CVEs published in March 2007
621 vulnerabilities, 123 critical, 0 exploited.
- openbiblioUnspecified vulnerability in the reports system in OpenBiblio before 0.6.0 allows attackers to...7.5 High
- webmodStack-based buffer overflow in the connectHandle function in server.cpp in WebMod 0.48 allows...7.5 High
- coalescent systems freepbxPHP remote file inclusion vulnerability in upgrade.php in Coalescent Systems freePBX 2.1.3 allows...7.5 High
- powerphloggerPHP remote file inclusion vulnerability in config.inc.php3 in Power Phlogger 2.0.9 and earlier...7.5 High
- smarty** DISPUTED ** PHP remote file inclusion vulnerability in libs/Smarty.class.php in Smarty 2.6.9...7.5 High
- mambo mostlycePHP remote file inclusion vulnerability in htmltemplate.php in the Chad Auld MOStlyContent Editor...7.5 High
- ezonlinegalleryMultiple directory traversal vulnerabilities in EZOnlineGallery 1.3 and earlier, and possibly...6.4 Medium
- matthias dietrich phpburningportal quiz-modulMultiple PHP remote file inclusion vulnerabilities in phpBurningPortal quiz-modul 1.0.1, and...7.5 High
- phpwindSQL injection vulnerability in admin.php in PHPWind 5.0.1 and earlier allows remote attackers to...7.5 High
- phpbb insert userPHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Insert User 0...6.8 Medium
- web-app.org webappMultiple unspecified vulnerabilities in WebAPP before 0.9.9.6 have unknown impact and attack...7.5 High
- cisco catalyst 6000, ios, catalyst 6500 +1 more +3 moreUnspecified vulnerability in Cisco IOS 12.2SXA, SXB, SXD, and SXF; and the MSFC2, MSFC2a and...6.1 Medium
- cisco network analysis module, catalyst 6000 ws-svc-nam-1, catalyst 6000 ws-svc-nam-2 +7 more +9 moreThe Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote...10.0 High
- mozilla firefoxMozilla Firefox 2.0.0.2 allows remote attackers to spoof the address bar, favicons, and document...6.8 Medium
- connectix boardsUnrestricted file upload vulnerability in admin.bbcode.php in Connectix Boards 0.7 and earlier...6.0 Medium
- connectix boardsSQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows...6.5 Medium
- blenderEval injection vulnerability in the (a) kmz_ImportWithMesh.py Script for Blender 0.1.9h, as used...9.3 High
- symantec mail securityBuffer overflow in Symantec Mail Security for SMTP 5.0 before Patch 175 allows remote attackers...9.3 High
- netrek vanilla serverFormat string vulnerability in the new_warning function in ntserv/warning.c for Netrek Vanilla...9.3 High
- angel learning learning management suiteSQL injection vulnerability in section/default.asp in ANGEL Learning Management Suite (LMS) 7.1...7.5 High
- contelligent c1 financial servicesMoveSortedContentAction in C1 Financial Services Contelligent 9.1.4 does not check "the...6.8 Medium
- built2go news manager blogMultiple cross-site scripting (XSS) vulnerabilities in built2go News Manager Blog 1.0 allow...4.3 Medium
- aweb labs awebnewsMultiple PHP remote file inclusion vulnerabilities in aWeb Labs aWebNews 1.5 allow remote...6.8 Medium
- mplayerThe DMO_VideoDecoder_Open function in loader/dmo/DMO_VideoDecoder.c in MPlayer 1.0rc1 and earlier...7.6 High
- irfanviewIrfanView 3.99 allows remote attackers to cause a denial of service (application crash) via a...4.3 Medium
- wordpressCross-site request forgery (CSRF) vulnerability in the AdminPanel in WordPress 2.1.1 and earlier...6.8 Medium
- audins audiens audiensAudins Audiens 3.3 allows remote attackers to bypass authentication and perform certain...7.5 High
- audins audiens audiensSQL injection vulnerability in system/index.php in Audins Audiens 3.3 allows remote attackers to...7.5 High
- audins audiens audiensCross-site scripting (XSS) vulnerability in setup.php in Audins Audiens 3.3 allows remote...5.8 Medium
- doceboMultiple cross-site scripting (XSS) vulnerabilities in Docebo CMS 3.0.3 through 3.0.5 allow...4.3 Medium
- microsoft excelMicrosoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a...4.3 Medium
- microsoft officeMicrosoft Office 2003 allows user-assisted remote attackers to cause a denial of service ...4.3 Medium
- bj sintay sitexsitex allows remote attackers to obtain potentially sensitive information via a ' (quote) value...5.0 Medium
- sitexsitex allows remote attackers to obtain sensitive information via a request with a numerical...6.4 Medium
- bj sintay sitexUnrestricted file upload vulnerability in sitex allows remote attackers to upload arbitrary PHP...7.5 High
- bj sintay sitexMultiple cross-site scripting (XSS) vulnerabilities in sitex allow remote attackers to inject...4.3 Medium
- stwc-counterPHP remote file inclusion vulnerability in downloadcounter.php in STWC-Counter 3.4.0.0 and...7.5 High
- sqlite manager managerDirectory traversal vulnerability in SQLiteManager 1.2.0 allows remote attackers to read...5.1 Medium
- sqlitemanagerMultiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.0 allow remote attackers...4.3 Medium
- solarpayDirectory traversal vulnerability in index.php in SolarPay allows remote attackers to read...5.0 Medium
- debian apacheThe Debian GNU/Linux 033_-F_NO_SETSID patch for the Apache HTTP Server 1.3.34-4 does not properly...6.6 Medium
- wordpressMultiple cross-site scripting (XSS) vulnerabilities in wp-includes/functions.php in WordPress...5.8 Medium
- nullsoft shoutcast serverCross-site scripting (XSS) vulnerability in the Nullsoft ShoutcastServer 1.9.7 allows remote...4.3 Medium
- ibm db2IBM DB2 UDB 8.2 before Fixpak 7 (aka fixpack 14), and DB2 9 before Fix Pack 2, on UNIX allows the...4.4 Medium
- mcafee virexVShieldCheck in McAfee VirusScan for Mac (Virex) before 7.7 patch 1 allow local users to change...6.6 Medium
- mcafee virexMcAfee VirusScan for Mac (Virex) before 7.7 patch 1 has weak permissions (0666) for /Library...4.1 Medium
- grok developments netproxyThe connection log file implementation in Grok Developments NetProxy 4.03 does not record...10.0 High
- grok developments netproxyGrok Developments NetProxy 4.03 allows remote attackers to bypass URL filtering via a request...5.0 Medium
- hitachi osas\/ft\/wUnspecified vulnerability in Hitachi OSAS/FT/W before 20070223 allows attackers to cause a denial...5.0 Medium
- parallels desktopParallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host...7.2 High
- Show moreLoading…