CVEs published in April 2007
627 vulnerabilities, 111 critical, 0 exploited.
- php121 instant messengerPHP file inclusion vulnerability in php121db.php in PHP121 Instant Messenger 2.2 allows remote...6.8 Medium
- pathos content management systemPHP remote file inclusion vulnerability in warn.php in Pathos Content Management System (CMS) 0...6.8 Medium
- ecardmax.com hot editor, mybb hot editor plugin +1 moreDirectory traversal vulnerability in richedit/keyboard.php in eCardMAX HotEditor (Hot Editor) 4.0...6.8 Medium
- pineapple technologies quizshockCross-site scripting (XSS) vulnerability in auth.php in Pineapple Technologies QuizShock 1.6.1...4.3 Medium
- aol icq, instant messenger +1 moreDirectory traversal vulnerability in AOL Instant Messenger (AIM) 5.9 and earlier, and ICQ 5.1 and...4.3 Medium
- ipsec-toolsThe isakmp_info_recv function in src/racoon/isakmp_inf.c in racoon in Ipsec-tools before 0.6.7...4.3 Medium
- apple mac os xfsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before...5.4 Medium
- microsoft .net frameworkMicrosoft ASP .NET Framework 2.0.50727.42 does not properly handle comment (/* */) enclosures,...4.3 Medium
- microsoft windows vistaUse-after-free vulnerability in the Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows...7.2 High
- microsoft windows 2000, windows 2003 server, windows xp +2 moreThe Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0; 2000 SP4; XP SP2...7.2 High
- microsoft windows 2000, windows 2003 server, windows xp +2 moreUnspecified vulnerability in Microsoft Agent (msagent\agentsvr.exe) in Windows 2000 SP4, XP SP2,...9.3 High
- microsoft windows xpStack-based buffer overflow in the Universal Plug and Play (UPnP) service in Microsoft Windows XP...6.8 Medium
- microsoft content management serverCross-site scripting (XSS) vulnerability in Microsoft Content Management Server (MCMS) 2001 SP1...4.3 Medium
- microsoft content management serverMicrosoft Content Management Server (MCMS) 2001 SP1 and 2002 SP2 does not properly handle certain...10.0 High
- phpCRLF injection vulnerability in the FILTER_VALIDATE_EMAIL filter in ext/filter in PHP 5.2.0 and 5...5.0 Medium
- internet pictures corporation ipix image wellMultiple buffer overflows in the Internet Pictures Corporation iPIX Image Well ActiveX control ...10.0 High
- ledgersmb, sql-ledger +1 more(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set...7.5 High
- wordpressSQL injection vulnerability in xmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier,...6.5 Medium
- sky gunning myspeachDirectory traversal vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier allows...5.8 Medium
- sky gunning myspeachPHP remote file inclusion vulnerability in chat.php in Sky GUNNING MySpeach 3.0.7 and earlier,...6.8 Medium
- wordpressCross-site scripting (XSS) vulnerability in wp-includes/general-template.php in WordPress before...4.3 Medium
- wordpressxmlrpc (xmlrpc.php) in WordPress 2.1.2, and probably earlier, allows remote authenticated users...4.9 Medium
- phpInteger overflow in the msg_receive function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1, on...7.5 High
- phpInteger signedness error in the _zend_mm_alloc_int function in the Zend Memory Manager in PHP 5.2...7.5 High
- phpBuffer overflow in the sqlite_decode_binary function in src/encode.c in SQLite 2, as used by PHP...7.5 High
- php, canonical ubuntu linux, debian linux +2 moreBuffer overflow in the sqlite_decode_binary function in the bundled sqlite library in PHP 4...7.5 High
- phpInteger overflow in the str_replace function in PHP 4.4.5 and PHP 5.2.1 allows context-dependent...6.8 Medium
- phpInteger overflow in the str_replace function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows...7.5 High
- phpMultiple integer signedness errors in the printf function family in PHP 4 before 4.4.5 and PHP 5...6.8 Medium
- phpPHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to read...7.8 High
- hp mercury quality centerqcbin/servlet/tdservlet/TDAPI_GeneralWebTreatment in HP Mercury Quality Center 9.0 build 9.1.0...6.5 Medium
- solidworks sldimdownload activex controlThe Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6...9.3 High
- yahoo messengerStack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX...9.3 High
- x.org libxfont, mandrakesoft mandrake multi network firewall, openbsd +6 more +8 moreInteger overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows...3.8 Low
- x.org libxfont, mandrakesoft mandrake multi network firewall, openbsd +5 more +7 moreInteger overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before...8.5 High
- x.org x11Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension...9.0 High
- kaspersky lab anti-virus, internet security +1 moreUnspecified vulnerability in KLIF (klif.sys) in Kaspersky Anti-Virus, Anti-Virus for Workstations...6.8 Medium
- kaspersky lab anti-virus, internet security +1 moreInteger overflow in the _NtSetValueKey function in klif.sys in Kaspersky Anti-Virus, Anti-Virus...6.6 Medium
- kaspersky lab anti-virus, internet security +1 moreThe StartUploading function in KL.SysInfo ActiveX control (AxKLSysInfo.dll) in Kaspersky Anti...9.3 High
- parakey inc. firebugCross-zone scripting vulnerability in the DOM templates (domplates) used by the console.log...6.8 Medium
- vmware esxBuffer overflow in VMware ESX Server 3.0.0 and 3.0.1 might allow attackers to gain privileges or...6.6 Medium
- vmware esx, esx server +1 moreDouble free vulnerability in VMware ESX Server 3.0.0 and 3.0.1 allows attackers to cause a denial...5.0 Medium
- kaspersky lab anti-virus, internet security +1 moreKaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the (a)...10.0 High
- phpMultiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD...6.8 Medium
- kaspersky lab anti-virus, internet security +1 moreHeap-based buffer overflow in the arj.ppl module in the OnDemand Scanner in Kaspersky Anti-Virus,...10.0 High
- debian linuxBuffer overflow in man and mandb (man-db) 2.4.3 and earlier allows local users to execute...4.6 Medium
- ibm tivoli provisioning manager os deploymentThe management service in IBM Tivoli Provisioning Manager for OS Deployment before 5.1 Fix Pack 2...10.0 High
- irfanviewBuffer overflow in IrfanView 3.99 allows remote attackers to execute arbitrary code via a crafted...10.0 High
- dproxyStack-based buffer overflow in the dns_decode_reverse_name function in dns_decode.c in dproxy...10.0 High
- microsoft windows 2000, windows 2003 server, windows vista +1 more +3 moreBuffer overflow in the Graphics Device Interface (GDI) in Microsoft Windows 2000 SP4; XP SP2;...7.2 High
- Show moreLoading…