CVEs published in December 2006
779 vulnerabilities, 90 critical, 0 exploited.
- enthrallweb eclassifiedsMultiple SQL injection vulnerabilities in Enthrallweb eClassifieds allow remote attackers to...7.5 High
- lynx internet solutions evolve merchant** DISPUTED ** SQL injection vulnerability in products.asp in Evolve shopping cart (aka Evolve...7.5 High
- warhound general shopping cartSQL injection vulnerability in item.asp in WarHound General Shopping Cart allows remote attackers...7.5 High
- enthrallweb ehomesMultiple cross-site scripting (XSS) vulnerabilities in result.asp in Enthrallweb eHomes allow...6.8 Medium
- enthrallweb ehomesMultiple SQL injection vulnerabilities in Enthrallweb eHomes allow remote attackers to execute...7.5 High
- krishan flysprayDirectory traversal vulnerability in startdown.php in the Flyspray ME 1.0.1 (com_flyspray)...5.0 Medium
- nukeaiPHP remote file inclusion vulnerability in modules/NukeAI/util.php in the NukeAI 0.0.3 Beta...7.5 High
- borland software developer studio, idsql32.dll, revilloc mailserver +3 more +5 moreHeap-based buffer overflow in Borland idsql32.dll 5.1.0.4, as used by RevilloC MailServer; 5.2.0...7.5 High
- francisco burzi php-nukeMultiple SQL injection vulnerabilities in the (1) rate_article and (2) rate_complete functions in...7.5 High
- blazevideo blaze dvdStack-based buffer overflow in BlazeVideo BlazeDVD Standard and Professional 5.0, and possibly...7.5 High
- cpanel webhost managerMultiple cross-site scripting (XSS) vulnerabilities in cPanel WebHost Manager (WHM) 3.1.0 allow...6.0 Medium
- b2evolutionMultiple cross-site scripting (XSS) vulnerabilities in b2evolution 1.8.2 through 1.9 beta allow...6.8 Medium
- fixit knowledge solutions idms pro image galleryCross-site scripting (XSS) vulnerability in the search functionality in Fixit iDMS Pro Image...6.8 Medium
- fixit knowledge solutions idms pro image galleryMultiple SQL injection vulnerabilities in Fixit iDMS Pro Image Gallery allow remote attackers to...7.5 High
- fisasp.com ultimate survey proMultiple SQL injection vulnerabilities in index.asp in Ultimate Survey Pro allow remote attackers...7.5 High
- basicforumSQL injection vulnerability in edit.asp in BasicForum 1.1 and earlier allows remote attackers to...7.5 High
- 8pixel.net simple blogUnspecified scripts in the admin directory in 8pixel.net SimpleBlog 3.0 and earlier do not...7.5 High
- 8pixel.net simple blogSQL injection vulnerability in admin/edit.asp in 8pixel.net simpleblog 2.3 and earlier allows...7.5 High
- anna irc bot anna\^ irc botSQL injection vulnerability in anna.pl in Anna^ IRC Bot before 0.30 (aka caprice) allows remote...7.5 High
- clicktech clickblogSQL injection vulnerability in displayCalendar.asp in ClickTech Click Blog allows remote...7.5 High
- clicktech clickgalleryCross-site scripting (XSS) vulnerability in view_search.asp in ClickTech Click Gallery allows...4.3 Medium
- clicktech clickgalleryMultiple SQL injection vulnerabilities in ClickTech Click Gallery allow remote attackers to...7.5 High
- enomphpMultiple directory traversal vulnerabilities in enomphp 4.0 allow remote attackers to read...5.0 Medium
- wabbit php galleryDirectory traversal vulnerability in script.php in Wabbit PHP Gallery 0.9 allows remote attackers...5.0 Medium
- alliedtelesyn at-tftpMultiple stack-based buffer overflows in Allied Telesyn TFTP Server (AT-TFTP) 1.9, and possibly...10.0 High
- 3com 3ctftpsvcMultiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote...10.0 High
- gabriele teotino gnotebookThe Gabriele Teotino GNotebook 0.7.0.1 gadget for Google Desktop stores Gmail passwords in...2.1 Low
- clicktech clickcontactMultiple SQL injection vulnerabilities in default.asp in ClickTech ClickContact allow remote...7.5 High
- expinion.net inews publisherCross-site scripting (XSS) vulnerability in articles.asp in Expinion.net iNews Publisher (iNP) 2...6.8 Medium