CVEs published in April 2007
627 vulnerabilities, 111 critical, 0 exploited.
- yahoo ui library The Yahoo! UI framework exchanges data using JavaScript Object Notation (JSON) without an... 5.0 Medium
- script.aculo.us The Script.aculo.us framework exchanges data using JavaScript Object Notation (JSON) without an... 7.8 High
- prototypejs prototype framework The Prototype (prototypejs) framework before 1.5.1 RC3 exchanges data using JavaScript Object... 5.0 Medium
- mad4milk moo.fx The Moo.fx framework exchanges data using JavaScript Object Notation (JSON) without an associated... 5.0 Medium
- mochikit framework The MochiKit framework exchanges data using JavaScript Object Notation (JSON) without an... 5.0 Medium
- microsoft atlas framework The Microsoft Atlas framework exchanges data using JavaScript Object Notation (JSON) without an... 5.0 Medium
- jquery, netapp snapcenter +1 more The jQuery framework exchanges data using JavaScript Object Notation (JSON) without an associated... 5.0 Medium
- google web toolkit The Google Web Toolkit (GWT) framework exchanges data using JavaScript Object Notation (JSON)... 5.0 Medium
- getahead direct web remoting The Getahead Direct Web Remoting (DWR) framework 1.1.4 exchanges data using JavaScript Object... 5.0 Medium
- dojo toolkit toolkit The Dojo framework exchanges data using JavaScript Object Notation (JSON) without an associated... 5.0 Medium
- symantec enterprise security manager The agent remote upgrade interface in Symantec Enterprise Security Manager (ESM) before 20070405... 10.0 High
- microsoft windows 2000, avaya definity one media server, media server +4 more +6 more Unspecified vulnerability in Microsoft Windows 2000, XP, and Server 2003 allows user-assisted... 9.3 High
- wf-links SQL injection vulnerability in viewcat.php in the WF-Links (wflinks) 1.03 and earlier module for... 7.5 High
- gregory kokanosky phpmynewsletter admin/send_mod.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier prints a Location... 10.0 High
- gregory kokanosky phpmynewsletter admin/index.php in Gregory Kokanosky phpMyNewsletter 0.8 beta5 and earlier provides access to... 10.0 High
- xoops john mordo jobs module SQL injection vulnerability in index.php in the John Mordo Jobs 2.4 and earlier module for XOOPS... 7.5 High
- php, webspell +1 more Directory traversal vulnerability in picture.php in WebSPELL 4.01.02 and earlier, when PHP before... 5.0 Medium
- webspell picture.php in WebSPELL 4.01.02 and earlier allows remote attackers to read arbitrary files via... 5.0 Medium
- wserve http server http server Buffer overflow in wserve_console.exe in Wserve HTTP Server (whttp) 4.6 allows remote attackers... 10.0 High
- emc rsa security sitekey EMC RSA Security SiteKey does not set the secure qualifier on the SiteKey Flash token (aka the... 9.3 High
- emc rsa security sitekey EMC RSA Security SiteKey issues challenge-bypass tokens that persist forever without a... 9.0 High
- emc rsa security sitekey EMC RSA Security SiteKey allows remote attackers to display the correct image via a man-in-the... 8.5 High
- corel paint shop pro Buffer overflow in Corel Paint Shop Pro 11.20 allows user-assisted remote attackers to execute... 7.4 High
- adobe golive, illustrator, photoshop +1 more +3 more Buffer overflow in Adobe Photoshop CS2 and CS3, Photoshop Elements 5.0, Illustrator CS3, and... 9.3 High
- burnstone burncms Multiple PHP remote file inclusion vulnerabilities in burnCMS 0.2 and earlier allow remote... 7.5 High
- irfanview Buffer overflow in IrfanView 4.00 and earlier allows user-assisted remote attackers to execute... 8.5 High
- don moore mydns Multiple buffer overflows in MyDNS 1.1.0 allow remote attackers to (1) cause a denial of service ... 9.0 High
- symantec backupexec system recovery, livestate recovery, norton ghost +1 more +3 more Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery... 4.9 Medium
- symantec backupexec system recovery, livestate recovery, norton ghost +1 more +3 more Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery... 6.8 Medium
- symantec backupexec system recovery, livestate recovery, norton ghost +1 more +3 more Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save &... 7.2 High
- b2evolution ** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in b2evolution allow remote... 7.5 High
- sinecms Cross-site scripting (XSS) vulnerability in mods/Core/result.php in SineCms 2.3.4 allows remote... 6.8 Medium
- gimp Stack-based buffer overflow in the set_color_table function in sunras.c in the SUNRAS plugin in... 6.8 Medium
- opendap server3 The get_url function in DODS_Dispatch.pm for the CGI_server in OPeNDAP 3 allows remote attackers... 10.0 High
- progress webspeed messenger Progress Webspeed Messenger allows remote attackers to obtain sensitive information via a... 7.8 High
- apache axis Apache Axis allows Exposure of Sensitive Information to an Unauthorized Actor 5.0 Medium
- afflib Multiple format string vulnerabilities in AFFLIB 2.2.6 allow remote attackers to execute... 10.0 High
- hp power manager remote agent Unspecified vulnerability in the HP Power Manager Remote Agent (RA) 4.0Build10 and earlier in HP... 7.2 High
- freepbx admin/config.php in the music-on-hold module in freePBX 2.2.x allows remote authenticated... 6.5 Medium
- invision power services power board Cross-site scripting (XSS) vulnerability in Invision Power Board (IP.Board) 2.1.x and 2.2.x... 5.8 Medium
- afflib AFFLIB 2.2.8 and earlier allows attackers to execute arbitrary commands via shell metacharacters... 7.5 High
- afflib Multiple format string vulnerabilities in AFFLIB before 2.2.6 allow remote attackers to execute... 7.5 High
- afflib Multiple stack-based buffer overflows in AFFLIB before 2.2.6 allow remote attackers to cause a... 10.0 High
- ibm websphere application server Unspecified vulnerability in IBM WebSphere Application Server (WAS) before 5.1.1.14, and WAS for... 10.0 High
- novell edirectory ncp in Novell eDirectory before 8.7.3 SP9, and 8.8.x before 8.8.1 FTF2, does not properly handle... 7.8 High
- alexander v. lukyanov lftp mirror --script in lftp before 3.5.9 does not properly quote shell metacharacters, which might... 6.8 Medium
- oneclick cms cms PHP remote file inclusion vulnerability in main/forum/komentar.php in OneClick CMS (aka Sisplet... 7.5 High
- php-generics Multiple PHP remote file inclusion vulnerabilities in PHP-Generics 1.0 beta allow remote... 7.5 High
- codewand phpbrowse PHP remote file inclusion vulnerability in include/include_stream.inc.php in CodeWand phpBrowse... 7.5 High
- enterasys netsight console, netsight inventory manager +1 more The BOOTPD component in Enterasys NetSight Console 2.1 and NetSight Inventory Manager 2.1, and... 7.8 High
- Show olderLoading…