Skip to content
OpenAdvisories

Archive

10 December 2007

Vulnerabilities first published on this day (UTC), newest first.

← November 2007 2007 / December /10 January 2008 →
  1. 19
  2. 2 
  3. 33
  4. 434
  5. 57
  6. 615
  7. 717
  8. 8 
  9. 9 
  10. 1021
  11. 118
  12. 1217
  13. 1323
  14. 142
  15. 1538
  16. 16 
  17. 1728
  18. 1813
  19. 1926
  20. 2075
  21. 2110
  22. 22 
  23. 23 
  24. 249
  25. 25 
  26. 26 
  27. 2718
  28. 2851
  29. 29 
  30. 30 
  31. 3112
All Critical High Medium Low Exploited only Public exploit

21 results · Feed

  • Unscored —
    CVE-2007-6305

    Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 7 R3.2.0 allow attackers to gain privileg…

  • Unscored —
    CVE-2007-6303

    MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 does not update the DEFINER value of a view whe…

  • Unscored —
    CVE-2007-6304

    The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a cert…

  • Unscored —
    CVE-2007-6302

    Multiple heap-based buffer overflows in avirus.exe in Novell NetMail 3.5.2 before Messaging Architects M+NetMail 3.52f …

  • Unscored —
    CVE-2007-5970

    MySQL 5.1.x before 5.1.23 and 6.0.x before 6.0.4 allows remote authenticated users to gain privileges on arbitrary tabl…

  • Unscored —
    CVE-2007-5969 EPSS 14%

    MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Serv…

  • Unscored —
    CVE-2007-6287

    Cross-site scripting (XSS) vulnerability in the login page in Lxlabs HyperVM 2.0 allows remote attackers to inject arbi…

  • Unscored —
    CVE-2007-6288

    Multiple SQL injection vulnerabilities in TCExam before 5.1.000 allow remote attackers to execute arbitrary SQL command…

  • Unscored —
    CVE-2007-6301 Public exploit

    Cross-site scripting (XSS) vulnerability in compose.php in OpenNewsletter 2.5 and earlier allows remote attackers to in…

  • Unscored —
    CVE-2007-6292 Public exploit

    SQL injection vulnerability in leggi_commenti.asp in MWOpen 1.4 and earlier allows remote attackers to execute arbitrar…

  • Unscored —
    CVE-2007-6291

    SQL injection vulnerability in abm.aspx in Xigla Absolute Banner Manager .NET 4.0 allows remote attackers to execute ar…

  • Unscored —
    CVE-2007-6290 Public exploit

    Multiple directory traversal vulnerabilities in js/get_js.php in SERWeb 2.0.0 dev1 and earlier allow remote attackers t…

  • Unscored —
    CVE-2007-6295

    Cross-site scripting (XSS) vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus…

  • Unscored —
    CVE-2007-6299

    Multiple SQL injection vulnerabilities in Drupal and vbDrupal 4.7.x before 4.7.9 and 5.x before 5.4 allow remote attack…

  • Unscored —
    CVE-2007-6298

    Cross-site scripting (XSS) vulnerability in the Shoutbox module for Drupal 5.x before Shoutbox 5.x-1.1 allows remote au…

    Web / CMS
  • Unscored —
    CVE-2007-6294

    Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 3 R3.7 allow attackers to gain privileges…

  • Unscored —
    CVE-2007-6289 Public exploit

    Multiple PHP remote file inclusion vulnerabilities in SerWeb 2.0.0 dev1 and earlier allow remote attackers to execute a…

  • Unscored —
    CVE-2007-6296

    PHP remote file inclusion vulnerability in users_popupL.php3 in phpMyChat 0.14.5 allows remote attackers to execute arb…

  • Unscored —
    CVE-2007-6300

    Cross-site request forgery (CSRF) vulnerability in Fusion News 3.9.0 allows remote attackers to perform unauthorized ac…

  • Unscored —
    CVE-2007-6293

    Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 6 R1.3 allow attackers to gain privileges…

  • Unscored —
    CVE-2007-6297 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in PHPMyChat 0.14.5 allow remote attackers to inject arbitrary web …