CVEs published in January 2007
594 vulnerabilities, 54 critical, 0 exploited.
- efs software easy chat serverEasy Chat Server 2.1 stores sensitive information under the web root with insufficient access...7.8 High
- image gallery with access database gallery with access databaseMultiple SQL injection vulnerabilities in Image Gallery with Access Database allow remote...7.5 High
- snortAlgorithmic complexity vulnerability in Snort before 2.6.1, during predicate evaluation in rule...5.0 Medium
- broadcom brightstor arcserve backup, ca protection suites, broadcom brightstor enterprise backup +2 moreStack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA)...10.0 High
- broadcom brightstor arcserve backup, ca protection suites, broadcom brightstor enterprise backup +2 moreStack-based buffer overflow in the RPC interface in Mediasvr.exe in Computer Associates (CA)...10.0 High
- time-travellers oftpdoftpd before 0.3.7 allows remote attackers to cause a denial of service (daemon abort) via a (1)...7.5 High
- dt guestbook guestbookCross-site scripting (XSS) vulnerability in index.php in DT Guestbook (dt_guestbook) 1.0f, when...5.1 Medium
- squidThe aclMatchExternal function in Squid before 2.6.STABLE7 allows remote attackers to cause a...5.0 Medium
- squidsquid/src/ftp.c in Squid before 2.6.STABLE7 allows remote FTP servers to cause a denial of...5.0 Medium
- apple mac os xDouble free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other...10.0 High
- libgtopStack-based buffer overflow in the glibtop_get_proc_map_s function in libgtop before 2.14.6 ...3.7 Low
- wordpresswp-trackback.php in WordPress 2.0.6 and earlier does not properly unset variables when the input...7.5 High
- jshop e-commerce serverPHP remote file inclusion vulnerability in routines/fieldValidation.php in Jshop Server 1.3...7.5 High
- six apart movable typeCross-site scripting (XSS) vulnerability in Movable Type (MT) 3.33, when nofollow is disabled and...6.8 Medium
- cs-cart** DISPUTED ** PHP remote file inclusion vulnerability in install.php in CS-Cart 1.3.3 allows...7.5 High
- apple mac os x, freebsd, apple mac os x server +2 moreInteger overflow in the ffs_mountfs function in Mac OS X 10.4.8 and FreeBSD 6.1 allows local...7.2 High
- eiqnetworks enterprise security analyzerThe DataCollector service in EIQ Networks Network Security Analyzer allows remote attackers to...5.0 Medium
- slocateslocate 3.1 does not properly manage database entries that specify names of files in protected...5.0 Medium
- uniforumSQL injection vulnerability in wbsearch.aspx in uniForum 4 and earlier allows remote attackers to...7.5 High
- virtual programming vp-aspCross-site scripting (XSS) vulnerability in shopcustadmin.asp in VP-ASP Shopping Cart 6.09 and...6.8 Medium
- virtual programming vp-aspSQL injection vulnerability in shopgiftregsearch.asp in VP-ASP Shopping Cart 6.09 and earlier...7.5 High
- nicola asuni all in one control panelSQL injection vulnerability in shared/code/cp_functions_downloads.php in Nicola Asuni All In One...7.5 High
- ga soft rapid classifiedSQL injection vulnerability in viewad.asp in Rapid Classified 3.1 allows remote attackers to...7.5 High
- ga soft rapid classifiedMultiple cross-site scripting (XSS) vulnerabilities in Rapid Classified 3.1 allow remote...6.8 Medium
- grandora rialtoMultiple cross-site scripting (XSS) vulnerabilities in Rialto 1.6 allow remote attackers to...6.8 Medium
- grandora rialtoMultiple SQL injection vulnerabilities in Rialto 1.6 allow remote attackers to execute arbitrary...7.5 High
- extremailBuffer overflow in eXtremail 2.1 has unknown impact and attack vectors, as demonstrated by...10.0 High
- bitweaverMultiple cross-site scripting (XSS) vulnerabilities in bitweaver 1.3.1 and earlier allow remote...6.8 Medium
- bitweaverbitweaver 1.3.1 and earlier allows remote attackers to obtain sensitive information via a...5.0 Medium
- bitweaverSQL injection vulnerability in newsletters/edition.php in bitweaver 1.3.1 and earlier allows...7.5 High
- deadlock user management system user management systemSQL injection vulnerability in Deadlock User Management System (phpdeadlock) 0.64 and earlier...7.5 High
- linux kernelUnspecified versions of the Linux kernel allow local users to cause a denial of service ...2.1 Low
- hp openview network node managerUnspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, and 7.50...5.0 Medium
- libsoupThe soup_headers_parse function in soup-headers.c for libsoup HTTP library before 2.2.99 allows...7.8 High
- nucleus cms cmsCross-site scripting (XSS) vulnerability in Nucleus before 3.24 allows remote attackers to inject...6.8 Medium
- sage-mozdev sageFirefox Sage extension 1.3.8 and earlier allows remote attackers to execute arbitrary Javascript...6.8 Medium
- geobbUnspecified vulnerability in the Admin login for Georgian discussion board (GeoBB) before 1.0 has...10.0 High
- alexphpteam alex guestbookDirectory traversal vulnerability in admin/skins.php for @lex Guestbook 4.0.2 and earlier allows...7.5 High
- broadcom brightstor arcserve backup, business protection suite, brightstor enterprise backup +2 moreMultiple buffer overflows in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11...7.5 High
- broadcom brightstor arcserve backup, business protection suite, brightstor enterprise backup +2 moreThe Tape Engine service in Computer Associates (CA) BrightStor ARCserve Backup 9.01 through 11.5,...7.5 High
- freebsdThe jail rc.d script in FreeBSD 5.3 up to 6.2 does not verify pathnames when writing to /var/log...6.6 Medium
- phpmyadminMultiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.9.2-rc1 allow remote...6.8 Medium
- phpmyadminMultiple unspecified vulnerabilities in phpMyAdmin before 2.9.2-rc1 have unknown impact and...10.0 High
- alexphpteam alex guestbookSQL injection vulnerability in index.php in @lex Guestbook 4.0.2 and earlier, when...7.5 High
- tis internet firewall toolkitBuffer overflow in the cmd_usr function in ftp-gw in TIS Internet Firewall Toolkit (FWTK) allows...10.0 High
- geoffrey golliher axiom photo news galleryPHP remote file inclusion vulnerability in template.php in Geoffrey Golliher Axiom Photo/News...7.5 High
- cisco iosThe Data-link Switching (DLSw) feature in Cisco IOS 11.0 through 12.4 allows remote attackers to...5.0 Medium
- cisco ip contact center enterprise, ip contact center hosted, unified contact center enterprise +1 more +3 moreThe JTapi Gateway process in Cisco Unified Contact Center Enterprise, Unified Contact Center...5.0 Medium
- apple mac os xFinder 10.4.6 on Apple Mac OS X 10.4.8 allows user-assisted remote attackers to cause a denial of...6.8 Medium
- motionborg web real estateSQL injection vulnerability in admin_check_user.asp in Motionborg Web Real Estate 2.1 and earlier...7.5 High
- Show moreLoading…