CVEs published in April 2007
627 vulnerabilities, 111 critical, 0 exploited.
- sun sunosUnspecified vulnerability in the IP implementation in Sun Solaris 8 and 9 allows remote attackers...5.0 Medium
- antonis ventouris weather modulePHP remote file inclusion vulnerability in mod_weather.php in the Antonis Ventouris Weather...7.5 High
- avant-garde solutions mosmediaMultiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia ...7.5 High
- avant-garde solutions mosmediaMultiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite 1.0...6.8 Medium
- apop protocol protocolThe APOP protocol allows remote attackers to guess the first 3 characters of a password via man...2.6 Low
- cisco 2100 wireless lan controller, 4400 wireless lan controller +1 moreCisco Wireless LAN Controller (WLC) before 4.0.206.0 saves the WLAN ACL configuration with an...4.0 Medium
- cisco wireless lan controller softwareCisco Aironet 1000 Series and 1500 Series Lightweight Access Points before 3.2.185.0, and 4.0.x...6.2 Medium
- cisco wireless lan controller softwareThe Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.171.5, 4...6.1 Medium
- cisco 2000 wireless lan controller, 2100 wireless lan controller, 4100 wireless lan controller +1 more +3 moreThe Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.193.5, 4...6.1 Medium
- cisco wireless lan controller softwareCisco Wireless LAN Controller (WLC) before 3.2.116.21, and 4.0.x before 4.0.155.0, allows remote...2.9 Low
- cisco wireless lan controller softwareThe SNMP implementation in the Cisco Wireless LAN Controller (WLC) before 20070419 uses the...10.0 High
- cisco wireless control systemCisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web...7.8 High
- cisco wireless control systemUnspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.87.0 allows remote...9.0 High
- cisco wireless control systemUnspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.81.0 allows remote...6.5 Medium
- cisco wireless control systemCisco Wireless Control System (WCS) before 4.0.96.0 has a hard-coded FTP username and password...7.5 High
- 3proxyBuffer overflow in the HTTP proxy service for 3proxy 0.5 to 0.5.3g, and 0.6b-devel before...10.0 High
- clam anti-virus clamavInteger signedness error in the (1) cab_unstore and (2) cab_extract functions in libclamav/cab.c...7.5 High
- clam anti-virus clamav, ifenslave +1 moreThe chm_decompress_stream function in libclamav/chmunpack.c in Clam AntiVirus (ClamAV) before 0...7.1 High
- redhat enterprise linux, fedora core +1 morelharc.c in lha does not securely create temporary files, which might allow local users to read or...4.9 Medium
- freeradiusMemory leak in freeRADIUS 1.1.5 and earlier allows remote attackers to cause a denial of service ...5.0 Medium
- elinksUntrusted search path vulnerability in the add_filename_to_string function in intl/gettext...4.4 Medium
- gentoo file, amavis virus scanner +1 moreThe gnu regular expression code in file 4.20 allows context-dependent attackers to cause a denial...7.8 High
- phpwikiUnrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1...7.5 High
- phpwikiUnrestricted file upload vulnerability in the UpLoad feature (lib/plugin/UpLoad.php) in PhpWiki 1...6.8 Medium
- secustick usb flash driveUSB20.dll in Secustick USB flash drive decouples the authorization and file access routines,...7.2 High
- adobe flash player, opera browser +1 moreAdobe Macromedia Flash Player 7 and 9, when used with Opera before 9.20 or Konqueror before...6.8 Medium
- mephistoCross-site scripting (XSS) vulnerability in Mephisto 0.7.3 allows remote attackers to inject...4.3 Medium
- toenda software development toendacmsCross-site scripting (XSS) vulnerability in toendaCMS 1.5.3 allows remote attackers to inject...4.3 Medium
- chcounterCross-site scripting (XSS) vulnerability in chcounter 3.1.3 allows remote attackers to inject...4.3 Medium
- microsoft windows 2000, windows 2003 server +1 moreStack-based buffer overflow in the RPC interface in the Domain Name System (DNS) Server Service...10.0 High
- apache http serversuexec in Apache HTTP Server (httpd) 2.2.3 does not verify combinations of user and group IDs on...4.4 Medium
- apache http serversuexec in Apache HTTP Server (httpd) 2.2.3 uses a partial comparison for verifying whether the...3.7 Low
- apache http serverMultiple race conditions in suexec in Apache HTTP Server (httpd) 2.2.3 between directory and file...6.2 Medium
- pineapple technologies loreMultiple PHP remote file inclusion vulnerabilities in Pineapple Technologies Lore 1 allow remote...7.5 High
- xodagallery** DISPUTED ** Unspecified vulnerability in administration.php in xodagallery allows remote...7.5 High
- tomex phpgalleryscriptPHP remote file inclusion vulnerability in init.gallery.php in phpGalleryScript 1.0 allows remote...7.5 High
- alstrasoft video share enterpriseSQL injection vulnerability in msg.php in AlstraSoft Video Share Enterprise allows remote...6.5 Medium
- alstrasoft video share enterprisesiteadmin/useredit.php in AlstraSoft Video Share Enterprise does not check authentication, which...7.5 High
- phpmyadminCross-site scripting (XSS) vulnerability in mysql/phpinfo.php in phpMyAdmin 2.6.1 allows remote...4.3 Medium
- request it itPHP remote file inclusion vulnerability in index.php in Request It 1.0b allows remote attackers...6.8 Medium
- mynewsPHP remote file inclusion vulnerability in include/blocks/week_events.php in MyNews 4.2.2 allows...7.5 High
- jex-treme einfacher passworschutzCross-site scripting (XSS) vulnerability in index.php in JEx-Treme Einfacher Passworschutz allows...4.3 Medium
- mimarsinan comprexxMultiple directory traversal vulnerabilities in MimarSinan CompreXX 4.1 allow remote attackers to...5.8 Medium
- deskproCross-site scripting (XSS) vulnerability in login.php in DeskPro 2.0.1 allows remote attackers to...4.3 Medium
- bftpdDouble free vulnerability in bftpd before 1.8 allows remote authenticated users to cause a denial...6.8 Medium
- simpcmsPHP remote file inclusion vulnerability in index.php in SimpCMS Light 04.10.2007 and earlier...6.8 Medium
- pl-phpDirectory traversal vulnerability in admin.php in pL-PHP beta 0.9 allows remote attackers to...7.5 High
- pl-phpadmin.php in pL-PHP beta 0.9 allows remote attackers to bypass authentication by setting the...7.5 High
- pl-phpMultiple SQL injection vulnerabilities in login.php in pL-PHP beta 0.9 allow remote attackers to...7.5 High
- joomla taskhopper componentMultiple PHP remote file inclusion vulnerabilities in the Taskhopper 1.1 component for Mambo and...6.8 Medium
- Show moreLoading…