CVEs published in April 2007
627 vulnerabilities, 111 critical, 0 exploited.
- forum picture and meta tags picture and meta tagsPHP remote file inclusion vulnerability in MOD_forum_fields_parse.php in the Forum picture and...7.5 High
- lykoszine lykos reviews moduleSQL injection vulnerability in index.php in the Lykos Reviews (lykos_reviews) 1.00 module for...7.5 High
- xoops tutoriais moduleSQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote...7.5 High
- xoops library moduleSQL injection vulnerability in viewcat.php in the Library module for Xoops allows remote...7.5 High
- xoops core moduleSQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers...7.5 High
- inconnueteam ecalSQL injection vulnerability in display.php in the eCal 2.24 and earlier module for Xoops allows...7.5 High
- bt-sondagePHP remote file inclusion vulnerability in utilitaires/gestion_sondage.php in BT-Sondage 112...7.5 High
- chapi tiny eventSQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 and earlier module...7.5 High
- kaotik kshopSQL injection vulnerability in product_details.php in the Kshop 1.17 and earlier module for Xoops...7.5 High
- grafx software company website builderMultiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder (CWB) PRO 1.5...7.5 High
- camportailSQL injection vulnerability in show.php in the Camportail 1.1 and earlier module for Xoops allows...7.5 High
- peak xoops myalbum pSQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier...7.5 High
- red mexico rm\+soft gallerySQL injection vulnerability in categos.php in the RM+Soft Gallery (rmgallery) 1.0 module for...7.5 High
- myxoops debaserSQL injection vulnerability in genre.php in the debaser 0.92 and earlier module for Xoops allows...7.5 High
- pulseaudioPulseAudio 0.9.5 allows remote attackers to cause a denial of service (daemon crash) via (1) a...7.8 High
- maildwarfUnspecified vulnerability in MailDwarf 3.01 and earlier allows remote attackers to send e-mail to...5.0 Medium
- maildwarfCross-site scripting (XSS) vulnerability in MailDwarf 3.01 and earlier allows remote attackers to...6.8 Medium
- sblogDirectory traversal vulnerability in inc/lang.php in sBLOG 0.7.3 Beta allows remote attackers to...7.5 High
- cisco trust agentCisco Secure ACS does not require authentication when Cisco Trust Agent (CTA) transmits posture...7.5 High
- joris guisson ktorrentDirectory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".....6.4 Medium
- ibm aixBuffer overflow in the drmgr command in IBM AIX 5.2 and 5.3 allows local users to cause a denial...7.2 High
- imagemagickMultiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute...6.8 Medium
- jccorp urlshrinkMultiple unspecified vulnerabilities in JCcorp URLshrink before 1.3.2 have unspecified attack...10.0 High
- jccorp urlshrinkJCcorp URLshrink 1.3.1 allows remote attackers to execute arbitrary PHP code via the email...10.0 High
- mozillaThe Javascript engine in Mozilla 1.7 and earlier on Sun Solaris 8, 9, and 10 might allow remote...10.0 High
- symantec norton internet security, norton personal firewall, antivirus +5 more +7 moreSPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate...4.9 Medium
- aolThe LinkSBIcons method in the SuperBuddy ActiveX control (Sb.SuperBuddy.1) in America Online 9.0...9.3 High