CVEs published in February 2007
619 vulnerabilities, 84 critical, 1 exploited.
- cisco secure services client, security agent, trust agent +1 more +3 moreThe (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, ...7.2 High
- cisco secure services client, security agent, trust agent +1 more +3 moreCisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0...7.2 High
- cisco secure services client, security agent, trust agent +1 more +3 moreCisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0...6.8 Medium
- cisco secure services client, security agent, trust agent +1 more +3 moreCisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0...6.8 Medium
- cisco secure services client, security agent, trust agent +1 more +3 moreCisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0...6.8 Medium
- cisco unified ip phone firmware 7906g, unified ip phone firmware 7911g, unified ip phone firmware 7941g +3 more +5 moreThe SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with...10.0 High
- cisco unified ip conference station 7935 firmware, unified ip conference station firmware 7936 +1 moreThe Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and...10.0 High
- francisco burzi php-nukeSQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when...6.8 Medium
- interspire sendstudioMultiple PHP remote file inclusion vulnerabilities in Interspire SendStudio 2004.14 and earlier,...6.8 Medium
- ultimate fun book fun bookPHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote...6.8 Medium
- online web building web buildingSQL injection vulnerability in user_pages/page.asp in Online Web Building 2.0 allows remote...7.5 High
- nortel net direct clientThe Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070...6.9 Medium
- vmware workstationVMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged...7.2 High
- mediawikiCross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.9.x...6.8 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.6.x...6.8 Medium
- warped systems phpxmms** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in phpXmms 1.0 allow remote...10.0 High
- pblang** DISPUTED ** PHP remote file inclusion vulnerability in index.php in PBLang (PBL) 4.60 and...10.0 High
- comodo firewall proComodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.17.183 and earlier uses a weak...4.6 Medium
- abledesign mycalendarMultiple cross-site scripting (XSS) vulnerabilities in index.php in AbleDesign MyCalendar allow...4.3 Medium
- wordpressCross-site scripting (XSS) vulnerability in the wp_explain_nonce function in the nonce AYS...4.3 Medium
- phpbb wordsearch wordsearchPHP remote file inclusion vulnerability in admin_rebuild_search.php in phpbb_wordsearch allows...7.5 High
- distributed checksum clearinghouse dccUnspecified vulnerability in Distributed Checksum Clearinghouse (DCC) before 1.3.51 allows remote...7.5 High
- dem trac tracDem_trac allows remote attackers to read log file contents via a direct request for /anc_sit.txt.5.0 Medium
- malbummAlbum 0.3 has default accounts (1) "login"/"pass" for its administrative account and (2) "dqsfg"...10.0 High
- pearson education powerschoolPearson Education PowerSchool 4.3.6 allows remote attackers to list the contents of the admin...5.0 Medium
- ezboo webstatsEzboo webstats, possibly 3.0.3, allows remote attackers to bypass authentication and gain access...7.5 High
- xpression news newsDirectory traversal vulnerability in news.php in Xpression News (X-News) 1.0.1, when...5.8 Medium
- sandh news roverMultiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote...9.3 High
- xpression news newsDirectory traversal vulnerability in archives.php in Xpression News (X-News) 1.0.1 allows remote...7.5 High
- peanutkb peanut knowledge baseUnspecified vulnerability in Peanut Knowledge Base (PeanutKB) 0.0.3 and earlier has unknown...10.0 High
- shemes.com grabitShemes.com Grabit 1.5.3, and possibly earlier, allows remote attackers to cause a denial of...5.0 Medium
- rsbr-software news file grabberStack-based buffer overflow in News File Grabber 4.1.0.1 and earlier allows remote attackers to...9.3 High
- trend micro serverprotectMultiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and...10.0 High
- jboss application serverThe default configuration of JBoss does not restrict access to the (1) console and (2) web...7.5 High
- drupal audio module, getid3, mediafield module +2 moreUnspecified vulnerability in certain demonstration scripts in getID3 1.7.1, as used in the...7.5 High
- php-nuke emporium moduleSQL injection vulnerability in the category file in modules.php in the Emporium 2.3.0 and earlier...7.5 High
- drupal secure site moduleUnspecified vulnerability in the Secure site 4.7.x-1.x-dev and 5.x-1.x-dev module for Drupal...7.5 High
- phpmyfaqUnspecified vulnerability in phpMyFAQ 1.6.9 and earlier, when register_globals is enabled, allows...6.8 Medium
- spoonlabs vivvo article management cmsDirectory traversal vulnerability in include/db_conn.php in SpoonLabs Vivvo Article Management...6.8 Medium
- niels provos libeventNiels Provos libevent 1.2 and 1.2a allows remote attackers to cause a denial of service (infinite...7.8 High
- quicksoft easymail objectsStack-based buffer overflow in the Connect method in the IMAP4 component in Quiksoft EasyMail...7.6 High
- barry jaspan image pagerCross-site scripting (XSS) vulnerability in the Barry Jaspan Image Pager 4.7.x-1.x-dev and 5.x-1...6.8 Medium
- ibm db2Certain setuid DB2 binaries in IBM DB2 before 9 Fix Pack 2 for Linux and Unix allow local users...4.4 Medium
- scriptdungeon xlatunesSQL injection vulnerability in view.php in XLAtunes 0.1 and earlier allows remote attackers to...7.5 High
- virtualsystem vs-link-partnerPHP remote file inclusion vulnerability in inc/functions_inc.php in VS-Link-Partner 2.1 and...7.5 High
- marcello vitagliano meganoides newsPHP remote file inclusion vulnerability in include.php in Meganoide's news 1.1.1 allows remote...10.0 High
- snitz communications forums 2000SQL injection vulnerability in pop_profile.asp in Snitz Forums 2000 3.1 SR4 allows remote...7.5 High
- turuncu portal portalSQL injection vulnerability in h_goster.asp in Turuncu Portal 1.0 allows remote attackers to...7.5 High
- xfairguy codeavalanche newsSQL injection vulnerability in inc_listnews.asp in CodeAvalanche News 1.x allows remote attackers...10.0 High
- cedstatCross-site scripting (XSS) vulnerability in index.php in CedStat 1.31 allows remote attackers to...6.8 Medium
- Show moreLoading…