CVEs published in January 2007
594 vulnerabilities, 54 critical, 0 exploited.
- 212cafe guestbookCross-site scripting (XSS) vulnerability in show.php in 212cafe Guestbook 4.00 beta allows remote...6.8 Medium
- wordpressWordPress allows remote attackers to determine the existence of arbitrary files, and possibly...5.0 Medium
- wordpressWordPress allows remote attackers to cause a denial of service (bandwidth or thread consumption)...5.0 Medium
- wordpressThe wp_remote_fopen function in WordPress before 2.1 allows remote attackers to cause a denial of...7.8 High
- telligent systems community server forumsTelligent Community Server 2.1 and earlier allows remote attackers to cause a denial of service ...5.0 Medium
- andreas gohr dokuwikiCRLF injection vulnerability in lib/exe/fetch.php in DokuWiki 2006-03-09e, and possibly earlier,...4.3 Medium
- kde konquerorThe KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments...2.6 Low
- apple software updateFormat string vulnerability in Apple Software Update 2.0.5 on Mac OS X 10.4.8 allows remote...5.0 Medium
- mailenable professionalMailEnable Professional before 1.78 provides a cleartext user password when an administrator...4.0 Medium
- doceboMultiple PHP remote file inclusion vulnerabilities in Docebo LMS 3.0.3 allow remote attackers to...7.5 High
- joomla rs gallery2PHP remote file inclusion vulnerability in rsgallery2.html.php in the RS Gallery2 component ...6.8 Medium
- webroot software spy sweeperWebRoot Spy Sweeper 4.5.9 and earlier does not detect malware based on file contents, which...6.8 Medium
- webroot software spy sweeperThe Compression Sweep feature in WebRoot Spy Sweeper 4.5.9 and earlier does not handle non-ZIP...6.8 Medium
- webroot software spy sweeperWebRoot Spy Sweeper 4.5.9 and earlier allows local users to bypass the "Startup-Shield" security...4.6 Medium
- phpbluedragon cmsMultiple PHP remote file inclusion vulnerabilities in phpBlueDragon 2.9.1 allow remote attackers...7.5 High
- doceboPHP remote file inclusion vulnerability in addons/mod_media/body.php in Docebo 3.0.3 and earlier,...6.8 Medium
- microsoft internet explorerMicrosoft Internet Explorer allows remote attackers to cause a denial of service (crash) via a...4.3 Medium
- opera browserOpera allows remote attackers to cause a denial of service (application crash) via a web page...4.3 Medium
- flockFlock beta 1 0.7 allows remote attackers to cause a denial of service (application crash) via a...4.3 Medium
- globetrotter mobility managerThe virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key...2.1 Low
- rpath linuxThe chroot helper in rMake for rPath Linux 1 does not drop supplemental groups, which causes...7.2 High
- vote pro proMultiple eval injection vulnerabilities in Vote! Pro 4.0, and possibly earlier, allow remote...7.5 High
- drupal project, project issue tracking module +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the (1) Project issue tracking 4.7.0...4.3 Medium
- atozed software intraweb componentThe AToZed IntraWeb component 8.0 and earlier for Borland Delphi and Kylix, and IntraWeb 9.0...5.0 Medium
- tuan do uploaderTuan Do Uploader (aka php-uploader) 6 beta 1 stores sensitive information under the web root with...5.0 Medium
- freewebshopPHP remote file inclusion vulnerability in includes/login.php in FreeWebShop 2.2.3 and 2.2.4...7.5 High
- advanced guestbook guestbook** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Advanced Guestbook 2.4.2...7.5 High
- php link directory link directoryCross-site scripting (XSS) vulnerability in index.html (aka the administration page) in PHP Link...4.3 Medium
- centrality communications pa168 chipsetThe admin web console implemented by the Centrality Communications (aka Aredfox) PA168 chipset...9.0 High
- website baker bakerSQL injection vulnerability in the is_remembered function in class.login.php in Website Baker 2.6...6.8 Medium
- bitweaverMultiple cross-site scripting (XSS) vulnerabilities in Bitweaver 1.3.1 allow remote attackers to...4.3 Medium
- grigoriadis mini web serverMultiple buffer overflows in Nickolas Grigoriadis Mini Web server (MiniWebsvr) before 0.05 have...7.5 High
- lg electronics chocolate kg800The LG Chocolate KG800 phone allows remote attackers to cause a denial of service (continual...2.9 Low
- nokia n70The Nokia N70 phone allows remote attackers to cause a denial of service (continual modal dialogs...3.3 Low
- motorola motorazrThe Motorola MOTORAZR V3 phone allows remote attackers to cause a denial of service (continual...3.3 Low
- sony ericsson k700i, w810i +1 moreThe Sony Ericsson K700i and W810i phones allow remote attackers to cause a denial of service ...3.3 Low
- unique ads adsSQL injection vulnerability in banner.php in Unique Ads (UDS) 1.x allows remote attackers to...7.5 High
- xmb software u2u instant messengerCross-site scripting (XSS) vulnerability in memcp.php in XMB U2U Instant Messenger allows remote...3.5 Low
- scriptsez smart php subscriberScriptsez Smart PHP Subscriber (aka subscribe) stores sensitive information under the web root...7.5 High
- scriptsez random php quoteScriptsez Random PHP Quote 1.0 stores sensitive information under the web root with insufficient...7.5 High
- yana framework frameworkYana Framework before 2.8.5a allows remote authenticated users with permissions to modify a...4.9 Medium
- apple mac os x, quicktime +1 moreThe _GetSrcBits32ARGB function in Apple QuickDraw, as used by Quicktime 7.1.3 and other...10.0 High
- microsoft word, office, word viewer +1 more +3 moreUnspecified vulnerability in Microsoft Word allows user-assisted remote attackers to execute...9.3 High
- hitachi web server, cosminexus application server, cosminexus application server version 5 +16 more +18 moreMultiple cross-site scripting (XSS) vulnerabilities in multiple Hitachi Web Server, uCosminexus,...6.8 Medium
- hitachi hirdb datareplicator, hirdb parallel server, hirdb single server +2 more +4 moreHitachi HiRDB Datareplicator 7HiRDB, 7(64), 6, 6(64), 5.0, and 5.0(64); and various products that...5.0 Medium
- hitachi tpi link, tpi server base +1 moreHitachi TP1/LiNK 05-00 through 05-03-/F, 03-04 through 03-06-/K, and 03-00 through 03-03-/H; and...5.0 Medium
- phpxmldomMultiple PHP remote file inclusion vulnerabilities in phpXMLDOM (phpXD) 0.3 and earlier allow...6.8 Medium
- awffullMultiple buffer overflows in (1) graphs.c, (2) output.c, and (3) preserve.c in AWFFull 3.7.1 and...10.0 High
- maklerplusMultiple unspecified vulnerabilities in MaklerPlus before 1.2 have unknown impact and attack...9.3 High
- bbclonePHP remote file inclusion vulnerability in lib/selectlang.php in BBClone 0.31 allows remote...7.5 High
- Show moreLoading…