CVEs published in April 2007
627 vulnerabilities, 111 critical, 0 exploited.
- tinymuxBuffer overflow in TinyMUX before 2.4 allows attackers to cause a denial of service via...5.0 Medium
- guernion sylvain portail web phpMultiple PHP remote file inclusion vulnerabilities in Guernion Sylvain Portail Web Php (aka...6.8 Medium
- ubbcentral ubb.threadsSQL injection vulnerability in ubbthreads.php in Groupee UBB.threads 6.1.1 and earlier allows...7.5 High
- signkorea skcommax activex controlMultiple stack-based buffer overflows in the SignKorea SKCrypAX ActiveX control module 5.4.1.2...10.0 High
- archivexpertMultiple directory traversal vulnerabilities in ArchiveXpert 2.02 build 80 allow remote attackers...7.5 High
- onelook courts onlineSession fixation vulnerability in onelook courts on-line allows remote attackers to hijack web...7.5 High
- onelook onebyone cmsSession fixation vulnerability in onelook onebyone CMS allows remote attackers to hijack web...7.5 High
- onelook oboshopSession fixation vulnerability in onelook obo Shop allows remote attackers to hijack web sessions...7.5 High
- webblizzard content management systemCross-site scripting (XSS) vulnerability in index_cms.php in WebBlizzard CMS allows remote...4.3 Medium
- webblizzard content management systemSession fixation vulnerability in WebBlizzard CMS allows remote attackers to hijack web sessions...7.5 High
- irfanviewBuffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of service...9.3 High
- parakey inc. firebugCross-zone scripting vulnerability in the DOM templates (domplates) used by the console.log...3.5 Low
- microsoft windows xpInteger overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote...10.0 High
- ibm websphere application serverUnspecified vulnerability in the Servlet Engine/Web Container in IBM WebSphere Application Server...7.5 High
- ibm websphere application serverThe Java Message Service (JMS) in IBM WebSphere Application Server (WAS) before 6.1.0.7 allows...5.0 Medium
- acd systems acdsee photo managerInteger overflow in ACDSee Photo Manager 9.0 allows context-dependent attackers to cause a denial...9.3 High
- faststone image viewerInteger overflow in FastStone Image Viewer 2.9 allows context-dependent attackers to cause a...9.3 High
- ibm lotus notesCross-site scripting (XSS) vulnerability in the Active Content Filter feature in Domino Web...4.3 Medium
- ibm tivoli business service managerIBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext,...4.9 Medium
- linux kernelThe atalk_sum_skb function in AppleTalk for Linux kernel 2.6.x before 2.6.21, and possibly 2.4.x,...7.8 High
- daniel naber languagetoolCross-site scripting (XSS) vulnerability in the embedded webserver in Daniel Naber LanguageTool...6.8 Medium
- ichitaroIchitaro 2005 through 2007, and possibly related products, allows remote attackers to have an...4.3 Medium
- dreamcodes scorp bookPHP remote file inclusion vulnerability in smilies.php in Scorp Book 1.0 allows remote attackers...6.8 Medium
- scar4u.de scaradcontrollerPHP remote file inclusion vulnerability in scaradcontrol.php in ScarAdControl (ScarAdController)...6.8 Medium
- scar4u.de scaradcontrollerPHP file inclusion vulnerability in admin/index.php in ScarAdControl (ScarAdController) 1.1...6.8 Medium
- php-nuke eboard moduleDirectory traversal vulnerability in member.php in the eBoard 1.0.7 module for PHP-Nuke allows...6.8 Medium
- dreamcodes pcp-guestbookMultiple directory traversal vulnerabilities in PcP-Guestbook (PcP-Book) 3.0 allow remote...7.5 High
- scar4u scarnewsDirectory traversal vulnerability in scarnews.inc.php in ScarNews 1.2.1 allows remote attackers...7.5 High
- smodcmsSQL injection vulnerability in index.php in the slownik module in SmodCMS 2.10 and earlier allows...7.5 High
- cattadocDirectory traversal vulnerability in download2.php in cattaDoc 2.21, and possibly other versions...7.8 High
- gna beryoDirectory traversal vulnerability in downloadpic.php in Beryo 2.0, and possibly other versions...5.0 Medium
- witshareDirectory traversal vulnerability in index.php in witshare 0.9 allows remote attackers to include...7.5 High
- youngzsoft cmailserverCross-site scripting (XSS) vulnerability in signup.asp in CmailServer WebMail 5.3.4 and earlier...4.3 Medium
- directadminCross-site scripting (XSS) vulnerability in JBMC Software DirectAdmin before 1.293 does not...6.8 Medium
- tru-zone nukeetThe borrado function in modules/Your_Account/index.php in Tru-Zone Nuke ET 3.4 before fix 7 does...6.5 Medium
- phpcontact** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in phpContact allow remote...6.8 Medium
- nullsoft winampThe Impulse Tracker (IT) and ScreamTracker 3 (S3M) modules in IN_MOD.DLL in AOL Nullsoft Winamp 5...9.3 High
- nullsoft winampLIBSNDFILE.DLL, as used by AOL Nullsoft Winamp 5.33 and possibly other products, allows remote...9.3 High
- smodbipSQL injection vulnerability in index.php in the aktualnosci module in SmodBIP 1.06 and earlier...7.5 High
- arizona-dream livre d or livorCross-site scripting (XSS) vulnerability in index.php in Arizona Dream Livre d'or (livor) 2.5...4.3 Medium
- sap rfc libraryThe RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109...5.0 Medium
- sap rfc libraryBuffer overflow in the SYSTEM_CREATE_INSTANCE function in the SAP RFC Library 6.40 and 7.00...10.0 High
- sap rfc libraryBuffer overflow in the RFC_START_GUI function in the SAP RFC Library 6.40 and 7.00 before...10.0 High
- sap rfc libraryBuffer overflow in the RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before...7.5 High
- sap rfc libraryThe RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote...7.8 High
- sap rfc libraryThe TRUSTED_SYSTEM_SECURITY function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows...5.0 Medium
- microsoft windows 2000, windows 2003 server, windows nt +1 more +3 moreHeap-based buffer overflow in Microsoft Windows allows user-assisted remote attackers to have an...6.8 Medium
- microsoft wordMultiple unspecified vulnerabilities in Microsoft Word 2007 allow remote attackers to cause a...7.1 High
- microsoft wordBuffer overflow in wwlib.dll in Microsoft Word 2007 allows remote attackers to cause a denial of...6.8 Medium
- ryan haudenschilt battle.net clan scriptSQL injection vulnerability in login.php in Ryan Haudenschilt Battle.net Clan Script for PHP 1.5...7.5 High
- Show moreLoading…