CVEs published in March 2007
621 vulnerabilities, 123 critical, 0 exploited.
- openbsdBuffer overflow in kern/uipc_mbuf2.c in OpenBSD 3.9 and 4.0 allows remote attackers to execute...10.0 High
- navision financials serverInteger overflow in the ktruser function in NetBSD-current before 20061022, NetBSD 3 and 3-0...6.9 Medium
- linux kernelThe do_ipv6_setsockopt function in net/ipv6/ipv6_sockglue.c in Linux kernel before 2.6.20, and...4.4 Medium
- broadcom etrust adminUnspecified vulnerability in cube.exe in the GINA component for CA (Computer Associates) eTrust...4.1 Medium
- gnome ekigaFormat string vulnerability in Ekiga 2.0.3, and probably other versions, allows remote attackers...9.3 High
- joris guisson ktorrentchunkcounter.cpp in KTorrent before 2.1.2 allows remote attackers to cause a denial of service ...7.5 High
- joris guisson ktorrentDirectory traversal vulnerability in torrent.cpp in KTorrent before 2.1.2 allows remote attackers...6.4 Medium
- phpInteger overflow in the 16 bit variable reference counter in PHP 4 allows context-dependent...10.0 High
- php com extensionsThe PHP COM extensions for PHP on Windows systems allow context-dependent attackers to execute...6.8 Medium
- phpThe wddx_deserialize function in wddx.c 1.119.2.10.2.12 and 1.119.2.10.2.13 in PHP 5, as modified...7.6 High
- phpThe php_binary serialization handler in the session extension in PHP before 4.4.5, and 5.x before...5.0 Medium
- phpThe ovrimos_close function in the Ovrimos extension for PHP before 4.4.5 can trigger efree of an...5.1 Medium
- phpThe ovrimos_longreadlen function in the Ovrimos extension for PHP before 4.4.5 allows context...5.1 Medium
- mozilla firefox, adobe acrobat reader, netscape navigator +1 more +3 moreAcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows...5.0 Medium
- phpThe shmop functions in PHP before 4.4.5, and before 5.2.1 in the 5.x series, do not verify that...7.5 High
- phpInteger overflow in the substr_compare function in PHP 5.2.1 and earlier allows context-dependent...5.0 Medium
- snitz communications forums 2000Cross-site scripting (XSS) vulnerability in pop_profile.asp in Snitz Forums 2000 3.4.06 allows...4.3 Medium
- pmail mercury mail transport systemStack-based buffer overflow in Mercury/32 (aka Mercury Mail Transport System) 4.01b and earlier...10.0 High
- postguestbookPHP remote file inclusion vulnerability in styles/internal/header.php in the PostGuestbook 0.6.1...10.0 High
- radscan conquestMultiple buffer overflows in Conquest 8.2a and earlier (1) allow local users to gain privileges...6.9 Medium
- omnikey.aaitg omnikey cardman 4040Multiple buffer overflows in the (1) read and (2) write handlers in the Omnikey CardMan 4040...6.9 Medium
- dreameesoft password masterDreameeSoft Password Master 1.0 stores the database in an unencrypted format when the master...6.9 Medium
- zend platformZend Platform 2.2.3 and earlier has incorrect ownership for scd.sh and certain other files, which...6.2 Medium
- zend platformini_modifier (sgid-zendtech) in Zend Platform 2.2.3 and earlier allows local users to modify the...4.4 Medium
- drupal project issue trackingThe Project issue tracking module before 4.7.x-1.3, 4.7.x-2.* before 4.7.x-2.3, and 5 before 5.x...3.5 Low
- avaya s8300, s8500, s8700 +1 more +3 moreCross-site scripting (XSS) vulnerability in the login page in Avaya Communications Manager (CM)...4.3 Medium
- virtuemartCross-site scripting (XSS) vulnerability in virtuemart_parser.php in VirtueMart before 20070213...4.3 Medium
- drupal nodefamilyUnspecified vulnerability in the Nodefamily module for Drupal 5.x before 5.x-1.0 allows remote...6.0 Medium
- mod security securityInterpretation conflict in ModSecurity (mod_security) 2.1.0 and earlier allows remote attackers...6.8 Medium
- microsoft windows explorerMicrosoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and...7.1 High
- sun fireUnspecified vulnerability in ipmitool for Sun Fire X2100M2 and X2200M2 allows local users to gain...6.6 Medium
- novell netmailStack-based buffer overflow in webadmin.exe in Novell NetMail 3.5.2 allows remote attackers to...6.8 Medium
- xiph icecast ezstreamMultiple buffer overflows in src/ezstream.c in Ezstream before 0.3.0 allow remote attackers to...9.3 High
- webcalendarincludes/functions.php in Craig Knudsen WebCalendar before 1.0.5 does not protect the noSet...7.5 High
- jelsoft vbulletinCross-site scripting (XSS) vulnerability in admincp/index.php in Jelsoft vBulletin 3.6.5 and...4.3 Medium
- simple invoices invoicesinclude/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to...5.0 Medium
- weltennetz news-lettermanPHP remote file inclusion vulnerability in eintrag.php in Weltennetz News-Letterman 1.1 allows...7.5 High
- monitor-line links managementSQL injection vulnerability in index.php in Links Management Application 1.0 allows remote...7.5 High
- apple airport extremeThe default configuration of the AirPort utility in Apple AirPort Extreme creates an IPv6 tunnel...7.5 High
- tks banking solutions eportfolioMultiple cross-site request forgery (CSRF) vulnerabilities in TKS Banking Solutions ePortfolio 1...9.3 High
- tks banking solutions eportfolioMultiple cross-site scripting (XSS) vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java...4.3 Medium
- comodo firewall proComodo Firewall Pro (CFP) (formerly Comodo Personal Firewall) 2.4.18.184 and earlier allows local...4.4 Medium
- ledgersmb, sql-ledger +1 moreDirectory traversal vulnerability in SQL-Ledger, and LedgerSMB before 1.1.5, allows remote...10.0 High
- bernard joly bj webringCross-site scripting (XSS) vulnerability in formulaire.php in Bernard JOLY BJ Webring allows...4.3 Medium
- silc silc-serverThe SILC_SERVER_CMD_FUNC function in apps/silcd/command.c in silc-server 1.0.2 allows remote...7.8 High
- serendipitySQL injection vulnerability in index.php in Serendipity 1.1.1 allows remote attackers to execute...7.5 High
- phpmyadminThe PMA_ArrayWalkRecursive function in libraries/common.lib.php in phpMyAdmin before 2.10.0.2...7.1 High
- snapgear 560, 580, 585 +3 more +5 moreSnapGear 560, 585, 580, 640, 710, and 720 appliances before the 3.1.4u5 firmware allow remote...5.0 Medium
- puttyPuTTY 0.59 and earlier uses weak file permissions for (1) ppk files containing private keys...1.9 Low
- aspindir hazirsiteSQL injection vulnerability in giris_yap.asp in Hazir Site 2.0 allows remote attackers to bypass...7.5 High
- Show moreLoading…