CVEs published in January 2007
594 vulnerabilities, 54 critical, 0 exploited.
- emembersproEMembersPro 1.0 stores sensitive information under the web root with insufficient access control,...7.5 High
- omnigroup omniwebFormat string vulnerability in OmniGroup OmniWeb 5.5.1 allows remote attackers to cause a denial...6.8 Medium
- cuyahogaCuyahoga before 1.0.1 installs the FCKEditor component with an incorrect deny statement in a Web...5.0 Medium
- fix and chips computer services and chips cmsMultiple cross-site scripting (XSS) vulnerabilities in Fix and Chips CMS 1.0 allow remote...6.0 Medium
- bingo news newsPHP remote file inclusion vulnerability in bn_smrep1.php in BinGoPHP News (BP News) 3.01 allows...7.5 High
- digitizing quote and ordering system quote and ordering systemCross-site scripting (XSS) vulnerability in search.asp in Digitizing Quote And Ordering System 1...6.8 Medium
- nune news scriptMultiple PHP remote file inclusion vulnerabilities in NUNE News Script 2.0pre2 allow remote...6.8 Medium
- shopstorenow e-commerce shopping cartSQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote...7.5 High
- yet another link directory another link directoryCross-site scripting (XSS) vulnerability in yald.php in Yet Another Link Directory 1.0 allows...6.8 Medium
- kolayindir download downloadSQL injection vulnerability in down.asp in Kolayindir Download (Yenionline) allows remote...7.5 High
- hp openvmsUnspecified vulnerability in the DECnet-Plus 7.3-2 feature in DECnet/OSI 7.3-2 for OpenVMS ALPHA,...7.5 High
- fersch formbankserverformbankcgi.exe in Fersch Formbankserver 1.9, when the PATH_INFO begins with (1) AbfrageForm or ...5.0 Medium
- serendipitynz serene bach, serene bach sb +1 moreCross-site scripting (XSS) vulnerability in SimpleBoxes/SerendipityNZ Serene Bach 2.05R and...6.8 Medium
- drupalMultiple cross-site scripting (XSS) vulnerabilities in Drupal before 4.6.11, and 4.7 before 4.7.5...4.3 Medium
- aratixPHP remote file inclusion vulnerability in inc/init.inc.php in Aratix 0.2.2 beta 11 and earlier,...6.8 Medium
- igeneric ig shopMultiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute...7.5 High
- igeneric ig shopMultiple SQL injection vulnerabilities in display_review.php in iGeneric iG Shop 1.4 and earlier...7.5 High
- igeneric ig shopSQL injection vulnerability in compare_product.php in iGeneric iG Shop 1.4 allows remote...7.5 High
- jamwikiJAMWiki before 0.5.0 does not properly check permissions during moves of "read-only or admin-only...7.5 High
- igeneric ig calendarSQL injection vulnerability in user.php in iGeneric iG Calendar 1.0 allows remote attackers to...7.5 High
- locazo locazolist classifiedsSQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows remote...7.5 High
- digiappz digirezSQL injection vulnerability in info_book.asp in Digirez 3.4 and earlier allows remote attackers...7.5 High
- opera browserThe Javascript SVG support in Opera before 9.10 does not properly validate object types in a...9.3 High
- opera browserHeap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a...9.3 High
- kaspersky lab antivirus engineKaspersky Labs Antivirus Engine 6.0 for Windows and 5.5-10 for Linux before 20070102 enter an...5.0 Medium
- drupalUnspecified vulnerability in Drupal before 4.6.11, and 4.7 before 4.7.5, when MySQL is used,...3.5 Low
- uber uploader uploaderUnrestricted file upload vulnerability in Uber Uploader 4.2 allows remote attackers to upload and...6.8 Medium
- coppermine photo galleryMultiple SQL injection vulnerabilities in Coppermine Photo Gallery 1.4.10 and earlier allow...6.5 Medium
- michael romedahl ri blogCross-site scripting (XSS) vulnerability in search.asp in RI Blog 1.3 allows remote attackers to...6.8 Medium
- acunetix web vulnerability scannerAcunetix Web Vulnerability Scanner (WVS) 4.0 Build 20060717 and earlier allows remote attackers...1.9 Low
- edittagMultiple cross-site scripting (XSS) vulnerabilities in EditTag 1.2 allow remote attackers to...6.8 Medium
- edittagMultiple absolute path traversal vulnerabilities in EditTag 1.2 allow remote attackers to read...4.3 Medium
- apple mac os x, mac os x server +1 moreDiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly...10.0 High
- digger solutions intranet open sourceDigger Solutions Intranet Open Source (IOS) stores sensitive information under the web root with...7.5 High
- coppermine photo galleryStatic code injection vulnerability in Coppermine Photo Gallery 1.4.10 and earlier allows remote...6.0 Medium
- sun java system content delivery serverSun Java System Content Delivery Server 5.0 and 5.0 PU1 allows remote attackers to obtain...5.0 Medium
- packeteer packetwiseBuffer overflow in Packeteer PacketShaper PacketWise 8.x allows remote authenticated users to...6.8 Medium
- createauctionSQL injection vulnerability in cats.asp in createauction allows remote attackers to execute...7.5 High
- resco photo viewerBuffer overflow in Resco Photo Viewer for PocketPC 4.11 and 6.01, as used in mobile devices...6.8 Medium
- novell access manager identity serverCross-site scripting (XSS) vulnerability in nidp/idff/sso in Novell Access Manager Identity...6.8 Medium
- wordpresswp-login.php in WordPress 2.0.5 and earlier displays different error messages if a user exists or...5.0 Medium
- novell clientnwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles...6.0 Medium
- wordpressWordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after...6.8 Medium
- wordpressCross-site scripting (XSS) vulnerability in the CSRF protection scheme in WordPress before 2.0.6...6.8 Medium
- cisco secure access control serverStack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS)...7.5 High
- kde, xpdf +1 moreThe Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before...6.8 Medium
- adobe acrobat readerThe Adobe PDF specification 1.3, as implemented by Adobe Acrobat before 8.0.0, allows remote...6.8 Medium
- apple previewThe Adobe PDF specification 1.3, as implemented by Apple Mac OS X Preview, allows remote...6.8 Medium
- spineCross-site request forgery (CSRF) vulnerability in SPINE allows remote attackers to perform...6.8 Medium
- perforce clientThe Perforce client does not restrict the set of files that it overwrites upon receiving a...10.0 High
- Show moreLoading…