CVEs published in January 2007
594 vulnerabilities, 54 critical, 0 exploited.
- f5 firepassmy.activation.php3 in F5 FirePass 5.4 through 5.5.1 and 6.0 displays different error messages for...5.0 Medium
- mkportaladmin.php in MKPortal M1.1 RC1 allows remote attackers to obtain sensitive information via a...7.8 High
- fon la foneraFON La Fonera routers do not properly limit DNS service access by unauthenticated clients, which...7.5 High
- mkportalCross-site request forgery (CSRF) vulnerability in the save_main operation in the ad_perms...7.5 High
- mkportalCross-site scripting (XSS) vulnerability in admin.php in MKPortal allows remote attackers to...6.8 Medium
- edit-x ecommercePHP remote file inclusion vulnerability in edit_address.php in edit-x ecommerce allows remote...7.5 High
- geobb georgian bulletin board** DISPUTED ** PHP remote file inclusion vulnerability in index.php in GeoBB Georgian Bulletin...7.5 High
- f5 firepassF5 FirePass 5.4 through 5.5.1 does not properly enforce host access restrictions when a client...6.5 Medium
- f5 firepassF5 FirePass 5.4 through 5.5.2 and 6.0 allows remote attackers to access restricted URLs via (1) a...7.5 High
- f5 firepass 4100Multiple cross-site scripting (XSS) vulnerabilities in F5 FirePass SSL VPN allow remote attackers...6.8 Medium
- getahead direct web remotingDirect Web Remoting vulnerable to Denial of Service5.0 Medium
- getahead direct web remotingIncorrect Authorization in Getahead Direct Web Remoting7.5 High
- sun iplanet web serverCross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote...6.8 Medium
- scriptaty magic photo storage websiteMultiple PHP remote file inclusion vulnerabilities in magic photo storage website allow remote...7.5 High
- scriptaty magic photo storage websitePHP remote file inclusion vulnerability in include/common_function.php in magic photo storage...7.5 High
- ef software commanderStack-based buffer overflow in EF Commander 5.75 allows user-assisted attackers to execute...7.6 High
- phpkitSQL injection vulnerability in comment.php in PHPKIT 1.6.1 R2 allows remote attackers to execute...7.5 High
- php web scripts easy banner proPHP remote file inclusion vulnerability in info.php in Easy Banner Pro 2.8 allows remote...7.5 High
- mediawikiCross-site scripting (XSS) vulnerability in the AJAX module in MediaWiki before 1.6.9, 1.7 before...5.1 Medium
- gforgeCross-site scripting (XSS) vulnerability in search/advanced_search.php in GForge 4.5.11 allows...6.8 Medium
- b2evolutionCross-site scripting (XSS) vulnerability in htsrv/login.php in b2evolution 1.8.6 allows remote...4.3 Medium
- sinaMultiple stack-based multiple buffer overflows in the BRWOSSRE2UC.dll ActiveX Control in Sina...7.5 High
- l2j statistik scriptDirectory traversal vulnerability in index.php in L2J Statistik Script 0.09 and earlier, when...6.8 Medium
- allmyguests project allmyguestsMultiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.3.0 and earlier allow remote...7.5 High
- allmylinks project allmylinksPHP remote file inclusion vulnerability in index.php in AllMyLinks 0.5.0 and earlier allows...7.5 High
- allmyphp allmyvisitorsPHP remote file inclusion vulnerability in index.php in AllMyVisitors 0.4.0 allows remote...7.5 High
- ppc search engine search engine, wgs-ppc +1 moreMultiple PHP file inclusion vulnerabilities in WGS-PPC (aka PPC Search Engine), as distributed...7.5 High
- sun solaris, sunos +1 moreUnspecified vulnerability in libnsl in Sun Solaris 8 and 9 allows remote attackers to cause a...7.8 High
- camouflageCamouflage 1.2.1 embeds password information in the carrier file, which allows remote attackers...7.8 High
- securekit steganographySecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which...7.8 High
- unsanity application enhancerUnsanity Application Enhancer (APE) 2.0.2 installs with insecure permissions for the (1)...6.8 Medium
- hp pml driver hpz12, color laserjet 4650, officejet 4100 +18 more +20 moreThe PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products...4.1 Medium
- centericqStack-based buffer overflow in the LiveJournal support (hooks/ljhook.cc) in CenterICQ 4.9.11...7.5 High
- geoipDirectory traversal vulnerability in the GeoIP_update_database_general function in libGeoIP...6.4 Medium
- microsoft outlook, office +1 moreBuffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and...9.3 High
- microsoft outlook, office +1 moreMicrosoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code...9.3 High
- microsoft excel, excel viewer, office +1 more +3 moreHeap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X...9.3 High
- microsoft excel, excel viewer, office +1 more +3 moreMicrosoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted...9.3 High
- microsoft excel, excel viewer, office +1 more +3 moreMicrosoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted...9.3 High
- microsoft excel, office, excel viewer +1 more +3 moreMicrosoft Excel 2000, 2002, 2003, Viewer 2003, Office 2004 for Mac, and Office v.X for Mac does...9.3 High
- microsoft ie, internet explorer +1 moreInteger overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft...9.3 High
- microsoft excel, excel viewer, office +1 more +3 moreMicrosoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote...9.3 High
- neonArray index error in the uri_lookup function in the URI parser for neon 0.26.0 to 0.26.2,...7.8 High
- m-coreM-Core stores the database under the web document root, which allows remote attackers to obtain...7.5 High
- harikaonlineHarikaOnline 2.0 stores sensitive information under the web root with insufficient access control...7.5 High
- webulasWebulas stores sensitive information under the web root with insufficient access control, which...7.5 High
- adam jarret ajloginAJLogin 3.5 stores sensitive information under the web root with insufficient access control,...7.5 High
- ohhaspOhhASP stores sensitive information under the web root with insufficient access control, which...7.5 High
- mitisoftMitiSoft stores sensitive information under the web root with insufficient access control, which...7.5 High
- dayfox designs blogMultiple PHP remote file inclusion vulnerabilities in index.php in Dayfox Blog allow remote...7.5 High
- Show moreLoading…