CVEs published in February 2007
619 vulnerabilities, 84 critical, 1 exploited.
- cisco asa 5500, pix firewall software +1 moreUnspecified vulnerability in Cisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when...9.0 High
- cisco asa 5500, pix firewall software +1 moreCisco PIX 500 and ASA 5500 Series Security Appliances 7.2.2, when configured to inspect certain...7.8 High
- palm treoThe Find feature in Palm OS Treo smart phones operates despite the system password lock, which...2.1 Low
- mailenable professionalCross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows...5.1 Medium
- mailenable professionalMultiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow...4.3 Medium
- lizardtech djvu browser plug-inMultiple buffer overflows in the LizardTech DjVu Browser Plug-in before 6.1.1 allow remote...7.5 High
- linux kernelLinux kernel 2.6.x before 2.6.20 allows local users to read unreadable binaries by using the...2.1 Low
- mailenableThe NTLM_UnPack_Type3 function in MENTLM.dll in MailEnable Professional 2.35 and earlier allows...7.8 High
- mohachat moha chatMOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has...10.0 High
- atmail webmailCross-site scripting (XSS) vulnerability in search.pl in @Mail 4.61 and earlier allows remote...4.3 Medium
- scriptsez.net virtual calendarMultiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Virtual Calendar allow...6.8 Medium
- fullaspsite asp hosting siteSQL injection vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote...7.5 High
- fullaspsite asp hosting siteCross-site scripting (XSS) vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows...6.8 Medium
- itinysoft studio total video playerStack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier,...10.0 High
- harpia cmsMultiple PHP remote file inclusion vulnerabilities in Harpia CMS 1.0.5 and earlier allow remote...7.5 High
- fx-appMultiple cross-site scripting (XSS) vulnerabilities in fx-APP 0.0.8.1 allow remote attackers to...4.3 Medium
- fx-appThe Tools module in fx-APP 0.0.8.1 allows remote attackers to misrepresent the contents of a web...10.0 High
- plume-cms plume cmsPHP remote file inclusion vulnerability in manager/tools/link/dbinstall.php in Plume CMS 1.1.3...7.5 High
- oliver georgi phpwcmsCRLF injection vulnerability in (1) include/inc_act/act_formmailer.php and possibly (2)...7.8 High
- phpwcmsphpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary...7.5 High
- oliver georgi phpwcmsphpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary...10.0 High
- nicecoder indexuMultiple PHP remote file inclusion vulnerabilities in Indexu 5.0.1 allow remote attackers to...7.5 High
- phpjobboardphpjobboard allows remote attackers to bypass authentication and gain administrator privileges...7.5 High
- jobline** DISPUTED ** PHP remote file inclusion vulnerability in admin.jobline.php in Jobline 1.1.1...10.0 High
- bloggitadmin.php in BloggIT 1.01 and earlier does not properly establish a user session, which allows...7.5 High
- simple machines forum** DISPUTED ** QueryString.php in Simple Machines Forum (SMF) 1.0.7 and earlier, and 1.1rc2 and...7.5 High
- scartscart.cgi in SCart 2.0 allows remote attackers to execute arbitrary commands via shell...10.0 High
- develooping flash chat** DISPUTED ** PHP remote file inclusion vulnerability in adminips.php in Develooping Flash Chat...7.5 High
- alcatel-lucent omniaccess wireless, aruba mobility controller +1 moreThe (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess...7.5 High
- alcatel-lucent omniaccess wireless, aruba mobility controller +1 moreHeap-based buffer overflow in the management interfaces in (1) Aruba Mobility Controllers 200,...7.5 High
- apache stats statsVariable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify...7.5 High
- guillaume fontaine php rrd browserDirectory traversal vulnerability in php rrd browser before 0.2.1 allows remote attackers to read...5.0 Medium
- virtual calendar calendarVirtual Calendar stores sensitive information under the web root with insufficient access control...5.0 Medium
- utorrentHeap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via...7.5 High
- kvguestbookThe dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain...7.5 High
- communityserver.org community serverCross-site scripting (XSS) vulnerability in search/SearchResults.aspx in Community Server allows...4.3 Medium
- till gerken phppollsTill Gerken phpPolls 1.0.3 allows remote attackers to bypass authentication and perform certain...7.5 High
- radical technologies portal searchbuscador/buscador.htm in Portal Search allows remote attackers to obtain sensitive information ...7.8 High
- radical technologies portal searchCross-site scripting (XSS) vulnerability in buscador/buscador.htm in Portal Search allows remote...4.3 Medium
- radical technologies portal searchPortal Search allows remote attackers to redirect a URL to an arbitrary web site by placing the...9.4 High
- philboardSQL injection vulnerability in philboard_forum.asp in Philboard 1.14 and earlier allows remote...7.5 High
- nickolas grigoriadis mini web serverDirectory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6...7.8 High
- cisco iosThe ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12...7.1 High
- cisco iosThe Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XE to 12.3T allows remote...6.4 Medium
- hp hp-uxUnspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport...4.9 Medium
- hp hp-uxDistributed SLS daemon (SLSd) on HP-UX B.11.11 allows remote attackers to overwrite arbitrary...10.0 High
- sun solarisRace condition in the TCP subsystem for Solaris 10 allows remote attackers to cause a denial of...7.1 High
- adobe coldfusion, jrun +1 moreCross-site scripting (XSS) vulnerability in the administrator console for Adobe JRun 4.0, as used...4.3 Medium
- microsoft powerpointUnspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to...9.3 High
- adobe coldfusionCross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 7.0 and 7.0.1, when Global...4.3 Medium
- Show moreLoading…