CVEs published in March 2007
621 vulnerabilities, 123 critical, 0 exploited.
- agnitum outpost firewallThe Sandbox.sys driver in Outpost Firewall PRO 4.0, and possibly earlier versions, does not...4.9 Medium
- bti-tracker, btitracker +1 moreDirectory traversal vulnerability in include/prune_torrents.php in BTI-Tracker 1.3.2 (aka...6.4 Medium
- oracle apexCross-site scripting (XSS) vulnerability in Oracle Application Express (APEX) before 2.2.1, aka...4.3 Medium
- google earthBuffer overflow in Google Earth v4.0.2091 (beta) allows remote user-assisted attackers to cause a...7.1 High
- minibb keyword replacerPHP remote file inclusion vulnerability in addon_keywords.php in Keyword Replacer ...10.0 High
- novell bordermanagerNovell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port...7.5 High
- ionoIono allows remote attackers to obtain the full server path via certain requests to (1) templates...5.0 Medium
- minibb forumPHP remote file inclusion vulnerability in index.php in MiniBB Forum 2 allows remote attackers to...10.0 High
- asp-nukedefault.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by...8.5 High
- gnu libtool-ltdlUntrusted search path vulnerability in the libtool-ltdl library (libltdl.so) 1.5.22-2.3 in Fedora...6.6 Medium
- mambo open sourceMultiple SQL injection vulnerabilities in Mambo 4.6.x allow remote attackers to execute arbitrary...7.5 High
- mamboMultiple cross-site scripting (XSS) vulnerabilities in Mambo 4.6.x allow remote attackers to...4.3 Medium
- phpbb maluinfoPHP remote file inclusion vulnerability in includes/bb_usage_stats.php in maluinfo 206.2.38 for...10.0 High
- phpbb import toolsPHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBB Import Tools...6.8 Medium
- cuttlefish leicestershire communityportals** DISPUTED ** PHP remote file inclusion vulnerability in bug.php in Leicestershire...7.5 High
- call-center-softwareedit_user.php in Call Center Software 0.93 and earlier allows remote attackers to obtain...5.5 Medium
- call-center-softwareSQL injection vulnerability in Call Center Software 0.93 and earlier allows remote attackers to...7.5 High
- call-center-softwareCross-site scripting (XSS) vulnerability in Call Center Software 0.93 and earlier allows remote...5.8 Medium
- utimaco safeguardThe centralized management feature for Utimaco Safeguard stores hard-coded cryptographic keys in...7.8 High
- oracle database server** DISPUTED ** Absolute path traversal vulnerability in Oracle Database Server, when...6.0 Medium
- sun solaris, sunos +1 moreThe libike library, as used by in.iked, elfsign, and kcfd in Sun Solaris 9 and 10, when using an...5.8 Medium
- kde k-mailKmail 1.9.1 on KDE 3.5.2, with "Prefer HTML to Plain Text" enabled, allows remote attackers to...2.6 Low
- oracle apexSQL injection vulnerability in wwv_flow_utilities.gen_popup_list in the WWV_FLOW_UTILITIES...6.0 Medium
- novell access managerNovell Access Management 3 SSLVPN Server allows remote authenticated users to bypass VPN...9.0 High
- kde konquerorecma/kjs_html.cpp in KDE JavaScript (KJS), as used in Konqueror in KDE 3.5.5, allows remote...4.3 Medium
- lenovo thinkpad, intel pro 1000 lan adapter +1 moreUnspecified vulnerability in Lenovo Intel PRO/1000 LAN adapter before Build 135400, as used on...10.0 High
- digium asteriskAsterisk 1.4 before 1.4.1 and 1.2 before 1.2.16 allows remote attackers to cause a denial of...7.8 High
- savas place guestbookMultiple cross-site scripting (XSS) vulnerabilities in add2.php in Sava's Guestbook 23.11.2006...6.8 Medium
- savas place guestbookMultiple SQL injection vulnerabilities in add2.php in Sava's Guestbook 23.11.2006, when...6.8 Medium
- rrdbrowseDirectory traversal vulnerability in rb.cgi in RRDBrowse 1.6 and earlier allows remote attackers...7.8 High
- li-scripts li-guestbookSQL injection vulnerability in guestbook.php in LI-Guestbook 1.1, when magic_quotes_gpc is...6.8 Medium
- mailenable enterprise, professional +1 moreStack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional...9.0 High
- douran software technologies isputilDOURAN Software Technologies ISPUtil 3.32.84.1, and possibly earlier versions, stores sensitive...7.8 High
- mani stats reader stats readerPHP remote file inclusion vulnerability in index.php in Mani Stats Reader 1.2 and earlier allows...7.5 High
- aj square ajauctionSQL injection vulnerability in subcat.php in AJ Auction 1.0 allows remote attackers to execute...7.5 High
- aj square ajdatingSQL injection vulnerability in view_profile.php in AJDating 1.0 allows remote attackers to...7.5 High
- aj square classifiedsSQL injection vulnerability in postingdetails.php in AJ Classifieds 1.0 allows remote attackers...7.5 High
- aj forum forumSQL injection vulnerability in topic_title.php in AJ Forum 1.0 allows remote attackers to execute...7.5 High
- divx web playerA certain ActiveX control in the DivXBrowserPlugin (npdivx32.dll) in DivX Web Player, as...7.8 High
- rigter portal system portal systemSQL injection vulnerability in Rigter Portal System (RPS) 6.2, when magic_quotes_gpc is disabled,...5.8 Medium
- jelsoft vbulletinSQL injection vulnerability in inlinemod.php in Jelsoft vBulletin before 3.5.8, and before 3.6.5...7.5 High
- tyger bug tracking systemMultiple cross-site scripting (XSS) vulnerabilities in Tyger Bug Tracking System (TygerBT) 1.1.3...5.8 Medium
- tyger bug tracking systemSQL injection vulnerability in ViewReport.php in Tyger Bug Tracking System (TygerBT) 1.1.3 allows...7.5 High
- tyger bug tracking systemSQL injection vulnerability in ViewBugs.php in Tyger Bug Tracking System (TygerBT) 1.1.3 allows...6.4 Medium
- webmobo wbnewsMultiple PHP remote file inclusion vulnerabilities in Webmobo WB News 1.4.1 and earlier allow...10.0 High
- tiny portal portalCross-site scripting (XSS) vulnerability in TinyPortal before 0.8.6 allows remote attackers to...4.3 Medium
- phppc php poll creatorMultiple PHP remote file inclusion vulnerabilities in PHP Poll Creator (phpPC) 1.04 and earlier...10.0 High
- php poll creator poll creatorPHP remote file inclusion vulnerability in lib/functions.inc.php in PHP Poll Creator (phpPC) 1.04...7.5 High
- phpA regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows...4.3 Medium
- phpInteger overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute...6.8 Medium
- Show moreLoading…