CVEs published in March 2007
621 vulnerabilities, 123 critical, 0 exploited.
- microsoft visual studio .netStack-based buffer overflow in the AfxOleSetEditMenu function in the MFC component in Microsoft...10.0 High
- frontbase relational database serverBuffer overflow in FrontBase Relational Database Server 4.2.7 and earlier allows remote...7.1 High
- particle blogger bloggerSQL injection vulnerability in post.php in Particle Blogger 1.0.0 through 1.2.0 allows remote...7.5 High
- holtstraeter rot 13Directory traversal vulnerability in enkrypt.php in Sascha Schroeder krypt (aka Holtstraeter Rot...4.3 Medium
- directadminCross-site scripting (XSS) vulnerability in CMD_USER_STATS in DirectAdmin allows remote attackers...4.3 Medium
- xen qemuThe VNC server implementation in QEMU, as used by Xen and possibly other environments, allows...4.3 Medium
- koan software mega mallproduct_review.php in Koan Software Mega Mall allows remote attackers to obtain the installation...5.0 Medium
- koan software mega mallMultiple SQL injection vulnerabilities in Koan Software Mega Mall allow remote attackers to...7.5 High
- ultimate php board php boardPHP remote file inclusion vulnerability in includes/header_simple.php in Ultimate PHP Board (UPB)...6.8 Medium
- phpbbPHP remote file inclusion vulnerability in includes/not_mem.php in the Add Name module for PHP...7.5 High
- prorat serverUnspecified vulnerability in ProRat Server 1.9 Fix2 allows remote attackers to bypass the...7.5 High
- ibm websphere application serverIBM WebSphere Application Server (WAS) 5.1.1.9 and earlier allows remote attackers to obtain JSP...5.0 Medium
- ibm websphere application serverIBM WebSphere Application Server (WAS) 5.0 through 5.1.1.0 allows remote attackers to obtain JSP...4.3 Medium
- ibm websphere application serverSimpleFileServlet in IBM WebSphere Application Server 5.0.1 through 5.0.2.7 on Linux and UNIX...4.3 Medium
- openafsThe default configuration in OpenAFS 1.4.x before 1.4.4 and 1.5.x before 1.5.17 supports setuid...7.5 High
- openofficeOpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary...9.3 High
- openofficeStack-based buffer overflow in filter\starcalc\scflt.cxx in the StarCalc parser in OpenOffice.org...9.3 High
- oracle application server portalCross-site scripting (XSS) vulnerability in PORTAL.wwv_main.render_warning_screen in the Oracle...4.3 Medium
- fujitsu fence, systemwalker desktop encryption +1 moreFujitsu FENCE-Pro before V5L01, and Systemwalker Desktop Encryption V12.0L10, V12.0L10A, V12...2.1 Low
- fujitsu interstage application server, interstage apworks +1 moreCross-site scripting (XSS) vulnerability in the Servlet Service in Fujitsu Interstage Application...4.3 Medium
- rhapsody irc ircMultiple format string vulnerabilities in comm.c in Rhapsody IRC 0.28b allow remote attackers to...7.5 High
- rhapsody irc ircMultiple buffer overflows in Rhapsody IRC 0.28b allow remote attackers to execute arbitrary code...6.8 Medium
- avant force browserStack-based buffer overflow in Avant Browser 11.0 build 26 allows remote attackers to cause a...9.3 High
- gentoo linuxThe Linux Security Auditing Tool (LSAT) allows local users to overwrite arbitrary files via a...4.3 Medium
- takebishi corporation devicexplorer opc serverUnspecified vulnerability in the IOPCServer::RemoveGroup function in the OPCDA interface in...10.0 High
- lookupThe ndeb-binary feature in Lookup (lookup-el) allows local users to overwrite arbitrary files via...4.6 Medium
- microsoft ieMicrosoft Internet Explorer 7.0 on Windows XP and Vista allows remote attackers to conduct...4.3 Medium
- broadcom brightstor arcserve backupThe Tape Engine in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier...2.1 Low
- broadcom brightstor arcserve backupThe Tape Engine in CA (formerly Computer Associates) BrightStor ARCserve Backup 11.5 and earlier...10.0 High
- mcafee epolicy orchestrator, protectionpilot +1 moreMultiple stack-based buffer overflows in the SiteManager.SiteMgr.1 ActiveX control (SiteManager...9.3 High
- linux kernelnf_conntrack in netfilter in the Linux kernel before 2.6.20.3 does not set nfctinfo during...5.0 Medium
- linux kernelnfnetlink_log in netfilter in the Linux kernel before 2.6.20.3 allows attackers to cause a denial...4.9 Medium
- symantec norton personal firewallThe \Device\SymEvent driver in Symantec Norton Personal Firewall 2006 9.1.1.7, and possibly other...4.9 Medium
- nukescripts nukesentinelCross-site scripting (XSS) vulnerability in NukeSentinel before 2.5.06 allows remote attackers to...6.8 Medium
- nukescripts nukesentinelnukesentinel.php in NukeSentinel 2.5.06 and earlier uses a permissive regular expression to...7.5 High
- microsoft windows xpwinmm.dll in Microsoft Windows XP allows user-assisted remote attackers to cause a denial of...7.1 High
- avaya s8300, s8500, s8700 +1 more +3 moreApache Tomcat in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES allows connections...5.2 Medium
- avaya communication managerUnspecified maintenance web pages in Avaya S87XX, S8500, and S8300 before CM 3.1.3, and Avaya SES...6.0 Medium
- apache http server, tomcat +1 moreApache Tomcat Directory Traversal5.0 Medium
- web-app.org webappUnspecified vulnerability in web-app.org Web Automated Perl Portal (WebAPP) 0.9.9.4 to 0.9.9.6...6.8 Medium
- sun java system web serverUnspecified vulnerability in Sun Java System Web Server 6.0 and 6.1 before 20070315 allows remote...7.5 High
- cyber inside weblogDirectory traversal vulnerability in index.php in Sascha Schroeder (aka CyberTeddy or Cyber...5.0 Medium
- carbonize lazarus guestbookPHP remote file inclusion vulnerability in template.class.php in Carbonize Lazarus Guestbook...10.0 High
- ftplib** DISPUTED ** Buffer overflow in the set_umask function in QFTP in LIBFtp 3.1-1 allows local...10.0 High
- phpThe array_user_key_compare function in PHP 4.4.6 and earlier, and 5.x up to 5.2.1, makes...4.6 Medium
- k5n webcalendarMultiple PHP remote file inclusion vulnerabilities in WebCalendar 0.9.45 allow remote attackers...7.5 High
- liqua wbblogCross-site scripting (XSS) vulnerability in index.php in WBBlog allows remote attackers to inject...4.3 Medium
- wbblogSQL injection vulnerability in index.php in WBBlog allows remote attackers to execute arbitrary...7.5 High
- creative guestbook guestbookCreative Guestbook 1.0 allows remote attackers to add an administrative account via a direct...7.5 High
- creative guestbook guestbookCross-site scripting (XSS) vulnerability in Guestbook.php in Creative Guestbook 1.0 allows remote...4.3 Medium
- Show moreLoading…