CVEs published in March 2007
621 vulnerabilities, 123 critical, 0 exploited.
- netsieben ssh libraryBuffer overflow in the Ne7sshSftp::addOpenHandle function in ne7ssh_sftp.cpp in NetSieben SSH...9.3 High
- glowwormGlowWorm FW before 1.5.3b4 allows remote attackers to cause a denial of service (kernel panic)...7.8 High
- openidOpenID allows remote attackers to forcibly log a user into an OpenID enabled site, divulge the...7.5 High
- openidCross-site request forgery (CSRF) vulnerability in OpenID allows remote attackers to restore the...6.8 Medium
- pcapsipdumppcapsipdump.cpp in pcapsipdump before 0.1.3 allows remote attackers to cause a denial of service ...7.8 High
- phpPHP 5.2.1 allows context-dependent attackers to read portions of heap memory by executing certain...7.8 High
- dev0.de 0irc0irc 1345 build 20060823 allows remote attackers to cause a denial of service (application crash)...7.8 High
- moodleMoodle 1.5.2 and earlier stores sensitive information under the web root with insufficient access...7.8 High
- subhubMultiple cross-site scripting (XSS) vulnerabilities in SubHub 2.3.0 allow remote attackers to...4.3 Medium
- futuresoft tftp server 2000Buffer overflow in FutureSoft TFTP Server 2000 on Microsoft Windows 2000 SP4 allows remote...10.0 High
- microsoft all windowsThe dynamic DNS update mechanism in the DNS Server service on Microsoft Windows does not properly...10.0 High
- lan management system management systemMultiple PHP remote file inclusion vulnerabilities in LAN Management System (LMS) 1.8.9 Vala and...10.0 High
- manageengine firewall analyzerUnspecified vulnerability in ManageEngine Firewall Analyzer allows remote authenticated users to ...4.0 Medium
- portailphpSQL injection vulnerability in index.php in PortailPHP 2.0 allows remote attackers to execute...7.5 High
- classwebMultiple PHP remote file inclusion vulnerabilities in ClassWeb 2.03 and earlier allow remote...10.0 High
- phpprojektUnrestricted file upload vulnerability in PHProjekt 5.2.0, when magic_quotes_gpc is disabled,...4.6 Medium
- phpprojektMultiple cross-site request forgery (CSRF) vulnerabilities in the check_csrftoken function in lib...6.8 Medium
- ipswitch imail, imail plus, imail premium +1 more +3 moreMultiple buffer overflows in the IMAILAPILib ActiveX control (IMailAPI.dll) in Ipswitch IMail...9.3 High
- roseonlinecmsDirectory traversal vulnerability in index.php in RoseOnlineCMS 3 B1 allows remote attackers to...7.5 High
- net portal dynamic system portal dynamic systemStatic code injection vulnerability in admin/settings.php in Net Portal Dynamic System (NPDS) 5...9.0 High
- net portal dynamic system portal dynamic systemVariable extraction vulnerability in grab_globals.php in Net Portal Dynamic System (NPDS) 5.10...7.5 High
- giorgio ciranni splatt forumDirectory traversal vulnerability in bbcode_ref.php in the Giorgio Ciranni Splatt Forum 4.0 RC1...7.5 High
- typolight webcmsUnspecified vulnerability in TYPOlight webCMS before 2.2 Build 5 has unknown impact and attack...7.5 High
- clbox** DISPUTED ** PHP remote file inclusion vulnerability in signup.php in CLBOX 1.01 allows remote...10.0 High
- active web softwares link engineSQL injection vulnerability in default.asp in ActiveWebSoftwares Active Link Engine allows remote...7.5 High
- active web softwares photo gallerySQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows...7.5 High
- studiewijzerMultiple PHP remote file inclusion vulnerabilities in Study planner (Studiewijzer) 0.15 and...9.3 High
- php-nuke iframe modulePHP remote file inclusion vulnerability in iframe.php in the iFrame Module for PHP-NUKE allows...9.3 High
- realguestbookCross-site scripting (XSS) vulnerability in save_entry.php in realGuestbook 5.01 allows remote...4.3 Medium
- realguestbookMultiple SQL injection vulnerabilities in realGuestbook 5.01 allow remote attackers to execute...7.5 High
- realguestbookMultiple cross-site scripting (XSS) vulnerabilities in realGuestbook 5.01, when register_globals...4.3 Medium
- wordpressCross-site scripting (XSS) vulnerability in wp-admin/vars.php in WordPress before 2.0.10 RC2, and...4.3 Medium
- lbstone active php bookmark notesPHP remote file inclusion vulnerability in templates/head.php in Active PHP Bookmark Notes (APB)...10.0 High
- php db designer db designerMultiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow...10.0 High
- scriptmagix photo ratingSQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier...7.5 High
- scriptmagix faq builderSQL injection vulnerability in index.php in ScriptMagix FAQ Builder 2.0 and earlier allows remote...7.5 High
- scriptmagix recipesSQL injection vulnerability in index.php in ScriptMagix Recipes 2.0 and earlier allows remote...7.5 High
- scriptmagix lyricsSQL injection vulnerability in index.php in ScriptMagix Lyrics 2.0 and earlier allows remote...7.5 High
- scriptmagix jokesSQL injection vulnerability in index.php in ScriptMagix Jokes 2.0 and earlier allows remote...7.5 High
- zziplibStack-based buffer overflow in the zzip_open_shared_io function in zzip/file.c in ZZIPlib Library...9.3 High
- mpm chat chatDirectory traversal vulnerability in view.php in MPM Chat 2.5 allows remote attackers to include...7.5 High
- katalog plyt audio plyt audioSQL injection vulnerability in index.php in Katalog Plyt Audio 1.0 and earlier allows remote...7.5 High
- sourcenext ikanari jijyouCross-site scripting (XSS) vulnerability in the RSS reader in a certain SOURCENEXT product,...4.3 Medium
- glue software newsglueCross-site scripting (XSS) vulnerability in the RSS reader in Glue Software NewsGlue before 1.3.4...4.3 Medium
- oracle application serverCross-site scripting (XSS) vulnerability in servlet/Spy in Dynamic Monitoring Services (DMS) in...4.3 Medium
- ibm websphere application serverCRLF injection vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.19 allows...7.5 High
- w-agorasearch.php in w-Agora (Web-Agora) allows remote attackers to obtain potentially sensitive...5.0 Medium
- w-agoraMultiple cross-site scripting (XSS) vulnerabilities in w-Agora (Web-Agora) allow remote attackers...4.3 Medium
- w-agoraw-Agora (Web-Agora) allows remote attackers to obtain sensitive information via a request to rss...5.0 Medium
- w-agoraMultiple unrestricted file upload vulnerabilities in w-Agora (Web-Agora) allow remote attackers...7.5 High
- Show moreLoading…