Skip to content
OpenAdvisories

Archive

October 2007

Vulnerabilities first published in this month (UTC), newest first.

← September 2007 2007 / October November 2007 →
  1. 138
  2. 2 
  3. 317
  4. 416
  5. 524
  6. 676
  7. 7 
  8. 818
  9. 963
  10. 10 
  11. 1119
  12. 1242
  13. 1315
  14. 1471
  15. 158
  16. 1616
  17. 1752
  18. 1894
  19. 1945
  20. 2029
  21. 218
  22. 224
  23. 2366
  24. 2440
  25. 2534
  26. 2633
  27. 27 
  28. 284
  29. 2955
  30. 3039
  31. 3144
All Critical High Medium Low Exploited only Public exploit

327 results · Clear filters · Feed

  • Unscored —
    CVE-2007-5458 Public exploit

    SQL injection vulnerability in index.php in the newsletter module 1.0 for KwsPHP, when magic_quotes_gpc is disabled, al…

  • Unscored —
    CVE-2007-5457 Public exploit EPSS 38%

    Multiple PHP remote file inclusion vulnerabilities in Michael Dempfle Joomla Flash Uploader (com_jfu or com_joomla_flas…

  • Unscored —
    CVE-2007-5446 Public exploit

    Absolute path traversal vulnerability in a certain ActiveX control in PBEmail7Ax.dll in PBEmail 7 ActiveX Edition allow…

  • Unscored —
    CVE-2007-5449 Public exploit

    SQL injection vulnerability in searchresult.php in Softbiz Recipes Portal Script allows remote attackers to execute arb…

  • Unscored —
    CVE-2007-5450 Public exploit

    Unspecified vulnerability in Safari on the Apple iPod touch (aka iTouch) and iPhone 1.1.1 allows user-assisted remote a…

  • Unscored —
    CVE-2007-5455 Public exploit

    Cross-site scripting (XSS) vulnerability in wxis.exe in WWWISIS 7.1 and earlier allows remote attackers to inject arbit…

  • Unscored —
    CVE-2007-5447 Public exploit

    ioncube_loader_win_5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow safe_mode and disable_func…

  • Unscored —
    CVE-2007-5452 Public exploit

    Multiple SQL injection vulnerabilities in php-stats.recjs.php in Php-Stats 0.1.9.2 allow remote attackers to execute ar…

  • Unscored —
    CVE-2007-5451 Public exploit EPSS 31%

    PHP remote file inclusion vulnerability in admin.color.php in the com_colorlab (aka com_color) 1.0 component for Joomla…

  • Unscored —
    CVE-2007-5453 Public exploit

    Multiple eval injection vulnerabilities in Php-Stats 0.1.9.2 allow remote authenticated administrators to execute arbit…

  • Unscored —
    CVE-2007-5440 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in CRS Manager allow remote attackers to execute arbitrary PHP code …

  • Unscored —
    CVE-2007-5332 Public exploit

    Multiple unspecified vulnerabilities in (1) mediasvr and (2) caloggerd in CA BrightStor ARCServe BackUp v9.01 through R…

  • Unscored —
    CVE-2007-5208 Public exploit EPSS 67%

    hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent …

    hplip Debian
  • Unscored —
    CVE-2007-5430 Public exploit

    Multiple SQL injection vulnerabilities in Stride 1.0 allow remote attackers to execute arbitrary SQL commands via (1) t…

  • Unscored —
    CVE-2007-5428 Public exploit

    Cross-site scripting (XSS) vulnerability in UMI CMS allows remote attackers to inject arbitrary web script or HTML via …

  • Unscored —
    CVE-2007-5426 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers to inject arbitrary web…

  • Unscored —
    CVE-2007-5423 Public exploit EPSS 77%

    tiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via PHP sequences in the f a…

  • Unscored —
    CVE-2007-5429 Public exploit

    Cross-site scripting (XSS) vulnerability in index.php in Nucleus 3.01 allows remote attackers to inject arbitrary web s…

