CVEs published in March 2007
621 vulnerabilities, 123 critical, 0 exploited.
- alexscriptengine picture-engine SQL injection vulnerability in wall.php in Picture-Engine 1.2.0 and earlier allows remote... 7.5 High
- kaqoo auction software Multiple PHP remote file inclusion vulnerabilities in Kaqoo Auction Software Free Edition allow... 6.8 Medium
- flyspray Flyspray 0.9.9 allows remote attackers to obtain sensitive information (private project summaries... 6.8 Medium
- flyspray Flyspray 0.9.9, when output_buffering is disabled or "set to a low value," allows remote... 6.8 Medium
- softerra time-assistant Multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php in Softerra Time... 9.3 High
- hitachi cosminexus collaboration portal, groupmax collaboration portal, groupmax collaboration web client +2 more +4 more SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through... 6.8 Medium
- broadcom brightstor arcserve backup The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows... 7.1 High
- ibm lotus sametime The JNILoader ActiveX control (STJNILoader.ocx) 3.1.0.26 in IBM Lotus Notes Sametime before 7.5... 9.3 High
- cmsmelborp PHP remote file inclusion vulnerability in includes/user_standard.php in CMSmelborp Beta allows... 9.3 High
- photography-on-the-net exhibit engine 2 Multiple PHP remote file inclusion vulnerabilities in Exhibit Engine (EE) 1.22, and possibly... 6.8 Medium
- photography-on-the-net exhibit engine 2 PHP remote file inclusion vulnerability in styles.php in Exhibit Engine (EE) 1.22 and earlier... 10.0 High
- microsoft windows 2000, windows 2003 server, windows vista +1 more +3 more Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through... 9.3 High
- cruiseworks CruiseWorks 1.09e and earlier does not properly restrict user access to certain privileged... 4.6 Medium
- minna de office de office Minna De Office 1.x and 2.x does not properly restrict user access to certain privileged actions,... 4.6 Medium
- overlay weaver weaver Cross-site scripting (XSS) vulnerability in the DHT shell (owdhtshell) in Overlay Weaver 0.5.9 to... 4.3 Medium
- mnews PHP remote file inclusion vulnerability in noticias.php in MNews 2.0 and earlier allows remote... 10.0 High
- morcego cms cms ** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in Morcego CMS 0.9.6 and... 10.0 High
- advanced website creator website creator Multiple SQL injection vulnerabilities in the MySQL back-end in Advanced Website Creator (AWC)... 7.5 High
- eve-nuke forum PHP remote file inclusion vulnerability in db/mysql.php in the Eve-Nuke 0.1 (EN-Forums) module... 10.0 High
- php Integer overflow in the zip_read_entry function in PHP 4 before 4.4.5 allows remote attackers to... 7.5 High
- design for joomla d4j ezine SQL injection vulnerability in index.php in the DesignForJoomla.com D4J eZine (com_ezine) 2.8 and... 6.8 Medium
- jbrowser Unrestricted file upload vulnerability in upload.php3 in JBrowser 2.4 and earlier allows remote... 6.8 Medium
- unverse.net abitwhizzy Multiple cross-site scripting (XSS) vulnerabilities in aBitWhizzy allow remote attackers to... 4.3 Medium
- unverse.net abitwhizzy Multiple directory traversal vulnerabilities in aBitWhizzy allow remote attackers to list... 2.6 Low
- hp jetdirect The FTP service in HP JetDirect print servers allows remote attackers to cause a denial of... 7.1 High
- ay system solutions web content system PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System... 9.3 High
- esri arcsde Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI)... 10.0 High
- mephisto, mephisto edge +1 more Cross-site scripting (XSS) vulnerability in app/helpers/application_helper.rb in Mephisto 0.7.3... 4.3 Medium
- madwifi ieee80211_output.c in MadWifi before 0.9.3 sends unencrypted packets before WPA authentication... 6.8 Medium
- madwifi ieee80211_input.c in MadWifi before 0.9.3 does not properly process Channel Switch Announcement... 7.8 High
- madwifi MadWifi before 0.9.3 does not properly handle reception of an AUTH frame by an IBSS node, which... 7.8 High
- madwifi MadWifi, when Ad-Hoc mode is used, allows remote attackers to cause a denial of service (system... 7.8 High
- aol client software Unspecified vulnerability in (1) Deskbar.dll and (2) Toolbar.dll in AOL 9.0 before February 2007... 7.8 High
- msxstudios advanced login PHP remote file inclusion vulnerability in login/engine/db/profiledit.php in Advanced Login 0.76... 10.0 High
- microsoft ie, internet explorer, windows 2000 +7 more +9 more Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to... 9.3 High
- faststone image viewer Stack-based buffer overflow in FastStone Image Viewer 2.8 allows user-assisted remote attackers... 6.0 Medium
- microsoft windows vista The ATI kernel driver (atikmdag.sys) in Microsoft Windows Vista allows user-assisted remote... 7.1 High
- mozilla firefox Mozilla Firefox 2.0.0.1 through 2.0.0.3 does not canonicalize URLs before checking them against... 5.0 Medium
- netbsd, navision software financials server +1 more Multiple buffer overflows in the ISO network protocol support in the NetBSD kernel 2.0 through 4... 6.6 Medium
- apache mod perl, canonical ubuntu linux, redhat enterprise linux desktop +4 more +6 more PerlRun.pm in Apache mod_perl before 1.30, and RegistryCooker.pm in mod_perl 2.x, does not... 5.0 Medium
- ibm lotus domino Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in IBM Lotus Domino... 4.3 Medium
- ibm lotus domino Heap-based buffer overflow in the LDAP server in IBM Lotus Domino before 6.5.6 and 7.x before 7.0... 7.8 High
- truecrypt foundation truecrypt TrueCrypt 4.3, when installed setuid root, allows local users to cause a denial of service ... 6.9 Medium
- opera browser Opera 9.10 does not check URLs embedded in (1) object or (2) iframe HTML tags against the... 7.5 High
- mozilla firefox Mozilla Firefox 2.0.0.3 does not check URLs embedded in (1) object or (2) iframe HTML tags... 7.5 High
- corel wordperfect Stack-based buffer overflow in Corel WordPerfect Office X3 (13.0.0.565) allows user-assisted... 9.3 High
- linux kernel The DCCP support in the do_dccp_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20... 7.2 High
- intervations navicopa web server Buffer overflow in InterVations NaviCOPA HTTP Server 2.01 allows remote attackers to execute... 10.0 High
- ibm lotus domino Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM... 10.0 High
- wordpress ** DISPUTED ** Cross-site scripting (XSS) vulnerability in an mt import in wp-admin/admin.php in... 3.5 Low
- Show olderLoading…