset variables when the input data includes a numeric parameter with a value mat…

  • Unscored —
    CVE-2007-5294 Public exploit

    PHP remote file inclusion vulnerability in core/aural.php in IDMOS 1.0-beta (aka Phoenix) allows remote attackers to ex…

  • Unscored —
    CVE-2007-5298 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in CMS Creamotion allow remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2007-5299 Public exploit

    Multiple directory traversal vulnerabilities in SkaDate 5.0 and 6.0, and possibly later versions such as 6.482, allow r…

  • Unscored —
    CVE-2007-5300 Public exploit

    Off-by-one error in the do_login_loop function in libwzd-core/wzd_login.c in wzdftpd 0.8.0, 0.8.2, and possibly other v…

  • Unscored —
    CVE-2007-5304 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ELSEIF CMS Beta 0.6 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2007-5301 Public exploit EPSS 10%

    Buffer overflow in the vorbis_stream_info function in input/vorbis/vorbis_engine.c (aka the vorbis input plugin) in Als…

    alsaplayer Debian
  • Unscored —
    CVE-2004-2727 Public exploit

    Buffer overflow in MEHTTPS (HTTPMail) of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a den…

  • Unscored —
    CVE-2004-2732 Public exploit

    nbmember.cgi in Netbilling 2.0 allows remote attackers to obtain sensitive information via the cmd=test option, which c…

  • Unscored —
    CVE-2004-2736 Public exploit

    Polar HelpDesk 3.0 allows remote attackers to bypass authentication by setting the UserId and UserType values in a cook…

  • Unscored —
    CVE-2004-2737 Public exploit

    SQL injection vulnerability in problist.asp in NetSupport DNA HelpDesk 1.01 allows remote attackers to execute arbitrar…