Skip to content
OpenAdvisories

Archive

13 December 2007

Vulnerabilities first published on this day (UTC), newest first.

← November 2007 2007 / December /13 January 2008 →
  1. 19
  2. 2 
  3. 33
  4. 434
  5. 57
  6. 615
  7. 717
  8. 8 
  9. 9 
  10. 1021
  11. 118
  12. 1217
  13. 1323
  14. 142
  15. 1538
  16. 16 
  17. 1728
  18. 1813
  19. 1926
  20. 2075
  21. 2110
  22. 22 
  23. 23 
  24. 249
  25. 25 
  26. 26 
  27. 2718
  28. 2851
  29. 29 
  30. 30 
  31. 3112
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2007-6344 Public exploit

    Directory traversal vulnerability in modules/cms/index.php in Mcms Easy Web Make 1.3, allows remote attackers to includ…

  • Unscored —
    CVE-2007-6346

    Cross-site scripting (XSS) vulnerability in Rainboard before 2.10 allows remote attackers to inject arbitrary web scrip…

  • Unscored —
    CVE-2007-6343

    Cross-site scripting (XSS) vulnerability in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remot…

  • Unscored —
    CVE-2007-6345

    SQL injection vulnerability in aurora framework before 20071208 allows remote attackers to execute arbitrary SQL comman…

  • Unscored —
    CVE-2007-6347 Public exploit

    PHP remote file inclusion vulnerability in blocks/block_site_map.php in ViArt (1) CMS 3.3.2, (2) HelpDesk 3.3.2, (3) Sh…

  • Unscored —
    CVE-2007-6342

    SQL injection vulnerability in the David Castro AuthCAS module (AuthCAS.pm) 0.4 for the Apache HTTP Server allows remot…

  • Unscored —
    CVE-2007-6015 Public exploit EPSS 27%

    Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logo…

    samba Debian
  • Unscored —
    CVE-2007-6204 Public exploit EPSS 70%

    Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote at…

  • Unscored —
    CVE-2007-5989

    Unspecified vulnerability in the skype4com URI handler in Skype before 3.6 GOLD allows remote attackers to execute arbi…

  • Unscored —
    CVE-2007-6322 Public exploit

    Directory traversal vulnerability in filedownload.php in xml2owl 0.1.1 allows remote attackers to read arbitrary files …

  • Unscored —
    CVE-2007-6330

    Meridian Prolog Manager 2007, and 7.5 and earlier, sends all usernames and passwords to the client in a (1) cleartext o…

  • Unscored —
    CVE-2007-6328

    DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the moun…

    dosbox Debian
  • Unscored —
    CVE-2007-6327 Public exploit EPSS 11%

    Buffer overflow in a certain ActiveX control in Online Media Technologies AVSMJPEGFILE.DLL 1.1.1.102 allows remote atta…

  • Unscored —
    CVE-2007-6325 Public exploit EPSS 11%

    PHP remote file inclusion vulnerability in adminbereich/designconfig.php in Fastpublish CMS 1.9999 allows remote attack…

  • Unscored —
    CVE-2007-6329 EPSS 16%

    Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML (OOXML) documen…

  • Unscored —
    CVE-2007-6326 Public exploit

    Sergey Lyubka Simple HTTPD (shttpd) 1.3 on Windows allows remote attackers to cause a denial of service via a request t…

  • Unscored —
    CVE-2007-6331 Public exploit EPSS 30%

    Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with H…

  • Unscored —
    CVE-2007-6333 Public exploit

    The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 …

  • Unscored —
    CVE-2007-6324 Public exploit

    PHP remote file inclusion vulnerability in head.php in CityWriter 0.9.7 allows remote attackers to execute arbitrary PH…

  • Unscored —
    CVE-2007-6332 Public exploit

    The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 …

  • Unscored —
    CVE-2007-6323 Public exploit

    Multiple directory traversal vulnerabilities in MMS Gallery PHP 1.0 allow remote attackers to read arbitrary files via …

  • Unscored —
    CVE-2007-5000 EPSS 47%

    Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and …

    apache2 Debian
  • Unscored —
    CVE-2007-5964

    The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the…

    autofs Debian