CVEs published in March 2007
621 vulnerabilities, 123 critical, 0 exploited.
- mcgallerydownload.php in McGallery 0.5b allows remote attackers to read arbitrary files and obtain script...5.0 Medium
- oscommerce php point of sale** DISPUTED ** Directory traversal vulnerability in index.php in PHP Point Of Sale for...7.5 High
- symantec norton personal firewall, client security, norton antispam +3 more +5 moreThe SymTDI device driver (SYMTDI.SYS) in Symantec Norton Personal Firewall 2006 9.1.1.7 and...1.9 Low
- phpMultiple buffer overflows in the (1) ibase_connect and (2) ibase_pconnect functions in the...5.4 Medium
- horde application framework, imp +1 moreArgument injection vulnerability in the cleanup cron script in Horde Project Horde and IMP before...6.8 Medium
- horde application frameworkCross-site scripting (XSS) vulnerability in framework/NLS/NLS.php in Horde Framework before 3.1.4...4.3 Medium
- t-systems solutions for research gmbh groupitVariable overwrite vulnerability in groupit/base/groupit.start.inc in Groupit 2.00b5 allows...6.8 Medium
- orion-blogadmin/default.asp in Orion-Blog 2.0 allows remote attackers to bypass authentication controls and...7.5 High
- netsw libftpMultiple buffer overflows in LIBFtp 5.0 allow user-assisted remote attackers to execute arbitrary...6.8 Medium
- xigla absolute image gallery xeSQL injection vulnerability in gallery.asp in Absolute Image Gallery 2.0 allows remote attackers...7.5 High
- ibm rational clearquestCross-site scripting (XSS) vulnerability in IBM Rational ClearQuest (CQ) Web 7.0.0.0 allows...4.3 Medium
- cisco ciscoworks, ip communicator, meetingplace +15 more +17 moreMultiple cross-site scripting (XSS) vulnerabilities in (1) PreSearch.html and (2) PreSearch.class...3.5 Low
- sourceforge wordperfect document importer-exporterInteger overflow in the WP6GeneralTextPacket::_readContents function in WordPerfect Document...6.8 Medium
- libwpd libraryMultiple heap-based buffer overflows in WordPerfect Document importer/exporter (libwpd) before 0...9.3 High
- adobe coldfusion, jrun +1 moreUnspecified vulnerability in the IIS connector in Adobe JRun 4.0 Updater 6, and ColdFusion MX 6.1...4.3 Medium
- congaThe luci server component in conga preserves the password between page loads for the Add System...4.3 Medium
- phpThe compress.bzip2:// URL wrapper provided by the bz2 extension in PHP before 4.4.7, and 5.x...7.8 High
- phpThe zip:// URL wrapper provided by the PECL zip extension in PHP before 4.4.7, and 5.2.0 and 5.2...5.0 Medium
- webcreatorMultiple PHP remote file inclusion vulnerabilities in WebCreator 0.2.6-rc3 and earlier allow...6.8 Medium
- care2xMultiple PHP remote file inclusion vulnerabilities in CARE2X 1.1 allow remote attackers to...6.8 Medium
- christian scheurer unrarlib, urarfilelib +1 moreBuffer overflow in the urarlib_get function in Christian Scheurer UniquE RAR File Library ...10.0 High
- phpalbum.net phpalbum** DISPUTED ** PHP remote file inclusion vulnerability in common.php in PHP Photo Album allows...7.5 High
- cpanel-host fantastico de luxeMultiple absolute path traversal vulnerabilities in Fantastico, as used with cPanel 10.x, allow...9.0 High
- phpext/filter in PHP 5.2.0, when FILTER_SANITIZE_STRING is used with the FILTER_FLAG_STRIP_LOW flag,...4.3 Medium
- phpBuffer underflow in the PHP_FILTER_TRIM_DEFAULT macro in the filtering extension (ext/filter) in...7.5 High
- phpThe FDF support (ext/fdf) in PHP 5.2.0 and earlier does not implement the input filtering hooks...5.0 Medium
- guppyGuppY 4.0 allows remote attackers to delete arbitrary files via a direct request to install...6.4 Medium
- phpnuke php-nukeSQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers...7.5 High
- phpnuke php-nukeDirectory traversal vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote...4.3 Medium
- danny ho oesMultiple PHP remote file inclusion vulnerabilities in Open Education System (OES) 0.1beta allow...7.5 High
- betaparticle blogSQL injection vulnerability in the heme preview feature for default.asp in BP Blog 7.0 through 7...7.5 High
- netperfnetserver in netperf 2.4.3 allows local users to overwrite arbitrary files via a symlink attack...4.4 Medium
- woltlab burning board, burning board lite +1 moreMultiple cross-site scripting (XSS) vulnerabilities in register.php in Woltlab Burning Board (wBB...4.3 Medium
- oracle database serverOracle Database 10g uses a NULL pDacl parameter when calling the SetSecurityDescriptorDacl...7.2 High
- rim blackberry, blackberry 8100, blackberry browser +2 moreThe 4thPass browser (BlackBerry Browser) on the RIM BlackBerry 8100 (Pearl) before 4.2.1 allows...4.3 Medium
- jgbbsSQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 allows remote attackers to execute...7.5 High
- bitesser mysql commanderPHP remote file inclusion vulnerability in ressourcen/dbopen.php in bitesser MySQL Commander 2.7...9.3 High
- x-ice news systemSQL injection vulnerability in devami.asp in X-Ice News System 1.0 allows remote attackers to...7.5 High
- apple imageioUnspecified vulnerability in ImageIO in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows...9.3 High
- apple mac os x, mac os x server +1 moreStack-based buffer overflow in the Apple-specific Samba module (SMB File Server) in Apple Mac OS...9.3 High
- apple server managerServer Manager (servermgrd) in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 does not...6.8 Medium
- apple mac os x, mac os x server +1 moreUnspecified vulnerability in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 creates files...4.4 Medium
- apple mac os x, mac os x server +1 moreThe SSH key generation process in OpenSSH in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows...5.0 Medium
- apple mac os x, mac os x server +1 moreThe IOKit HID interface in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 does not sufficiently...6.9 Medium
- apple mac os x, mac os x server +1 moreUnspecified vulnerability in the authentication feature for DirectoryService (DS Plug-Ins) for...8.5 High
- apple mac os x, mac os x server +1 moreInteger overflow in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user-assisted...6.8 Medium
- apple mac os x, mac os x server +1 moreUnspecified vulnerability in diskimages-helper in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8...6.8 Medium
- cups, apple mac os x +1 moreThe CUPS service on multiple platforms allows remote attackers to cause a denial of service ...5.0 Medium
- apple mac os x, mac os x server +1 moreStack-based buffer overflow in Apple Mac OS X 10.3.9 and 10.4 through 10.4.8 allows remote user...6.8 Medium
- ledgersmb, sql-ledger +1 moreUnspecified vulnerability in LedgerSMB before 1.1.5 and SQL-Ledger before 2.6.25 allows remote...9.0 High
- Show moreLoading…