CVEs published in January 2007
594 vulnerabilities, 54 critical, 0 exploited.
- bitdefender clientFormat string vulnerability in the log creation functionality of BitDefender Client Professional...7.2 High
- sabros.usCross-site scripting (XSS) vulnerability in index.php in sabros.us 1.7 allows remote attackers to...6.8 Medium
- arsdigita community education solution, community system +1 moreDirectory traversal vulnerability in ArsDigita Community System (ACS) 3.4.10 and earlier, and...7.8 High
- woltlab burning boardSQL injection vulnerability in search.php in Woltlab Burning Board (wBB) 1.0.2 and earlier, and 2...7.5 High
- joomlaSQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN...7.5 High
- postnuke software foundation postnukeUnspecified vulnerability in the rating section in PostNuke 0.764 has unknown impact and attack...10.0 High
- postnuke software foundation postnukeThe faq section in PostNuke 0.764 allows remote attackers to obtain sensitive information (the...7.8 High
- postnuke software foundation postnukeCross-site scripting (XSS) vulnerability in preview in the reviews section in PostNuke 0.764...5.1 Medium
- wdaemon** DISPUTED ** WDaemon 9.5.4 allows remote attackers to access the /WorldClient.dll URI on TCP...5.0 Medium
- lettermanMultiple SQL injection vulnerabilities in letterman.class.php in the Letterman 1.2.3 ...7.5 High
- adaptive technology resource centre atutorMultiple SQL injection vulnerabilities in ATutor 1.5.3.2 allow remote attackers to execute...7.5 High
- docmanDocMan 1.3 RC2 allows remote attackers to obtain sensitive information (the full path) via...5.0 Medium
- docmanCross-site scripting (XSS) vulnerability in DocMan 1.3 RC2 allows remote attackers to inject...6.8 Medium
- docmanMultiple SQL injection vulnerabilities in DocMan 1.3 RC2 allow attackers to execute arbitrary SQL...7.5 High
- xoopsMultiple SQL injection vulnerabilities in Xoops 2.0.16 allow remote attackers to execute...7.5 High
- virtuemartCross-site scripting (XSS) vulnerability in Virtuemart 1.0.7 allows remote attackers to inject...6.8 Medium
- joomlaJoomla! 1.5.0 Beta allows remote attackers to obtain sensitive information via a direct request...5.0 Medium
- joomla, mambo +1 moreSQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Beta, and (2) Mambo 4.6.1, allows...7.5 High
- joomlaMultiple SQL injection vulnerabilities in Joomla! 1.5.0 Beta allow remote attackers to execute...6.8 Medium
- francisco burzi php-nukeMultiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to...7.5 High
- common controls replacement project browsedialog serverA certain ActiveX control in the Common Controls Replacement Project (CCRP) CCRP BrowseDialog...4.3 Medium
- phpbpUnrestricted file upload vulnerability in index.php in phpBP RC3 (2.204) and earlier allows...7.5 High
- phpbpSQL injection vulnerability in phpBP RC3 (2.204) and earlier allows remote attackers to execute...7.5 High
- michiel broek mbse-bbsStack-based buffer overflow in mbse-bbs 0.70 and earlier allows local users to execute arbitrary...10.0 High
- virtuemartSQL injection vulnerability in Virtuemart 1.0.7 allows remote attackers to execute arbitrary SQL...7.5 High
- maxum development corporation rumpus ftp serverRumpus 5.1 and earlier has weak permissions for certain files and directories under /usr/local...4.6 Medium
- maxum development corporation rumpus ftp serverUntrusted search path vulnerability in Rumpus 5.1 and earlier allows local users to gain...4.6 Medium
- maxum development corporation rumpus ftp serverMultiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote...6.5 Medium
- nicola asuni all in one control panelMultiple cross-site scripting (XSS) vulnerabilities in All In One Control Panel (AIOCP) 1.3.009...6.8 Medium
- nicecoder indexuMultiple cross-site scripting (XSS) vulnerabilities in nicecoder.com INDEXU 5.3 and earlier allow...4.3 Medium
- phpmyadminphpMyAdmin before 2.9.1.1 allows remote attackers to bypass Allow/Deny access rules that use IP...7.5 High
- phpmyadminPhpMyAdmin before 2.9.1.1 allows remote attackers to obtain the full server path via direct...5.0 Medium
- phpmyadmin, debian linux +1 moreMultiple cross-site scripting (XSS) vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote...6.8 Medium
- openadsCross-site scripting (XSS) vulnerability in admin-search.php in (1) Openads for PostgreSQL (aka...6.8 Medium
- freshreaderCross-site scripting (XSS) vulnerability in the RSS feed component in FreshReader before 1.0...6.8 Medium
- comscripts phpmyphorumPHP remote file inclusion vulnerability in mep/frame.php in PHPMyphorum 1.5a allows remote...7.5 High
- oreon project oreonPHP remote file inclusion vulnerability in lang/index.php in Oreon 1.2.3 RC4 and earlier allows...7.5 High
- uberghey cmsPHP remote file inclusion vulnerability in frontpage.php in Uberghey CMS 0.3.1 allows remote...7.5 High
- hp jetdirect firmwareUnspecified vulnerability in the FTP server implementation in HP Jetdirect firmware x.20.nn...7.8 High
- fritzdslDirectory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote...5.0 Medium
- microsoft ie, common controls replacement project foldertreeview activex control +1 moreThe Common Controls Replacement Project (CCRP) FolderTreeview (FTV) ActiveX control (ccrpftv6.ocx...5.0 Medium
- apple mac os x, minimal slp service agent +1 moreBuffer overflow in the Apple Minimal SLP v2 Service Agent (slpd) in Mac OS X 10.4.11 and earlier,...7.2 High
- mgb opensource guestbookSQL injection vulnerability in email.php in MGB OpenSource Guestbook 0.5.4.5 and earlier allows...7.5 High
- mywebland mybloggieCross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5...6.8 Medium
- microsoft html help workshopStack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote...9.3 High
- zonelabs zonealarmMicrosoft Windows XP and Windows Server 2003 do not properly handle user logoff, which might...6.2 Medium
- sme filemailerMultiple SQL injection vulnerabilities in (a) index.php and (b) dl.php in SmE FileMailer 1.21 and...7.5 High
- pentaware pentasuite-pro, pentazip +1 morechoShilA.bpl in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows local users, and user...7.1 High
- pentaware pentasuite-pro, pentazip +1 moreDirectory traversal vulnerability in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows user...4.3 Medium
- nicecoder indexuDirectory traversal vulnerability in upgrade.php in nicecoder.com INDEXU 5.x allows remote...5.0 Medium
- Show moreLoading…