CVEs published in March 2007
621 vulnerabilities, 123 critical, 0 exploited.
- interactual technologies player, intervideo windvd, roxio cineplayer +2 moreStack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2...9.3 High
- squidThe clientProcessRequest() function in src/client_side.c in Squid 2.6 before 2.6.STABLE12 allows...5.0 Medium
- f-secure anti-virusFormat string vulnerability in F-Secure Anti-Virus Client Security 6.02 allows local users to...7.2 High
- thecreativeheads.de creative filesSQL injection vulnerability in kommentare.php in Creative Files 1.2 allows remote attackers to...7.5 High
- minervaSQL injection vulnerability in forum.php in the Minerva mod 2.0.21 build 238a and earlier for...7.5 High
- guestbaraDirect static code injection vulnerability in admin/configuration.php in Guestbara 1.2 and...6.8 Medium
- guestbaraadmin/configuration.php in Guestbara 1.2 and earlier allows remote attackers to modify the e-mail...5.0 Medium
- metaforumUnrestricted file upload vulnerability in usercp.php in MetaForum 0.513 Beta restricts file types...7.5 High
- phpxMultiple cross-site scripting (XSS) vulnerabilities in phpx 3.5.15 allow remote attackers to...4.3 Medium
- phpxMultiple SQL injection vulnerabilities in phpx 3.5.15 allow remote attackers to execute arbitrary...7.5 High
- phpxUnrestricted file upload vulnerability in gallery.php in phpx 3.5.15 allows remote attackers to...6.8 Medium
- webwizguide web wiz forumsSQL injection vulnerability in functions/functions_filters.asp in Web Wiz Forums before 8.05a ...7.5 High
- radscan network audio systemThe ReadRequestFromClient function in server/os/io.c in Network Audio System (NAS) before 1.8a...7.8 High
- radscan network audio systemArray index error in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to...5.0 Medium
- radscan network audio systemThe AddResource function in server/dia/resource.c in Network Audio System (NAS) before 1.8a SVN...5.0 Medium
- radscan network audio systemInteger overflow in the ProcAuWriteElement function in server/dia/audispatch.c in Network Audio...5.0 Medium
- radscan network audio systemStack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network...10.0 High
- cisco 7940 router, 7960 router +1 moreUnspecified vulnerability in the Cisco IP Phone 7940 and 7960 running firmware before POS8-6-0...5.0 Medium
- sql-ledgerDirectory traversal vulnerability in am.pl in SQL-Ledger 2.6.27 only checks for the presence of a...7.5 High
- ledgersmb, sql-ledger +1 moreDirectory traversal vulnerability in am.pl in (1) SQL-Ledger 2.6.27 and earlier, and (2)...4.3 Medium
- pragmamx landkartenDirectory traversal vulnerability in inc/map.func.php in pragmaMX Landkarten 2.1 module allows...4.3 Medium
- mcafee virusscan enterprise** DISPUTED ** McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows...7.5 High
- microsoft windows xp, windows 2003 server +1 more\Device\NdisTapi (NDISTAPI.sys) in Microsoft Windows XP SP2 and 2003 SP1 uses weak permissions,...3.6 Low
- php-statsDirect static code injection vulnerability in admin.php in PHP-Stats 0.1.9.1b and earlier allows...10.0 High
- php-statsMultiple SQL injection vulnerabilities in php-stats.recphp.php in PHP-Stats 0.1.9.1b and earlier...7.5 High
- fileInteger underflow in the file_printf function in the "file" program before 4.20 allows user...9.3 High
- microsoft windows vistaMicrosoft Windows Vista establishes a Teredo address without user action upon connection to the...7.5 High
- microsoft windows vistaDFSR.exe in Windows Meeting Space in Microsoft Windows Vista remains available for remote...9.3 High
- microsoft windows vistaThe Teredo implementation in Microsoft Windows Vista uses the same nonce for communication with...5.0 Medium
- microsoft windows vistaThe neighbor discovery implementation in Microsoft Windows Vista allows remote attackers to...6.4 Medium
- microsoft windows xp, windows vista +1 moreMicrosoft Windows XP and Vista overwrites ARP table entries included in gratuitous ARP, which...5.0 Medium
- microsoft windows vistaThe LLTD Mapper in Microsoft Windows Vista does not properly gather responses to EMIT packets,...5.0 Medium
- microsoft windows vistaThe LLTD Responder in Microsoft Windows Vista does not send the Mapper a response to a DISCOVERY...4.3 Medium
- microsoft windows vistaThe LLTD Mapper in Microsoft Windows Vista allows remote attackers to spoof hosts, and...5.0 Medium
- microsoft windows vistaThe LLTD Mapper in Microsoft Windows Vista does not verify that an IP address in a TLV type 0x07...5.0 Medium
- sun java system web serverSun Java System Web Server 6.1 before 20070314 allows remote authenticated users with revoked...6.0 Medium
- dayfox designs blogDirect static code injection vulnerability in postpost.php in Dayfox Blog (dfblog) 4 allows...6.8 Medium
- zomplogDirectory traversal vulnerability in themes/default/ in ZomPlog 3.7.6 and earlier allows remote...5.0 Medium
- netbsdHeap-based buffer overflow in the kernel in NetBSD 3.0, certain versions of FreeBSD and OpenBSD,...7.5 High
- phpDouble free vulnerability in the session extension in PHP 5.2.0 and 5.2.1 allows context...6.8 Medium
- phpDouble free vulnerability in PHP before 4.4.7, and 5.x before 5.2.2, allows context-dependent...6.8 Medium
- phpnuke php-nukeThe cross-site request forgery (CSRF) protection in PHP-Nuke 8.0 and earlier does not ensure the...6.8 Medium
- phpnuke php-nukeCross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote...4.3 Medium
- woltlab burning boardSQL injection vulnerability in usergroups.php in Woltlab Burning Board (wBB) 2.x allows remote...7.5 High
- paul knierim wsn guestSQL injection vulnerability in comments.php in WSN Guest 1.02 and 1.21 allows remote attackers to...7.5 High
- w-agoraW-Agora (Web-Agora) 4.2.1, when register_globals is enabled, stores globals.inc under the web...4.3 Medium
- cicoandcico ccmailPHP remote file inclusion vulnerability in functions/update.php in Cicoandcico CcMail 1.0 allows...6.8 Medium
- horde impMultiple cross-site scripting (XSS) vulnerabilities in Horde IMP H3 4.1.3, and possibly earlier,...4.3 Medium
- viperweb portalPHP remote file inclusion vulnerability in index.php in ViperWeb Portal alpha 0.1 allows remote...6.8 Medium
- grafx company website builder proPHP remote file inclusion vulnerability in comanda.php in GraFX Company WebSite Builder (CWB) PRO...6.8 Medium
- Show moreLoading…