CVEs published in February 2007
619 vulnerabilities, 84 critical, 1 exploited.
- techexcel inc. devtrackCross-site scripting (XSS) vulnerability in DevTrack 6.x allows remote attackers to inject...6.8 Medium
- trend micro client-server-messaging suite smb, client-server suite smb, control manager +20 more +22 moreBuffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00...9.3 High
- syscp team syscpscripts/cronscript.php in SysCP 1.2.15 and earlier includes and executes arbitrary PHP scripts...7.5 High
- syscp team syscpscripts/cronscript.php in SysCP 1.2.15 and earlier does not properly quote pathnames in user home...7.2 High
- maian recipe recipePHP remote file inclusion vulnerability in classes/class_mail.inc.php in Maian Recipe 1.0 allows...7.5 High
- open tibia server cms tibia server cmsSQL injection vulnerability in mod/PM/reply.php in Open Tibia Server CMS (OTSCMS) 2.1.5 and...7.5 High
- open tibia server cms tibia server cmsCross-site scripting (XSS) vulnerability in forum.php in Open Tibia Server CMS (OTSCMS) 2.1.5 and...6.8 Medium
- advanced poll polladmin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass...7.5 High
- hp network node managerHP Network Node Manager (NNM) Remote Console 7.50, 7.51, and 7.53 assigns Everyone Full Control...7.2 High
- 3proxy3proxy 0.5 to 0.5.2 does not offer NTLM authentication before basic authentication, which might...5.0 Medium
- 3proxy3proxy 0.5 to 0.5.2, when NT-encoded passwords are being used, allows remote attackers to cause a...5.0 Medium
- magnatune.com album browserThe magnatune.com album browser in Amarok allows attackers to cause a denial of service ...2.6 Low
- amarokThe ruby handlers in the Magnatune component in Amarok do not properly quote text in certain...7.5 High
- pam ssh sshThe auth_via_key function in pam_ssh.c in pam_ssh before 1.92, when the allow_blank_passphrase...6.4 Medium
- fckeditorCross-site scripting (XSS) vulnerability in the "Basic Toolbar Selection" in FCKEditor allows...4.3 Medium
- freetextboxCross-site scripting (XSS) vulnerability in the "Basic Toolbar Selection" in FreeTextBox allows...4.3 Medium
- centipaidPHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.2 and earlier...7.5 High
- centipaid** DISPUTED ** PHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.3...5.1 Medium
- phpbbphpBB 2.0.20 does not properly verify user-specified input variables used as limits to SQL...5.0 Medium
- phpbb group phpbbphpBB 2.0.20 does not verify user-specified input variable types before being passed to type...5.0 Medium
- vbdrupalMultiple unspecified vulnerabilities in vbDrupal before 4.7.6.0 have unknown impact and remote...10.0 High
- hlstatsCross-site scripting (XSS) vulnerability in HLstats before 1.35 allows remote attackers to inject...6.8 Medium
- valarsoft webmaticMultiple PHP remote file inclusion vulnerabilities in index/index_album.php in Valarsoft WebMatic...7.5 High
- freeproxyFreeProxy before 3.92 Build 1626 allows malicious users to cause a denial of service (infinite...5.0 Medium
- agermenuPHP remote file inclusion vulnerability in examples/inc/top.inc.php in AgerMenu 0.03 and earlier...7.5 High
- coppermine photo galleryadmin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated...4.0 Medium
- coppermine photo galleryadmin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated...6.5 Medium
- darrens 5-dollar script archive flashchatCross-site scripting (XSS) vulnerability in FlashChat 4.7.8 allows remote attackers to inject...6.8 Medium
- vmware workstationVMware Workstation 5.5.3 34685, when the "Enable copy and paste to and from this virtual machine"...1.2 Low
- vmware workstationVMware Workstation 5.5.3 34685 does not immediately change the availability of a shared clipboard...1.2 Low
- atsphp** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Atsphp 5.0.1 allow remote...7.5 High
- jelsoft vbulletin** DISPUTED ** Multiple cross-site scripting (XSS) vulnerabilities in the Admin Control Panel ...3.5 Low
- alwil avast antivirusavast! Server Edition before 4.7.726 does not demand a password in a certain intended context,...4.4 Medium
- mysqlnewsenginePHP remote file inclusion vulnerability in affichearticles.php3 in MySQLNewsEngine allows remote...7.5 High
- alibaba alipay activex controlThe Alibaba Alipay PTA Module ActiveX control (PTA.DLL) allows remote attackers to execute...6.8 Medium
- kisisel site 2007 site forum.aspSQL injection vulnerability in forum.asp in Kisisel Site 2007 allows remote attackers to execute...7.5 High
- flashfxpFlashFXP 3.4.0 build 1145 allows remote servers to cause a denial of service (CPU consumption)...7.8 High
- lightro cmsPHP remote file inclusion vulnerability in inhalt.php in LightRO CMS 1.0 allows remote attackers...7.5 High
- slackware linuxxterm on Slackware Linux 10.2 stores information that had been displayed for a different user...1.9 Low
- linux kernelumount, when running with the Linux 2.6.15 kernel on Slackware Linux 10.2, allows local users to...1.9 Low
- cedric claire portailphpMultiple directory traversal vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote attackers...5.0 Medium
- cedric claire portailphpMultiple PHP remote file inclusion vulnerabilities in Cedric CLAIRE PortailPhp 2 allow remote...7.5 High
- headstart solutions deskproHeadstart Solutions DeskPRO stores sensitive information under the web root with insufficient...7.5 High
- headstart solutions deskproHeadstart Solutions DeskPRO does not require authentication for certain files and directories...7.5 High
- btitrackerSQL injection in torrents.php in BtitTracker 1.3.2 and earlier allows remote attackers to execute...7.5 High
- adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion web server allows remote attackers...4.3 Medium
- broadcom brightstor arcserve backupThe RPC Server service (catirpc.exe) in CA (formerly Computer Associates) BrightStor ARCserve...5.0 Medium
- uapplication uphotogalleryCross-site scripting (XSS) vulnerability in images_archive.asp in Uapplication Uphotogallery 1.1...4.3 Medium
- adrenalin labs adrenalins asp chatMultiple cross-site scripting (XSS) vulnerabilities in Adrenalin's ASP Chat allow remote...4.3 Medium
- home production mysearchengineCross-site scripting (XSS) vulnerability in Home production MySearchEngine allows remote...4.3 Medium
- Show moreLoading…