CVEs published in February 2007
619 vulnerabilities, 84 critical, 1 exploited.
- hbmPHP remote file inclusion vulnerability in view.php in hbm allows remote attackers to execute...7.5 High
- delmaa.com arabhostPHP remote file inclusion vulnerability in function.php in arabhost allows remote attackers to...7.5 High
- kayako esupportMultiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite - ESupport 3.00.13 and...4.3 Medium
- comscripts j-web pics navigatorDirectory traversal vulnerability in jwpn-photos.php in J-Web Pics Navigator 2.0 allows remote...5.0 Medium
- jeunes-webmasters j-web pics navigatorDirectory traversal vulnerability in pn-menu.php in J-Web Pics Navigator 1.0 allows remote...7.8 High
- reamday enterprises magic news plusCross-site scripting (XSS) vulnerability in Magic News Plus 1.0.2 allows remote attackers to...4.3 Medium
- reamday enterprises magic news plusPHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows remote...7.5 High
- barekoncept pheapDirectory traversal vulnerability in edit.php in pheap allows remote attackers to read and modify...9.4 High
- cromosoft simple plantilla phpUnrestricted file upload vulnerability in Cromosoft Simple Plantilla PHP (SPP) allows remote...10.0 High
- cromosoft simple plantilla phpAbsolute path traversal vulnerability in list_main_pages.php in Cromosoft Simple Plantilla PHP ...5.0 Medium
- sourceforge putmailputmail.py in Putmail before 1.4 does not detect when a user attempts to use TLS with a server...5.0 Medium
- webmplayerindex.php in WebMplayer before 0.6.1-Alpha allows remote attackers to execute arbitrary code via...6.8 Medium
- sourceforge webmplayerMultiple SQL injection vulnerabilities in WebMplayer before 0.6.1-Alpha allow remote attackers to...6.8 Medium
- watchtowerUnspecified vulnerability in Watchtower (WT) before 0.12 has unknown impact and attack vectors,...10.0 High
- rigter portal system portal systemRigter Portal System (RPS) 1.0, 2.0, and 3.0 allows remote attackers to add arbitrary content and...4.3 Medium
- rigter portal system portal systemDirectory traversal vulnerability in index.php in Rigter Portal System (RPS) 1.0, 2.0, and 3.0...4.3 Medium
- rigter portal system portal systemRigter Portal System (RPS) 1.0, 2.0, and 3.0 allows remote attackers to bypass authentication and...7.5 High
- phpnewsMultiple PHP remote file inclusion vulnerabilities in PhpNews 1.0 allow remote attackers to...7.5 High
- exv2 content management systemDirectory traversal vulnerability in the avatar upload feature in exV2 2.0.4.3 and earlier allows...4.3 Medium
- exv2 content management systemVariable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote...9.8 Critical
- professional home page tools login script home page tools login scriptMultiple cross-site scripting (XSS) vulnerabilities in Professional Home Page Tools Login Script,...4.3 Medium
- phpbb group advanced guestbookSQL injection vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote...6.8 Medium
- phpbb group advanced guestbookCross-site scripting (XSS) vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB...4.3 Medium
- aqualungBuffer overflow in the meta_read_flac function in meta_decoder.c for Aqualung 0.9beta5 and...6.8 Medium
- smartsitecmsadmin.php in SmartSiteCMS 1.0 allows remote attackers to bypass authentication and gain...7.5 High
- opentools attachment modCross-site scripting (XSS) vulnerability in Opentools Attachment Mod before 2.4.5 allows remote...4.3 Medium
- geodesicsolutions geoclassifieds enterpriseCross-site scripting (XSS) vulnerability in GeoClassifieds Enterprise 2.0.5.2 and earlier allows...4.3 Medium
- invision power services power boardSQL injection vulnerability in classes/class_session.php in Invision Power Board (IPB) 2.1 up to...7.5 High
- etomiteUnrestricted file upload vulnerability in manager/media/ibrowser/scripts/rfiles.php in Etomite...7.5 High
- socketwiz bookmarksPHP remote file inclusion vulnerability in smarty_config.php in Socketwiz Bookmarks 2.0 and...7.5 High
- cliserv web communityPHP remote file inclusion vulnerability in CliServ Web Community 0.65 and earlier allows remote...7.5 High
- oracle database serverOracle 10g R2 and possibly other versions allows remote attackers to trigger internal errors, and...6.0 Medium
- microsoft internet explorerMicrosoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of...7.1 High
- microsoft internet explorer, canon network camera server vb101, microsoft ie +2 moreMicrosoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an...5.0 Medium
- scripter.ch fcringPHP remote file inclusion vulnerability in fcring.php in FCRing 1.3 allows remote attackers to...7.5 High
- mtcmsMultiple cross-site scripting (XSS) vulnerabilities in the "Contact Us" functionality in MTCMS 2...4.3 Medium
- scripter.ch sinapis forumPHP remote file inclusion vulnerability in sinapis.php in Sinapis Forum 2.2 allows remote...7.5 High
- scipter.ch gastebuchPHP remote file inclusion vulnerability in sinagb.php in Sinapis Gastebuch 2.2 allows remote...7.5 High
- mtcmsMultiple unrestricted file upload vulnerabilities in MTCMS 3.2 allow remote attackers to upload...7.5 High
- watersweb shops shop kit plusshopkitplus allows remote attackers to obtain sensitive information via a request to (1) events...5.0 Medium
- watersweb shops shop kit plusDirectory traversal vulnerability in enc/stylecss.php in shopkitplus allows remote attackers to...6.4 Medium
- xt-commerceDirectory traversal vulnerability in index.php in xtcommerce allows remote attackers to read...5.0 Medium
- xeroxer simple one-file galleryCross-site scripting (XSS) vulnerability in gallery.php in XeroXer Simple one-file gallery allows...4.3 Medium
- xeroxer simple one-file galleryDirectory traversal vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote...5.0 Medium
- zpanelMultiple PHP remote file inclusion vulnerabilities in ZPanel 2.0 allow remote attackers to...7.5 High
- zephyrsoft toolbox address book continuedMultiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book...6.4 Medium
- zephyrsoft toolbox address book continuedMultiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book...6.4 Medium
- steema software teechart proThe (1) Import.LoadFromURL and (2) Export.asText.SaveToFile functions in TeeChart Pro ActiveX...9.3 High
- novell zenworksUnspecified vulnerability in Novell ZENworks 7 Desktop Management Support Pack 1 before Hot patch...6.4 Medium
- efictionMultiple PHP remote file inclusion vulnerabilities in eFiction 3.1.1 and earlier allow remote...6.8 Medium
- Show moreLoading…