CVEs published in February 2007
619 vulnerabilities, 84 critical, 1 exploited.
- openi-cms group openi-cmsPHP remote file inclusion vulnerability in the Seitenschutz plugin for OPENi-CMS 1.0 allows...6.8 Medium
- capital request forms request formsCapital Request Forms stores sensitive information under the web root with insufficient access...7.8 High
- smidgeonsoft pebrowseBuffer overflow in SmidgeonSoft PEBrowse Professional 8.2.1.0 allows user-assisted remote...9.3 High
- microsoft windows mobileUnspecified vulnerability in Microsoft Internet Explorer on Windows Mobile 5.0 allows remote...7.8 High
- graphicsmagick, imagemagick +1 moreBuffer overflow in GraphicsMagick and ImageMagick allows user-assisted remote attackers to cause...9.3 High
- march networks 3108 dvr, 3204 dvr, 4210 dvr +2 more +4 moreUnspecified vulnerability in March Networks DVR 3000 and 4000 Digital Video Recorders allows...5.0 Medium
- qdigCross-site scripting (XSS) vulnerability in Quick Digital Image Gallery (Qdig) 1.2.9.3 and devel...4.3 Medium
- mcrefer** DISPUTED ** SQL injection vulnerability in install.php in mcRefer allows remote attackers to...7.5 High
- allons voter voterAllons_voter 1.0 allows remote attackers to bypass authentication and access certain...6.8 Medium
- nabocorp nabopollnabopoll 1.1.2 allows remote attackers to bypass authentication and access certain administrative...7.5 High
- plain old webserver old webserverDirectory traversal vulnerability in the Plain Old Webserver (POW) add-on before 0.0.9 for...5.0 Medium
- extremepow extreme file hostingUnrestricted file upload vulnerability in eXtremePow eXtreme File Hosting allows remote attackers...7.5 High
- wheatblogCross-site scripting (XSS) vulnerability in add_comment.php in Wheatblog (wB) 1.1 allows remote...4.3 Medium
- phpmychat plus plusDirectory traversal vulnerability in avatar.php in PhpMyChat Plus 1.9 and earlier allows remote...7.1 High
- headstart solutions deskproHeadstart Solutions DeskPRO allows remote attackers to obtain the full path via direct requests...5.0 Medium
- headstart solutions deskproattachment.php in Headstart Solutions DeskPRO allows remote attackers to read all uploaded files...4.3 Medium
- headstart solutions deskproinstall/loader_help.php in Headstart Solutions DeskPRO allows remote attackers to obtain...5.0 Medium
- mailenable enterprise, standard +1 moreUnspecified vulnerability in a cryptographic feature in MailEnable Standard Edition before 1.93,...10.0 High
- the war forge warforge.newsMultiple cross-site scripting (XSS) vulnerabilities in warforge.NEWS 1.0 allow remote attackers...4.3 Medium
- v3 chat v3chat instant messengermycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via...6.0 Medium
- indirmax.org ozzywork galeriUnrestricted file upload vulnerability in add.asp in OzzyWork Gallery, possibly 2.0 and earlier,...6.4 Medium
- dev neuron blogMultiple SQL injection vulnerabilities in pages/addcomment2.php in Neuron Blog 1.1 allow remote...7.5 High
- microsoft wordUnspecified vulnerability in Microsoft Word 2000 allows remote attackers to cause a denial of...7.6 High
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in the Attachment Manager (admincp/attachment.php) in...4.3 Medium
- yahoo messengerUnspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and...5.0 Medium
- site-assistantPHP remote file inclusion vulnerability in classes/menu.php in Site-Assistant 0990 and earlier...7.5 High
- hp openview storage data protectorUnspecified vulnerability in HP OpenView Storage Data Protector on HP-UX B.11.00, B.11.11, or B...6.8 Medium
- lushinewsSQL injection vulnerability in comments.php in LushiNews 1.01 and earlier allows remote...7.5 High
- lushiwarplanerSQL injection vulnerability in register.php in LushiWarPlaner 1.0 allows remote attackers to...7.5 High
- trevorchan** DISPUTED ** PHP remote file inclusion vulnerability in Trevorchan 0.7 and earlier allows...10.0 High
- gnopaste** DISPUTED ** PHP remote file inclusion vulnerability in index.php in gnopaste 0.5.3 and...6.8 Medium
- phpcoin** DISPUTED ** PHP remote file inclusion vulnerability in modules/mail/index.php in phpCOIN RC-1...7.5 High
- laboratory for optical and computational instrumentation local calendar system** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in local Calendar System 1.1...7.5 High
- gosurf browser browserCross-domain vulnerability in GoSuRF Browser 2.62 allows remote attackers to access restricted...7.8 High
- fast browser browserCross-domain vulnerability in Fast Browser Pro 8.1 allows remote attackers to access restricted...7.8 High
- advanced search technologies inc. enigma browserCross-domain vulnerability in Enigma Browser 3.8.8 allows remote attackers to access restricted...7.8 High
- netcaptorCross-domain vulnerability in NetCaptor 4.5.7 Personal Edition allows remote attackers to access...7.8 High
- flashpeak slim browserCross-domain vulnerability in Slim Browser 4.07 build 100 allows remote attackers to access...7.8 High
- softinform finebrowserCross-domain vulnerability in FineBrowser Freeware 3.2.2 allows remote attackers to access...7.8 High
- phaseoutCross-domain vulnerability in PhaseOut 5.4.4 allows remote attackers to access restricted...7.8 High
- maxthonCross-domain vulnerability in Maxthon 1.5.6 build 42 allows remote attackers to access restricted...5.0 Medium
- more quick tools greenbrowserCross-domain vulnerability in GreenBrowser 3.4.0622 allows remote attackers to access restricted...5.0 Medium
- myweb4net browserCross-domain vulnerability in MYweb4net Browser 3.8.8.0 allows remote attackers to access...5.0 Medium
- hp mercury loadrunner agent, mercury monitor over firewall, mercury performance center agent +2 moreStack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0...10.0 High
- twikiUnspecified vulnerability in Twiki 4.0.0 through 4.1.0 allows local users to execute arbitrary...4.6 Medium
- moinmoinMoinMoin Multiple cross-site scripting (XSS) vulnerabilities4.3 Medium
- trend micro damage cleanup services, pc-cillin internet security, tmcomm.sys +5 more +7 moreTmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module (RCM), with the VsapiNI.sys 3...7.2 High
- rarlab unrarStack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products,...6.8 Medium
- cpanel webhost managerRemote file inclusion vulnerability in scripts2/objcache in cPanel WebHost Manager (WHM) allows...7.5 High
- techexcel inc. devtrackSQL injection vulnerability in DevTrack 6.0.3 allows remote attackers to execute arbitrary SQL...7.5 High
- Show moreLoading…