CVEs published in April 2007
627 vulnerabilities, 111 critical, 0 exploited.
- microsoft windows 2000The TrueType Fonts rasterizer in Microsoft Windows 2000 SP4 allows local users to gain privileges...7.2 High
- microsoft windows 2000, windows 2003 server, windows vista +1 more +3 moreBuffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2;...6.6 Medium
- microsoft windows 2000, windows 2003 server, windows xp +2 moreUnspecified kernel GDI functions in Microsoft Windows 2000 SP4; XP SP2; and Server 2003 Gold, SP1...7.1 High
- microsoft windows 2000, windows xp +1 moreThe Graphics Rendering Engine in Microsoft Windows 2000 SP4 and XP SP2 allows local users to gain...7.2 High
- webasyst llc shop-scriptMultiple PHP remote file inclusion vulnerabilities in smarty/smarty_class.php in Shop-Script FREE...7.5 High
- hitachi cosminexus component container, electronic form workflow, ucosminexus application server +4 more +6 moreUnspecified vulnerability in Hitachi Cosminexus Component Container 07-00 through 07-00-10, and...5.0 Medium
- hitachi jp1-hicommand device manager, jp1-hicommand global link availability manager, jp1-hicommand replication monitor +2 more +4 moreUnspecified vulnerability in Hitachi JP1/HiCommand DeviceManager, Global Link Availability...5.0 Medium
- ben3w 2bgal** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in 2BGal 3.1.1 allow remote...6.8 Medium
- really simple php and ajax simple php and ajaxMultiple directory traversal vulnerabilities in Really Simple PHP and Ajax (RSPA) 2007-03-23...7.5 High
- drake team cmsDirectory traversal vulnerability in classes/captcha/captcha.jpg.php in Drake CMS allows remote...5.0 Medium
- drake team cmsDirectory traversal vulnerability in 404.php in Drake CMS allows remote attackers to include and...7.5 High
- drake team cmsCross-site scripting (XSS) vulnerability in admin/classes/ui.dta.php in Drake CMS allows remote...4.3 Medium
- xoops repository moduleSQL injection vulnerability in viewcat.php in the Repository module for Xoops allows remote...7.5 High
- xoops malaika system myads moduleSQL injection vulnerability in index.php in the MyAds 2.04jp and earlier module for Xoops allows...7.5 High
- php fusion expanded calendar moduleSQL injection vulnerability in show_event.php in the Expanded Calendar (calendar_panel) 2.00...7.5 High
- avatic aardvark topsites phpMultiple PHP remote file inclusion vulnerabilities in Aardvark Topsites PHP 5 allow remote...7.5 High
- maptools maplabPHP remote file inclusion vulnerability in gmapfactory/params.php in MapLab 2.2.1, when...6.8 Medium
- jsboardDirectory traversal vulnerability in login.php in JSBoard before 2.0.12 allows remote attackers...7.5 High
- qtThe UTF-8 decoder in codecs/qutfcodec.cpp in Qt 3.3.8 and 4.2.3 does not reject long UTF-8...4.3 Medium
- ldap account manager account managerlib/modules.inc in LDAP Account Manager (LAM) before 1.3.0 does not escape HTML special...4.3 Medium
- codebbMultiple PHP remote file inclusion vulnerabilities in CodeBB 1.1b3 and earlier allow remote...7.5 High
- xoops friendfinder moduleSQL injection vulnerability in view.php in the Friendfinder 3.3 and earlier module for Xoops...7.5 High
- mangobery cms cmsMultiple PHP remote file inclusion vulnerabilities in MangoBery CMS 0.5.5 allow remote attackers...7.5 High
- data domain osThe command line administration interface in Data Domain OS before 4.0.3.6 allows remote...9.0 High
- phpPHP 4 before 4.4.5 and PHP 5 before 5.2.1, when using an empty session save path (session...4.6 Medium
- cisco unified callmanager, unified presence server +1 moreCisco Unified CallManager (CUCM) 5.0 before 5.0(4a)SU1 and Cisco Unified Presence Server (CUPS) 1...7.8 High
- cisco unified callmanagerThe Skinny Call Control Protocol (SCCP) implementation in Cisco Unified CallManager (CUCM) 3.3...5.0 Medium
- web-app.org webappweb-app.org WebAPP before 0.9.9.6 allows remote authenticated users to upload certain files (1)...5.0 Medium
- web-app.org webappweb-app.org WebAPP before 0.9.9.6 allows remote authenticated users to open files and write ...6.0 Medium
- web-app.org webappUnspecified vulnerability in the Username Hijacking Patch 20070312 for web-app.org WebAPP 0.9.9.6...4.3 Medium
- web-app.net webappMultiple unspecified vulnerabilities in web-app.net WebAPP have unknown impact and attack vectors...7.5 High
- web-app.org webappMultiple cross-site scripting (XSS) vulnerabilities in web-app.org WebAPP before 0.9.9.6 allow...3.5 Low
- web-app.org webappMultiple unspecified vulnerabilities in form input validation in web-app.org WebAPP before 0.9.9...6.0 Medium
- canonical ubuntu linux, debian linux, mit kerberos 5 +2 moreDouble free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the...9.0 High
- canonical ubuntu linux, debian linux, mit kerberos 5 +2 moreStack-based buffer overflow in the krb5_klog_syslog function in the kadm5 library, as used by the...9.0 High
- canonical ubuntu linux, debian linux, mit kerberos 5 +2 moreThe telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass...10.0 High
- ldap account manager account managerUntrusted search path vulnerability in lamdaemon.pl in LDAP Account Manager (LAM) before 1.0.0...7.2 High
- web-app.net webappCross-site scripting (XSS) vulnerability in cgi-bin/user-lib/topics.pl in web-app.net WebAPP...4.3 Medium
- web-app.net webappCross-site scripting (XSS) vulnerability in cgi-bin/admin/logs.cgi in web-app.net WebAPP before...4.3 Medium
- web-app.net webappThe search function in cgi-lib/user-lib/search.pl in web-app.net WebAPP before 20060909 allows...5.0 Medium
- web-app.net webappCross-site scripting (XSS) vulnerability in the show_recent_searches function in cgi-lib/user-lib...4.3 Medium
- web-app.net webappcgi-lib/subs.pl in web-app.net WebAPP before 0.9.9.3.5 allows attackers to open list files in ...5.0 Medium
- cisco unified callmanager, unified presence server +1 moreUnspecified vulnerability in the IPSec Manager Service for Cisco Unified CallManager (CUCM) 5.0...7.8 High
- phpBuffer overflow in the imap_mail_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5,...7.5 High
- phpBuffer overflow in the php_stream_filter_create function in PHP 5 before 5.2.1 allows remote...5.1 Medium
- t-mobile voice mail systemsT-Mobile voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure...10.0 High
- alcatel-lucent voice mail systemAlcatel-Lucent Lucent Technologies voice mail systems allow remote attackers to retrieve or...10.0 High
- sprint voiceSprint Nextel Sprint voice mail systems allow remote attackers to retrieve or remove messages, or...10.0 High
- nortel callpilot, meridian mail +1 moreNortel Networks CallPilot and Meridian Mail voicemail systems, when a mailbox has auto logon...9.3 High
- hp mercury quality centerStack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in...9.3 High
- Show moreLoading…