CVEs published in March 2007
621 vulnerabilities, 123 critical, 0 exploited.
- weekly drawing contest drawing contestadmin/contest.php in Weekly Drawing Contest 0.0.1 allows remote attackers to bypass...7.5 High
- weekly drawing contest drawing contestSQL injection vulnerability in check_vote.php in Weekly Drawing Contest 0.0.1 allows remote...7.5 High
- weekly drawing contest drawing contest** DISPUTED ** Directory traversal vulnerability in check_vote.php in Weekly Drawing Contest 0.0...5.0 Medium
- digital eye gallery eye galleryPHP remote file inclusion vulnerability in module.php in Digital Eye Gallery 1.1 Beta (aka 0.1.1b...9.3 High
- wordpresswp-login.php in WordPress allows remote attackers to redirect authenticated users to other...6.5 Medium
- intervations filecopaStack-based buffer overflow in InterVations FileCOPA FTP Server 1.01 allows remote attackers to...6.8 Medium
- unclassified newsboard newsboardUnclassified NewsBoard 1.6.3 stores sensitive information under the web root with insufficient...5.0 Medium
- joomla nfn address bookMultiple PHP remote file inclusion vulnerabilities in the NFN Address Book (com_nfn_addressbook)...9.3 High
- asteriskThe Asterisk Extension Language (AEL) in pbx/pbx_ael.c in Asterisk does not properly generate...7.5 High
- asteriskThe handle_response function in chan_sip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2...7.8 High
- linux kernelnet/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the...4.9 Medium
- trend micro antivirusVsapiNT.sys in the Scan Engine 8.0 for Trend Micro AntiVirus 14.10.1041, and other products,...7.8 High
- zopeCross-site scripting (XSS) vulnerability in Zope 2.10.2 and earlier allows remote attackers to...4.3 Medium
- grandstream budgetone 200The Grandstream BudgeTone 200 IP phone, with program 1.1.1.14 and bootloader 1.1.1.5, allows...7.8 High
- truecrypt foundation truecryptTrueCrypt before 4.3, when set-euid mode is used on Linux, allows local users to cause a denial...2.1 Low
- myserverserver.cpp in MyServer 0.8.5 calls Process::setuid before calling Process::setgid and thus does...7.5 High
- tim soderstrom statsdawgtemplates/config/mail.tpl in Tim Soderstrom StatsDawg 0.92 allows remote attackers to execute...10.0 High
- zyxel zynosZynOS 3.40 allows remote attackers to cause a denial of service (link restart) by sending a...7.8 High
- linksys wag200g, wrt54gc +1 moreThe Linksys WAG200G with firmware 1.01.01, WRT54GC 2 with firmware 1.00.7, and WRT54GC 1 with...5.0 Medium
- phpBuffer underflow in the header function in PHP 5.2.0 allows context-dependent attackers to...6.8 Medium
- phpThe mb_parse_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal...6.8 Medium
- phpThe resource system in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent...6.8 Medium
- phpThe resource system in PHP 5.0.0 through 5.2.1 allows context-dependent attackers to execute...9.3 High
- ftpdminFTPDMIN 0.96 allows remote attackers to cause a denial of service (daemon crash) via a LIST...6.3 Medium
- atrium software mercur imapd, mercur messaging 2005 +1 moreStack-based buffer overflow in Atrium MERCUR IMAPD allows remote attackers to have an unknown...10.0 High
- atrium software mercur imapdMultiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD (mcrimap4...10.0 High
- geblogDirectory traversal vulnerability in index.php in GeBlog 0.1 allows remote attackers to include...5.0 Medium
- evolution shared memoFormat string vulnerability in the write_html function in calendar/gui/e-cal-component-memo...6.8 Medium
- x multimedia system multimedia systemInteger underflow in X MultiMedia System (xmms) 1.2.10 allows user-assisted remote attackers to...9.3 High
- x multimedia system multimedia systemInteger overflow in X MultiMedia System (xmms) 1.2.10, and possibly other versions, allows user...9.3 High
- phprojektMultiple cross-site scripting (XSS) vulnerabilities in PHProjekt 5.2.0, when magic_quotes_gpc is...4.3 Medium
- phprojektMultiple SQL injection vulnerabilities in PHProjekt 5.2.0, when magic_quotes_gpc is disabled,...7.5 High
- care2xCARE2X 2.2, and possibly earlier, allows remote attackers to obtain configuration information via...5.0 Medium
- jelsoft vbulletinSQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin 3.6.5 allows remote...6.0 Medium
- sourceforge jgbbsSQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 and earlier allows remote attackers...6.8 Medium
- radical designs activist mobilization platformPHP remote file inclusion vulnerability in includes/base.php in Radical Designs Activist...6.8 Medium
- newsbin pro proStack-based buffer overflow in NewsBin Pro 4.32 allows remote attackers to cause a denial of...10.0 High
- daansystems newsreactorStack-based buffer overflow in DaanSystems NewsReactor 20070220.21 allows remote attackers to...10.0 High
- war ftp daemon ftp daemonStack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers...10.0 High
- phpbb dimensionPHP remote file inclusion vulnerability in includes/functions.php in the Dimension module of...10.0 High
- netviosSQL injection vulnerability in News/page.asp in NetVIOS Portal allows remote attackers to execute...7.5 High
- kde konquerorKonqueror 3.5.5 allows remote attackers to cause a denial of service (crash) by using JavaScript...7.8 High
- kde konquerorThe FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to...6.8 Medium
- opera browserThe FTP protocol implementation in Opera 9.10 allows remote attackers to allows remote servers to...6.8 Medium
- mozilla firefox, canonical ubuntu linux +1 moreThe FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows...6.8 Medium
- asteriskThe channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to...7.8 High
- inkscapeFormat string vulnerability in the whiteboard Jabber protocol in Inkscape before 0.45.1 allows...6.8 Medium
- inkscapeFormat string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to...6.8 Medium
- netxautomation netxeibNETxAutomation NETxEIB OPC Server before 3.0.1300 does not properly validate OLE for Process...7.5 High
- w-agoraw-agora 4.2.1 allows remote attackers to obtain sensitive information by via the (1) bn[] array...5.0 Medium
- Show moreLoading…