CVEs published in February 2007
619 vulnerabilities, 84 critical, 1 exploited.
- jportal web serverCross-Site Request Forgery (CSRF) vulnerability in admin/admin.adm.php in Jportal 2.3.1, and...9.3 High
- phpOff-by-one error in the str_ireplace function in PHP 5.2.1 might allow context-dependent...7.8 High
- php, trustix secure linux +1 moreUnspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global...10.0 High
- php, trustix secure linux +1 moreMultiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute...7.5 High
- php, canonical ubuntu linux +1 moreThe WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not...5.0 Medium
- php, trustix secure linux +1 moreBuffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via...5.0 Medium
- php, trustix secure linux +1 moreMultiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and...7.5 High
- php, trustix secure linux +1 morePHP before 5.2.1 allows attackers to bypass safe_mode and open_basedir restrictions via...7.5 High
- microsoft ie, internet explorer +1 moreMicrosoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from (1) Msb1fren.dll, (2)...10.0 High
- microsoft ie, internet explorer +1 moreThe wininet.dll FTP client code in Microsoft Internet Explorer 5.01 and 6 might allow remote...10.0 High
- microsoft ie, internet explorer +1 moreMicrosoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from Imjpcksid.dll as ActiveX...9.3 High
- microsoft office, works +1 moreMicrosoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office...9.3 High
- microsoft office, word, works +1 more +3 moreMicrosoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office...9.3 High
- lightro cmsSQL injection vulnerability in projects.php in LightRO CMS 1.0 allows remote attackers to execute...7.5 High
- process-one ejabberdUnspecified vulnerability in the mod_roster_odbc module in ejabberd before 1.1.3 has unknown...10.0 High
- moinmoinMoinMoin Insertion of Sensitive Information into Log File5.0 Medium
- moinmoinMoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters4.3 Medium
- tagit tagboardMultiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier,...7.5 High
- microsoft windows 2000, windows 2003 server, windows xp +2 moreThe HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional...9.3 High
- microsoft windows xp, windows 2003 server +1 moreThe hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and...7.2 High
- microsoft windows xpThe Window Image Acquisition (WIA) Service in Microsoft Windows XP SP2 allows local users to gain...7.2 High
- microsoft windows 2000, windows 2003 server, windows xp +2 moreThe OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted...7.6 High
- microsoft visual studio .net, windows 2003 server +1 moreThe MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000...9.3 High
- microsoft antigen, forefront security, malware protection engine +2 more +4 moreInteger overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows...9.3 High
- microsoft step-by-step interactive trainingBuffer overflow in the Step-by-Step Interactive Training in Microsoft Windows 2000 SP4, XP SP2...9.3 High
- microsoft learning essentials, office, windows 2000 +2 more +4 moreThe RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP...9.3 High
- sageCross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++ extensions...4.3 Medium
- microsoft visual c\+\+The 64-bit versions of Microsoft Visual C++ 8.0 standard library (MSVCR80.DLL) time functions,...5.0 Medium
- sun solaris, sunos +1 moreRace condition in recursive directory deletion with the (1) -r or (2) -R option in rm in Solaris...2.6 Low
- mediawikiMediaWiki before 1.9.2 allows remote attackers to obtain sensitive information via a direct...5.0 Medium
- matthieu aubry phpmyvisitesDirectory traversal vulnerability in phpMyVisites before 2.2 allows remote attackers to include...5.0 Medium
- matthieu aubry phpmyvisitesCRLF injection vulnerability in phpMyVisites before 2.2 allows remote attackers to inject...7.5 High
- matthieu aubry phpmyvisitesCross-site scripting (XSS) vulnerability in the GetCurrentCompletePath function in phpmyvisites...4.3 Medium
- cpanel webhost managerCross-site scripting (XSS) vulnerability in scripts/passwdmysql in cPanel WebHost Manager (WHM)...4.3 Medium
- kiwi enterprises cattoolsKiwi CatTools before 3.2.0 beta uses weak encryption ("reversible encoding") for passwords,...4.6 Medium
- kiwi enterprises cattoolsDirectory traversal vulnerability in the TFTP server in Kiwi CatTools before 3.2.0 beta allows...10.0 High
- gecad technologies axigen mail serveraxigen 1.2.6 through 2.0.0b1 does not properly parse login credentials, which allows remote...7.8 High
- gecad technologies axigen mail serverHeap-based buffer underflow in axigen 1.2.6 through 2.0.0b1 allows remote attackers to cause a...10.0 High
- joomlaThe mosgetparam implementation in Joomla! before 1.0.10, does not set a variable's data type to...7.5 High
- joomlaJoomla! before 1.0.10 allows remote attackers to spoof the frontend submission forms, which has...7.5 High
- joomlaUnspecified vulnerability in Joomla! before 1.0.10 has unknown impact and attack vectors, related...7.5 High
- h. nomura tiny ftpdBuffer overflow in Tiny FTPd 1.4 and earlier allows remote attackers to cause a denial of service...7.8 High
- robin de graff somery** DISPUTED ** PHP remote file inclusion vulnerability in upload/admin/team.php in Robin de...7.5 High
- php script tools psy auctionSQL injection vulnerability in item.php in PSY Auction allows remote attackers to execute...7.5 High
- php script tools psy auctionCross-site scripting (XSS) vulnerability in email_request.php in PSY Auction allows remote...6.8 Medium
- fusionphp fusion pollsPHP remote file inclusion vulnerability in admin/index.php in Fusion Polls allows remote...7.5 High
- rainbow portal rainbow.zen, with the zen +1 moreCross-site scripting (XSS) vulnerability in jira/secure/BrowseProject.jspa in Rainbow with the...6.8 Medium
- roaring penguin mimedefangBuffer overflow in Roaring Penguin MIMEDefang 2.59 and 2.60 allows remote attackers to cause a...7.5 High
- second rule llc ip3 netaccessDirectory traversal vulnerability in portalgroups/portalgroups/getfile.cgi in IP3 NetAccess...5.0 Medium
- oracle solaris, sun sunos +1 moreArgument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5...10.0 High
- Show moreLoading…