CVEs published in January 2007
594 vulnerabilities, 54 critical, 0 exploited.
- sitemanSiteman 1.1.11 stores sensitive information under the web root with insufficient access control,...5.0 Medium
- indexcor ezdatabaseCross-site scripting (XSS) vulnerability in EzDatabase 2.1.3 allows remote attackers to inject...6.8 Medium
- vu le an virtual pathPHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path (VirtualPath) 1...7.5 High
- forum livre livreCross-site scripting (XSS) vulnerability in busca2.asp in Forum Livre 1.0 remote attackers to...5.8 Medium
- forum livre livreSQL injection vulnerability in Forum Livre 1.0 allows remote attackers to execute arbitrary SQL...7.5 High
- apple mac os x, quicktime +1 moreThe InternalUnpackBits function in Apple QuickDraw, as used by Quicktime 7.1.3 and other...7.1 High
- webfwloginclude/debug.php in Webfwlog 0.92 and earlier, when register_globals is enabled, allows remote...9.3 High
- g-neric php generic library and frameworkPHP remote file inclusion vulnerability in membres/membreManager.php in PhP Generic Library &...7.5 High
- http commander commanderMultiple cross-site scripting (XSS) vulnerabilities in HTTP Commander 6.0, and possibly earlier,...4.3 Medium
- chernobileSQL injection vulnerability in default.asp in ChernobiLe 1.0 allows remote attackers to execute...7.5 High
- eclipsebbPHP remote file inclusion vulnerability in functions.php in EclipseBB 0.5.0 Lite allows remote...7.5 High
- javier suarez sanz foro domusPHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to...6.8 Medium
- horde groupwareUnspecified vulnerability in the calendar component in Horde Groupware Webmail Edition before 1.0...5.1 Medium
- mpg123The http_open function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a...4.3 Medium
- acgvclickPHP remote file inclusion vulnerability in function.inc.php in ACGVclick 0.2.0 and earlier allows...7.5 High
- xt-statsPHP remote file inclusion vulnerability in xt_counter.php in Xt-Stats 2.3.x up to 2.4.0.b3 allows...7.5 High
- stefan holmberg admentorMultiple SQL injection vulnerabilities in the administrative login page (admin/login.asp) in...7.5 High
- spoonlabs vivvo article management cmsSQL injection vulnerability in rss/show_webfeed.php in SpoonLabs Vivvo Article Management CMS ...7.5 High
- nsgalphpPHP remote file inclusion vulnerability in includes/config.inc.php in nsGalPHP 0.41 and earlier...7.5 High
- drunken golem gaming portalPHP remote file inclusion vulnerability in include/irc/phpIRC.php in Drunken:Golem Gaming Portal...7.5 High
- phpmyreportsPHP remote file inclusion vulnerability in include/lib/lib_head.php in phpMyReports 3.0.11 and...7.5 High
- johannes gijsbers ad fundum integratable news scriptPHP remote file inclusion vulnerability in ains_main.php in Johannes Gijsbers (aka Taradino) Ad...7.5 High
- x-dev xnewsSQL injection vulnerability in xNews.php in xNews 1.3 allows remote attackers to execute...7.5 High
- myphpcommanderPHP remote file inclusion vulnerability in system/lib/package.php in MyPHPCommander 2.0 allows...7.5 High
- interactive-scripts.com php membership managerCross-site scripting (XSS) vulnerability in admin.php in Interactive-Scripts.Com PHP Membership...6.8 Medium
- cfnetworkThe _CFNetConnectionWillEnqueueRequests function in CFNetwork 129.19 on Apple Mac OS X 10.4...5.0 Medium
- gd graphics library project graphics library, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreBuffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and...7.5 High
- asp news newsSQL injection vulnerability in news_detail.asp in ASP NEWS 3 and earlier allows remote attackers...7.5 High
- cgi-rescue shopping basket professionalCGI-Rescue Shopping Basket Professional 7.50 and earlier allows remote attackers to inject...7.5 High
- symantec web securityThe license registering interface in Symantec Web Security (SWS) before 3.0.1.85 allows attackers...4.0 Medium
- symantec web securityMultiple cross-site scripting (XSS) vulnerabilities in Symantec Web Security (SWS) before 3.0.1...4.3 Medium
- microsoft windows explorerWindows Explorer (explorer.exe) 6.0.2900.2180 in Microsoft Windows XP SP2 allows user-assisted...4.3 Medium
- xero portal portalMultiple PHP remote file inclusion vulnerabilities in Xero Portal 1.2 allow remote attackers to...7.5 High
- asp edge edgeSQL injection vulnerability in user.asp in ASP EDGE 1.2b and earlier allows remote attackers to...7.5 High
- rp world worldPHP remote file inclusion vulnerability in config.php in RPW 1.0.2 allows remote attackers to...7.5 High
- inter7 vhostadminPHP remote file inclusion vulnerability in modules/mail/main.php in Inter7 vHostAdmin 1.0 allows...7.5 High
- rmakerMake before 1.0.4 drops root privileges in a way that retains the original supplemental groups,...7.2 High
- cvstracThe is_eow function in format.c in CVSTrac before 2.0.1 does not properly check for the "'" ...4.3 Medium
- guo xu guos posting system xu guos posting systemSQL injection vulnerability in print.asp in Guo Xu Guos Posting System (GPS) 1.2 allows remote...7.5 High
- phproxyMultiple cross-site scripting (XSS) vulnerabilities in index.inc.php in PHProxy before 0.5 beta 2...6.8 Medium
- oh no not another cms no not another cmsCross-site scripting (XSS) vulnerability in install/default/error404.html in Oh no! Not another...6.8 Medium
- cmsmadesimple cms made simpleMultiple PHP remote file inclusion vulnerabilities in cmsimple/cms.php in CMSimple 2.7 allow...7.5 High
- 212cafe 212cafeboardCross-site scripting (XSS) vulnerability in search.php in 212cafeBoard 0.08 Beta allows remote...6.8 Medium
- 212cafe 212cafeboardCross-site scripting (XSS) vulnerability in list3.php in 212cafeBoard 6.30 Beta allows remote...6.8 Medium
- karjasoft sami http serverKarjaSoft Sami HTTP Server 2.0.1 allows remote attackers to cause a denial of service (daemon...5.0 Medium
- cgi-rescue webformCross-site scripting (XSS) vulnerability in CGI-RESCUE WebFORM 4.3 and earlier allows remote...4.3 Medium
- toxiclab shoutboxToxiclab Shoutbox 1 stores sensitive information under the web root with insufficient access...7.8 High
- maxtricity taggerMaxtricity Tagger 0.1 stores sensitive information under the web root with insufficient access...7.8 High
- mybbCross-site scripting (XSS) vulnerability in private.php in MyBB (aka MyBulletinBoard) allows...6.0 Medium
- zixforumZixForum 1.14 and earlier stores sensitive information under the web root with insufficient...9.4 High
- Show moreLoading…