CVEs published in April 2007
627 vulnerabilities, 111 critical, 0 exploited.
- inoutmailinglistmanagerMultiple SQL injection vulnerabilities in InoutMailingListManager 3.1 and earlier allow remote...7.5 High
- inoutmailinglistmanagerInoutMailingListManager 3.1 and earlier sends a Location redirect header but does not exit after...6.8 Medium
- inoutmailinglistmanagerInoutMailingListManager 3.1 and earlier allows remote attackers to access certain restricted...6.8 Medium
- crea-bookMultiple direct static code injection vulnerabilities in admin/configurer2.php in Crea-Book 1.0...6.5 Medium
- raphael limbach crea-bookMultiple SQL injection vulnerabilities in admin/admin.php in Crea-Book 1.0 and earlier allow...7.5 High
- nazarkin.name weatimagesPHP remote file inclusion vulnerability in index.php in Weatimages 1.7.1 and earlier, when...7.5 High
- hiox india guest bookDirect static code injection vulnerability in HIOX Guest Book (HGB) 4.0 allows remote attackers...7.5 High
- smarty** DISPUTED ** PHP remote file inclusion vulnerability in unit_test/test_cases.php in Smarty 2.6...7.5 High
- codebreakPHP remote file inclusion vulnerability in codebreak.php in CodeBreak, probably 1.1.2 and earlier...6.8 Medium
- quaggabgpd/bgp_attr.c in Quagga 0.98.6 and earlier, and 0.99.6 and earlier 0.99 versions, does not...6.3 Medium
- hp hp-uxUnspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport...4.9 Medium
- hp hp-uxBuffer overflow in the pfs_mountd.rpc RPC daemon in the Portable File System (PFS) in HP-UX B.11...9.3 High
- mamboxchange com zoomMultiple PHP remote file inclusion vulnerabilities in the com_zoom 2.5 beta 2 and earlier module...7.5 High
- youngzsoft cmailserverCross-site scripting (XSS) vulnerability in mail/signup.asp in CmailServer WebMail 5.4.3, and...4.3 Medium
- sam crew myblogPHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6...7.5 High
- dotclearMultiple cross-site scripting (XSS) vulnerabilities in DotClear before 1.2.6 allow remote...4.3 Medium
- phpecho cms cmsCross-site scripting (XSS) vulnerability in kernel/filters.inc.php in PHPEcho CMS 2.0 allows...4.3 Medium
- phpecho cms cms** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in PHPEcho CMS 2.0 allow...7.5 High
- barnraiser aroundmeMultiple PHP remote file inclusion vulnerabilities in barnraiser AROUNDMe 0.7.7 allow remote...7.5 High
- phpexploratorMultiple PHP remote file inclusion vulnerabilities in phpexplorator.php in phpexplorator 2.0...7.5 High
- lite-cmsPHP remote file inclusion vulnerability in index.php in lite-cms 0.2.1 allows remote attackers to...7.5 High
- cyboards php litePHP remote file inclusion vulnerability in include/default_header.php in Cyboards PHP Lite 1.21...7.5 High
- really simple php and ajax simple php and ajaxMultiple PHP remote file inclusion vulnerabilities in Really Simple PHP and Ajax (RSPA) 2007-03...7.5 High
- metamod-pThe safevoid_vsnprintf function in Metamod-P 1.19p29 and earlier on Windows allows remote...7.8 High
- nick jones topliste moduleSQL injection vulnerability in index.php in the Topliste 1.0 module for PHP-Fusion allows remote...7.5 High
- xoops popnupblogSQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops...7.5 High
- php fusion arcade moduleSQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote...7.5 High
- holacmsCross-site scripting (XSS) vulnerability in index_cms.php in holaCMS 1.4.10 allows remote...4.3 Medium
- xoops virii info module** DISPUTED ** PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and...7.5 High
- slaed cmsMultiple PHP remote file inclusion vulnerabilities in SLAED CMS 2 allow remote attackers to...7.5 High
- wf-sections, xoops happy linux xfsection module, zmagazine module +2 moreSQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka...7.5 High
- microsoft windows ntRace condition in the Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0...6.9 Medium
- adobe coldfusionAdobe ColdFusion MX 7 for Linux and Solaris uses insecure permissions for certain scripts and...7.2 High
- roxio cineplayerMultiple stack-based buffer overflows in SonicDVDDashVRNav.dll in Roxio CinePlayer 3.2 allow...9.3 High
- dropafewDropAFew before 0.2.1 does not require authorization for certain privileged actions, which allows...6.4 Medium
- dropafewMultiple SQL injection vulnerabilities in DropAFew before 0.2.1 allow remote attackers to execute...7.5 High
- adobe bridgeUnspecified vulnerability in the installer for Adobe Bridge 1.0.3 update for Apple OS X, when...7.2 High
- gazi okul sitesi okul sitesiSQL injection vulnerability in fotokategori.asp in Gazi Okul Sitesi 2007 allows remote attackers...7.5 High
- mozilla firefoxMozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP...5.0 Medium
- sam crew myblogCross-site scripting (XSS) vulnerability in admin/modify.php in Sam Crew MyBlog remote attackers...4.3 Medium
- sam crew myblogPHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6...6.8 Medium
- stat12** DISPUTED ** PHP remote file inclusion vulnerability in index.php in stat12 allows remote...6.8 Medium
- exv2 content management systemSession fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack...5.0 Medium
- exv2 content management systemMultiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.0.4.3 and earlier allow remote...4.3 Medium
- mybb, mybulletinboard +1 moremember.php in MyBB (aka MyBulletinBoard), when debug mode is available, allows remote...6.0 Medium
- mybb, mybulletinboard +1 moreSQL injection vulnerability in the create_session function in class_session.php in MyBB (aka...7.5 High
- xoops wf-snippetsSQL injection vulnerability in index.php in the WF-Snippets 1.02 and earlier module for XOOPS...7.5 High
- phpbb mutantPHP remote file inclusion vulnerability in mutant_functions.php in the Mutant 0.9.2 portal for...7.5 High
- xoops rha7 downloads moduleSQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for...7.5 High
- tinymuxUnspecified vulnerability in the process_cmdent function in command.cpp in TinyMUX before 2.4 has...10.0 High
- Show moreLoading…