  • Unscored —
    CVE-2007-5427 Public exploit

    Cross-site scripting (XSS) vulnerability in the com_search component in Joomla! 1.0.13 and earlier allows remote attack…

  • Unscored —
    CVE-2007-5416 Public exploit

    Drupal 5.2 and earlier does not properly unset variables when the input data includes a numeric parameter with a value …

  • Unscored —
    CVE-2007-5417 Public exploit

    Directory traversal vulnerability in index.php in boastMachine (aka bMachine) 2.8 allows remote attackers to read arbit…

  • Unscored —
    CVE-2007-5407 Public exploit EPSS 40%

    Multiple PHP remote file inclusion vulnerabilities in the JContentSubscription (com_jcs) 1.5.8 component for Joomla! al…

  • Unscored —
    CVE-2007-5409 Public exploit

    PHP remote file inclusion vulnerability in admin/nuseo_admin_d.php in NuSEO PHP Enterprise 1.6 (NuSEO.PHP), when regist…

  • Unscored —
    CVE-2007-5410 Public exploit

    PHP remote file inclusion vulnerability in admin.wmtrssreader.php in the webmaster-tips.net Flash RSS Reader (com_wmtrs…

  • Unscored —
    CVE-2007-5412 Public exploit EPSS 38%

    Multiple PHP remote file inclusion vulnerabilities in the Quoc-Huy MP3 Allopass (com_mp3_allopass) 1.0 component for Jo…

  • Unscored —
    CVE-2007-5408 Public exploit

    SQL injection vulnerability in category.php in cpDynaLinks 1.02 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2007-5411 Public exploit

    Cross-site scripting (XSS) vulnerability in the Linksys SPA941 VoIP Phone with firmware 5.1.8 allows remote attackers t…

  • Unscored —
    CVE-2007-5386 Public exploit

    Cross-site scripting (XSS) vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed by a browser that doe…

    phpmyadmin Debian
  • Unscored —
    CVE-2007-5388 Public exploit EPSS 38%

    Multiple PHP remote file inclusion vulnerabilities in WebDesktop 0.1 allow remote attackers to execute arbitrary PHP co…

  • Unscored —
    CVE-2007-5390 Public exploit

    PHP remote file inclusion vulnerability in index.php in PicoFlat CMS 0.4.14 and earlier allows remote attackers to exec…

  • Unscored —
    CVE-2007-5387 Public exploit EPSS 29%

    PHP remote file inclusion vulnerability in active/components/xmlrpc/client.php in Pindorama 0.1 allows remote attackers…

  • Unscored —
    CVE-2007-5381 Public exploit EPSS 15%

    Stack-based buffer overflow in the Line Printer Daemon (LPD) in Cisco IOS before 12.2(18)SXF11, 12.4(16a), and 12.4(2)T…

  • Unscored —
    CVE-2007-5370 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/dnewsweb.exe in NetWin DNewsWeb (DNews News Server) 57e1…

  • Unscored —
    CVE-2007-5365 Public exploit EPSS 80%

    Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some oth…

  • Unscored —
    CVE-2007-5374 Public exploit

    cp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, w…

  • Unscored —
    CVE-2007-5363 Public exploit EPSS 31%

    PHP remote file inclusion vulnerability in admin.panoramic.php in the Panoramic Picture Viewer (com_panoramic) mambot (…

  • Unscored —
    CVE-2007-5362 Public exploit EPSS 37%

    Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite (com_mosmedia) 4.5.1 comp…

  • Unscored —
    CVE-2007-3896 Public exploit EPSS 54%

    The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 …

  • Unscored —
    CVE-2007-4466 Public exploit EPSS 31%

    Multiple stack-based buffer overflows in Electronic Arts (EA) SnoopyCtrl ActiveX control (NPSnpy.dll) allow remote atta…

  • Unscored —
    CVE-2007-2217 Public exploit EPSS 41%

    Kodak Image Viewer in Microsoft Windows 2000 SP4, and in some cases XP SP2 and Server 2003 SP1 and SP2, allows remote a…