Archive
December 2007
Vulnerabilities first published in this month (UTC), newest first.
436 results · Feed
-
Unscored —
scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code by invoking …
-
Unscored —
SquirrelMail 1.4.11 and 1.4.12, as distributed on sourceforge.net before 20071213, has been externally modified to crea…
-
Unscored —CVE-2007-6344 Public exploit
Directory traversal vulnerability in modules/cms/index.php in Mcms Easy Web Make 1.3, allows remote attackers to includ…
-
Unscored —
Cross-site scripting (XSS) vulnerability in Rainboard before 2.10 allows remote attackers to inject arbitrary web scrip…
-
Unscored —
Cross-site scripting (XSS) vulnerability in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remot…
-
Unscored —
SQL injection vulnerability in aurora framework before 20071208 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2007-6347 Public exploit
PHP remote file inclusion vulnerability in blocks/block_site_map.php in ViArt (1) CMS 3.3.2, (2) HelpDesk 3.3.2, (3) Sh…
-
Unscored —
SQL injection vulnerability in the David Castro AuthCAS module (AuthCAS.pm) 0.4 for the Apache HTTP Server allows remot…
-
Unscored —
Stack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a, when the "domain logo…
-
Unscored —
Multiple stack-based buffer overflows in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allow remote at…
-
Unscored —
Unspecified vulnerability in the skype4com URI handler in Skype before 3.6 GOLD allows remote attackers to execute arbi…
-
Unscored —CVE-2007-6322 Public exploit
Directory traversal vulnerability in filedownload.php in xml2owl 0.1.1 allows remote attackers to read arbitrary files …
-
Unscored —
Meridian Prolog Manager 2007, and 7.5 and earlier, sends all usernames and passwords to the client in a (1) cleartext o…
-
Unscored —
DOSBox 0.72 and earlier allows local users to obtain access to the filesystem on the host operating system via the moun…
-
Unscored —
Buffer overflow in a certain ActiveX control in Online Media Technologies AVSMJPEGFILE.DLL 1.1.1.102 allows remote atta…
-
Unscored —
PHP remote file inclusion vulnerability in adminbereich/designconfig.php in Fastpublish CMS 1.9999 allows remote attack…
-
Unscored —CVE-2007-6329 EPSS 16%
Microsoft Office 2007 12.0.6015.5000 and MSO 12.0.6017.5000 do not sign the metadata of Office Open XML (OOXML) documen…
-
Unscored —CVE-2007-6326 Public exploit
Sergey Lyubka Simple HTTPD (shttpd) 1.3 on Windows allows remote attackers to cause a denial of service via a request t…
-
Unscored —
Absolute path traversal vulnerability in the HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with H…
-
Unscored —CVE-2007-6333 Public exploit
The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 …
-
Unscored —CVE-2007-6324 Public exploit
PHP remote file inclusion vulnerability in head.php in CityWriter 0.9.7 allows remote attackers to execute arbitrary PH…
-
Unscored —CVE-2007-6332 Public exploit
The HPInfoDLL.HPInfo.1 ActiveX control in HPInfoDLL.dll 1.0, as shipped with HP Info Center (hpinfocenter.exe) 1.0.1.1 …
-
Unscored —CVE-2007-6323 Public exploit
Multiple directory traversal vulnerabilities in MMS Gallery PHP 1.0 allow remote attackers to read arbitrary files via …
-
Unscored —CVE-2007-5000 EPSS 47%
Cross-site scripting (XSS) vulnerability in the (1) mod_imap module in the Apache HTTP Server 1.3.0 through 1.3.39 and …
-
Unscored —
The default configuration of autofs 5 in some Linux distributions, such as Red Hat Enterprise Linux (RHEL) 5, omits the…
-
Unscored —CVE-2007-6321 Public exploit
Cross-site scripting (XSS) vulnerability in RoundCube webmail 0.1rc2, 2007-12-09, and earlier versions, when using Inte…
-
Unscored —
Feature 4.7.x-dev and 5.x-dev before 20071206, a Drupal module, does not follow Drupal's Forms API submission model, wh…
-
Unscored —CVE-2007-0064 EPSS 36%
Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services…
-
Unscored —CVE-2007-6314 Public exploit
BarracudaDrive Web Server before 3.8 allows remote attackers to read the source code for web scripts by appending a (1)…
-
Unscored —CVE-2007-6315 Public exploit
Group Chat in BarracudaDrive Web Server before 3.8 allows remote authenticated users to cause a denial of service (cras…
-
Unscored —CVE-2007-6316 Public exploit
Cross-site scripting (XSS) vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbi…
-
Unscored —CVE-2007-6318 Public exploit
SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute …
-
Unscored —CVE-2007-6317 Public exploit
Multiple directory traversal vulnerabilities in BarracudaDrive Web Server before 3.8 allow (1) remote attackers to read…
-
Unscored —CVE-2007-3903 EPSS 31%
Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted obje…
-
Unscored —CVE-2007-3895 EPSS 36%
Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitr…
-
Unscored —
Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windo…
-
Unscored —CVE-2007-3902 EPSS 36%
Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through …
-
Unscored —
Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for…
-
Unscored —CVE-2007-5347 EPSS 28%
Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via "unexpected method cal…
-
Unscored —CVE-2007-5351 EPSS 41%
Unspecified vulnerability in Server Message Block Version 2 (SMBv2) signing support in Microsoft Windows Vista allows r…