CVEs published in April 2007
627 vulnerabilities, 111 critical, 0 exploited.
- apple mac os x, mac os x server +1 moreHeap-based buffer overflow in the VideoConference framework in Apple Mac OS X 10.3.9 through 10.4...10.0 High
- apple mac os x, mac os x server +1 moreSMB in Apple Mac OS X 10.3.9 through 10.4.9 does not properly clean the environment when...7.2 High
- apple mac os xURLMount in Apple Mac OS X 10.3.9 through 10.4.9 passes the username and password credentials for...4.9 Medium
- apple mac os xThe WebFoundation framework in Apple Mac OS X 10.3.9 and earlier allows subdomain cookies to be...7.8 High
- apple mac os xBuffer overflow in natd in network_cmds in Apple Mac OS X 10.3.9 through 10.4.9, when Internet...7.5 High
- apple mac os xThe Login Window in Apple Mac OS X 10.4 through 10.4.9 displays the software update window...4.6 Medium
- apple mac os xThe Login Window in Apple Mac OS X 10.4 through 10.4.9 does not display the screen saver...4.6 Medium
- apple mac os xThe Login Window in Apple Mac OS X 10.3.9 through 10.4.9 does not properly check certain...4.6 Medium
- apple mac os x, mac os x server +1 moreInteger overflow in the RPC library in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows...9.3 High
- apple mac os x, mac os x server +1 moreUse-after-free vulnerability in Libinfo in Apple Mac OS X 10.3.9 through 10.4.9 allows remote...9.3 High
- microgaming download helper activex controlStack-based buffer overflow in the Microgaming Download Helper ActiveX control (dlhelper.dll)...6.8 Medium
- mozilla firefoxUnspecified vulnerability in Mozilla Firefox allows remote attackers to execute arbitrary code...10.0 High
- apple safariApple QuickTime Java extensions (QTJava.dll), as used in Safari and other browsers, and when Java...7.6 High
- checkpoint zonealarmThe IOCTL handling in srescan.sys in the ZoneAlarm Spyware Removal Engine (SRE) in Check Point...7.2 High
- double precision incorporated courier-imapEval injection vulnerability in (1) courier-imapd.indirect and (2) courier-pop3d.indirect in...10.0 High
- linux kernelThe setsockopt function in the L2CAP and HCI Bluetooth support in the Linux kernel before 2.4.34...2.1 Low
- apple mac os x, mac os x server +1 moreUnspecified vulnerability in the CoreServices daemon in CarbonCore in Apple Mac OS X 10.4 through...7.2 High
- apple mac os x, mac os x preview.app, mac os x server +2 moreApple File Protocol (AFP) Client in Apple Mac OS X 10.3.9 through 10.4.9 does not properly clean...7.2 High
- apple mac os x, mac os x server +1 moreBuffer overflow in the AirPortDriver module for AirPort in Apple Mac OS X 10.3.9 through 10.4.9,...7.2 High
- gracenote cddbcontrol activex controlMultiple buffer overflows in the CDDBControl ActiveX control in Gracenote CDDB before 20070418...9.3 High
- debian linux, linux kernel, canonical ubuntu linux +2 moreA typo in Linux kernel 2.6 before 2.6.21-rc6 and 2.4 before 2.4.35 causes RTA_MAX to be used as...4.7 Medium
- mozzers subsystem subsystemStatic code injection vulnerability in add.php in Mozzers SubSystem 1.0 allows remote attackers...7.5 High
- aimstatsStatic code injection vulnerability in process.php in AimStats 3.2 and earlier allows remote...7.5 High
- aimstatsStatic code injection vulnerability in process.php in AimStats 3.2 allows remote attackers to...7.5 High
- opensurveypilotPHP remote file inclusion vulnerability in administration/user/lib/group.inc.php in...6.8 Medium
- proftpd project proftpdThe Auth API in ProFTPD before 20070417, when multiple simultaneous authentication modules are...5.1 Medium
- kde konquerorKonqueror 3.5.5 release 45.4 allows remote attackers to cause a denial of service (browser crash...5.0 Medium
- apple safariApple Safari allows remote attackers to cause a denial of service (browser crash) via JavaScript...5.0 Medium
- gnu iceweasel, mozilla firefox +1 more(1) Mozilla Firefox 2.0.0.3 and (2) GNU IceWeasel 2.0.0.3 allow remote attackers to cause a...7.8 High
- microsoft internet explorerMicrosoft Internet Explorer 7 allows remote attackers to cause a denial of service (browser hang)...4.3 Medium
- drupal database administration moduleMultiple cross-site request forgery (CSRF) vulnerabilities in the Database Administration (dba)...7.5 High
- drupal database administration moduleMultiple cross-site scripting (XSS) vulnerabilities in the Database Administration (dba) module 4...4.3 Medium
- ibm tivoli monitoring expressHeap-based buffer overflow in kde.dll in IBM Tivoli Monitoring Express 6.1.0 before Fix Pack 2,...10.0 High
- bmc patrol perform agentStack-based buffer overflow in bgs_sdservice.exe in BMC Patrol PerformAgent allows remote...7.5 High
- bmc performance manager** DISPUTED ** PatrolAgent.exe in BMC Performance Manager does not require authentication for...7.5 High
- kooijman-design jgalleryPHP remote file inclusion vulnerability in index.php in jGallery 1.3 allows remote attackers to...7.5 High
- zomplogDirectory traversal vulnerability in upload/force_download.php in Zomplog 3.8 allows remote...7.8 High
- rezervi generic genericMultiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers...7.5 High
- phpfaber topsitesDirectory traversal vulnerability in template.php in in phpFaber TopSites 3 allows remote...7.8 High
- cabron connector connectorPHP remote file inclusion vulnerability in services/samples/inclusionService.php in Cabron...7.5 High
- atmail webmailCross-site scripting (XSS) vulnerability in atmail.php in @Mail 5.0 allows remote attackers to...6.8 Medium
- mcafee virusscan enterpriseBuffer overflow in the On-Access Scanner in McAfee VirusScan Enterprise before 8.0i Patch 12...7.9 High
- mcafee e-business serverThe administration server in McAfee e-Business Server before 8.1.1 and 8.5.x before 8.5.2 allows...5.0 Medium
- bluearc titanBlueArc-FTPD in BlueArc Titan 2x00 devices with firmware 4.2.944b allows remote attackers to...7.8 High
- stephen craton chatnessStephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier stores usernames and unencrypted...10.0 High
- stephen craton chatnessDirect static code injection vulnerability in admin/save.php in Stephen Craton (aka WiredPHP)...6.5 Medium
- stephen craton chatnessadmin/options.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier does not check for...10.0 High
- minigalThe imagecomments function in classes.php in MiniGal b13 allow remote attackers to inject...7.5 High
- minigalThe imagecomments function in classes.php in MiniGal b13 allows remote attackers to inject...7.5 High
- joomlapackPHP remote file inclusion vulnerability in includes/CAltInstaller.php in the JoomlaPack ...6.8 Medium
- Show moreLoading…