CVEs published in April 2007
627 vulnerabilities, 111 critical, 0 exploited.
- limesoft guestbookDirect static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple...7.5 High
- tsdisplay4xoopsPHP remote file inclusion vulnerability in blocks/tsdisplay4xoops_block2.php in tsdisplay4xoops ...7.5 High
- tumusika evolution evolutionCross-site scripting (XSS) vulnerability in index.php in TuMusika Evolution 1.6 allows remote...6.8 Medium
- jx development article componentMultiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier...6.8 Medium
- sitebarMultiple PHP remote file inclusion vulnerabilities in Sitebar 3.3.5 and earlier allow remote...7.5 High
- cnstatsMultiple PHP remote file inclusion vulnerabilities in CNStats 2.12, when register_globals is...6.8 Medium
- cnstatsMultiple PHP remote file inclusion vulnerabilities in CNStats 2.9 allow remote attackers to...6.8 Medium
- oe2edit cmsCross-site scripting (XSS) vulnerability in oe2edit.cgi in oe2edit CMS allows remote attackers to...6.8 Medium
- mobilepublisherphp** DISPUTED ** PHP remote file inclusion vulnerability in MobilePublisherphp 1.1.2 allows remote...6.8 Medium
- republique francaise agoraPHP remote file inclusion vulnerability in modules/Mysqlfinder/MysqlfinderAdmin.php in Agora 1.4...6.8 Medium
- zonelabs zonealarmvsdatant.sys in Check Point Zone Labs ZoneAlarm Pro before 7.0.302.000 does not validate certain...6.9 Medium
- myblogDirect static code injection vulnerability in admin/settings.php in MyBlog 0.9.8 and earlier...6.5 Medium
- myblogMyBlog 0.9.8 and earlier allows remote attackers to bypass authentication requirements via the...7.5 High
- xampp apache distributionMultiple SQL injection vulnerabilities in XAMPP 1.6.0a for Windows allow remote attackers to...7.5 High
- xampp apache distributionThe ADONewConnection Connect function in adodb.php in XAMPP 1.6.0a and earlier for Windows uses...9.3 High
- maian weblog** DISPUTED ** PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows...6.8 Medium
- maian searchPHP remote file inclusion vulnerability in search.php in Maian Search 1.1 allows remote attackers...7.5 High
- maian galleryPHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers...6.8 Medium
- scramdisk 4 linux 4 linuxScramDisk 4 Linux before 1.0-1 does not perform permission checks on mount points, which allows...6.9 Medium
- scramdisk 4 linux 4 linuxCertain programs in containers in ScramDisk 4 Linux before 1.0-1 execute with SUID permissions,...4.6 Medium
- ivan gallery script gallery scriptPHP remote file inclusion vulnerability in index.php in Ivan Gallery Script 0.3 allows remote...7.5 High
- ivan gallery script gallery script** DISPUTED ** PHP remote file inclusion vulnerability in index.php in Ivan Gallery Script 0.1...7.5 High
- open-gorottoMultiple cross-site scripting (XSS) vulnerabilities in Open-gorotto 2.0a 2006/02/08 edition, 2006...4.3 Medium
- turnkey web tools sunshop shopping cartMultiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart...7.5 High
- openmairieDirectory traversal vulnerability in scr/soustab.php in openMairie 1.11 and earlier allows remote...7.5 High
- storefront for gallery galleryMultiple PHP remote file inclusion vulnerabilities in the StoreFront mods for Gallery allow...6.8 Medium
- websliderMultiple PHP remote file inclusion vulnerabilities in Marco Antonio Islas Cruz Web Slider ...7.5 High
- usebbUseBB before 1.0.6 allows remote attackers to obtain sensitive information via a request with...5.0 Medium
- actionpollPHP remote file inclusion vulnerability in db/PollDB.php in Robert Ladstaetter ActionPoll 1.1.1...7.5 High
- actionpollMultiple PHP remote file inclusion vulnerabilities in Robert Ladstaetter ActionPoll 1.1.0, and...7.5 High
- ssh tectia serverSSH Tectia Server for IBM z/OS before 5.4.0 uses insecure world-writable permissions for (1) the...4.4 Medium
- vcdgearStack-based buffer overflow in VCDGear 3.55 and 3.56 BETA allows user-assisted remote attackers...9.3 High
- afterlogic mailbee webmailCross-site scripting (XSS) vulnerability in check_login.asp in AfterLogic MailBee WebMail Pro 3.4...4.3 Medium
- wizz computers rss readerCross-zone scripting vulnerability in the Wizz RSS Reader before 2.1.9 extension to Mozilla...6.8 Medium
- eiqnetworks enterprise security analyzerMultiple buffer overflows in the ESA protocol implementation in eIQnetworks Enterprise Security...10.0 High
- picozipDirectory traversal vulnerability in Acubix PicoZip 4.02 allows user-assisted remote attackers to...6.8 Medium
- aircrack-ng airodump-ngStack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute...10.0 High
- akamai technologies download managerStack-based buffer overflow in Akamai Technologies Download Manager ActiveX Control ...9.3 High
- akamai technologies download managerStack-based buffer overflow in the GetPrivateProfileSectionW function in Akamai Technologies...9.3 High
- lighttpdlighttpd before 1.4.14 allows attackers to cause a denial of service (crash) via a request to a...7.8 High
- lighttpdlighttpd 1.4.12 and 1.4.13 allows remote attackers to cause a denial of service (cpu and resource...5.0 Medium
- paul vixie vixie cronVixie Cron before 4.1-r10 on Gentoo Linux is installed with insecure permissions, which allows...2.1 Low
- landesk management suiteStack-based buffer overflow in the Alert Service (aolnsrvr.exe) in LANDesk Management Suite 8.7...10.0 High
- pythonOff-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2...5.0 Medium
- bftpdBuffer overflow in the parsecmd function in bftpd before 1.8 has unknown impact and attack...5.0 Medium
- ricargbookMultiple directory traversal vulnerabilities in header.php in RicarGBooK 1.2.1 allow remote...5.0 Medium
- mambo calendarMultiple PHP remote file inclusion vulnerabilities in the Calendar Module (com_calendar) 1.5.5...6.8 Medium
- webmethods glueDirectory traversal vulnerability in /console in the Management Console in webMethods Glue 6.5.1...5.0 Medium
- openadsCRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 (aka Max Media Manager, MMM)...7.5 High
- openadsMultiple CRLF injection vulnerabilities in adclick.php in (a) Openads (phpAdsNew) 2.0.11 and...7.5 High
- Show moreLoading…