CVEs published in January 2007
594 vulnerabilities, 54 critical, 0 exploited.
- microsoft internet explorer, xml core services +1 moreRace condition in the msxml3 module in Microsoft XML Core Services 3.0, as used in Internet...9.3 High
- verliadminDirectory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when...6.8 Medium
- conexware powerarchiver 2006Multiple stack-based buffer overflows in the (1) LoadTree and (2) ReadHeader functions in PAISO...9.3 High
- carbon communities communitiesCarbonCommunities stores sensitive information under the web root with insufficient access...7.5 High
- phpmyadminphpMyAdmin 2.9.1.1 allows remote attackers to obtain sensitive information via a direct request...5.0 Medium
- sven moderow guestbookSven Moderow GuestBook 0.3a stores sensitive information under the web root with insufficient...7.5 High
- cms-center simple web cmsSQL injection vulnerability in page.php in Simple Web Content Management System allows remote...7.5 High
- e-smart cart cartSQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to...7.5 High
- katy whitton web development newscmslitenewsCMSlite stores sensitive information under the web root with insufficient access control,...7.5 High
- fermentigrafici wineglassWineGlass stores sensitive information under the web root with insufficient access control, which...7.5 High
- jgbbsjgbbs stores sensitive information under the web root with insufficient access control, which...7.5 High
- openmediaMultiple directory traversal vulnerabilities in openmedia allow remote attackers to read...5.0 Medium
- microsoft internet information server** DISPUTED ** Microsoft Internet Information Services (IIS), when accessed through a TCP...7.8 High
- apache http server** DISPUTED ** The Apache HTTP Server, when accessed through a TCP connection with a large...7.8 High
- openbsdUnspecified vulnerability in sys/dev/pci/vga_pci.c in the VGA graphics driver for wscons in...6.0 Medium
- microsoft message compiler** DISPUTED ** Buffer overflow in the Windows NT Message Compiler (MC) 1.00.5239 on Microsoft...6.6 Medium
- nuked-klanCross-site scripting (XSS) vulnerability in Nuked Klan 1.7 and earlier allows remote attackers to...6.8 Medium
- imgalleryusers_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple...6.5 Medium
- sunbelt kerio personal firewallSunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows...6.8 Medium
- freeradius** DISPUTED ** Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 and...6.6 Medium
- rblogrblog stores sensitive information under the web root with insufficient access control, which...7.8 High
- battleblogBattleBlog stores sensitive information under the web root with insufficient access control,...5.0 Medium
- lbloglblog stores sensitive information under the web root with insufficient access control, which...5.0 Medium
- 2enetworx openforumOpenforum stores sensitive information under the web root with insufficient access control, which...7.5 High
- aspbbAspBB stores sensitive information under the web root with insufficient access control, which...7.5 High
- apple quicktimeCross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted...6.8 Medium
- cisco network admission control manager and server system softwareCisco Clean Access (CCA) 3.5.x through 3.5.9 and 3.6.x through 3.6.1.1 on the Clean Access...7.8 High
- cisco network admission control manager and server system softwareCisco Clean Access (CCA) 3.6.x through 3.6.4.2 and 4.0.x through 4.0.3.2 does not properly...10.0 High
- ashopsoftware ashop administration panel, ashop deluxe +1 moreMultiple cross-site scripting (XSS) vulnerabilities in AShop Deluxe 4.5 and AShop Administration...6.8 Medium
- fersch formbankserverDirectory traversal vulnerability in formbankcgi.exe/AbfrageForm in Formbankserver 1.9 allows...5.0 Medium
- belchior foundry vcard proCross-site scripting (XSS) vulnerability in gbrowse.php in Belchior Foundry vCard PRO allows...6.8 Medium
- asp siteware autodealerSQL injection vulnerability in detail.asp in ASP SiteWare autoDealer 2.0 and earlier allows...7.5 High
- vizayn haber haberSQL injection vulnerability in haberdetay.asp in Vizayn Haber allows remote attackers to execute...7.5 High
- apple iphotoFormat string vulnerability in Apple iPhoto 6.0.5 (316), and other versions before 6.0.6, allows...6.8 Medium
- openpinboard** DISPUTED ** PHP remote file inclusion vulnerability in index.php in OpenPinboard 2.0 allows...7.5 High
- geckovich tasktracker, tasktracker pro +1 moreGeckovich TaskTracker Pro 1.5 and earlier allows remote attackers to add administrative or other...7.5 High
- adobe acrobat, acrobat reader, acrobat 3d +2 moreAdobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7...5.0 Medium
- adobe acrobat readerCRLF injection vulnerability in Adobe Acrobat Reader Plugin before 8.0.0, when used with the...6.8 Medium
- adobe acrobat readerDouble free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla...7.5 High
- adobe acrobat, acrobat reader, acrobat 3d +2 moreMultiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0,...4.3 Medium
- adobe acrobat, acrobat reader, acrobat 3d +2 moreAdobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web...4.3 Medium
- videolan vlc media playerMultiple format string vulnerabilities in (1) the cdio_log_handler function in modules/access...6.8 Medium
- netfarer movieplayStack-based buffer overflow in MoviePlay 4.76 allows remote attackers to execute arbitrary code...7.5 High
- apple quicktimeBuffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a...6.8 Medium