CVEs published in April 2007
627 vulnerabilities, 111 critical, 0 exploited.
- punbbfooter.php in PunBB 1.2.14 and earlier allows remote attackers to include local files in include...6.8 Medium
- punbbMultiple cross-site scripting (XSS) vulnerabilities in PunBB 1.2.14 and earlier allow remote...4.3 Medium
- punbbinclude/common.php in PunBB 1.2.14 and earlier does not properly handle a disabled ini_get...7.5 High
- cosigncosign-bin/cosign.cgi in Cosign 2.0.2 and earlier allows remote authenticated users to perform...6.5 Medium
- cosignThe CHECK command in Cosign 2.0.1 and earlier allows remote attackers to bypass authentication...7.5 High
- dovecotDirectory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when...4.3 Medium
- broadcom cleverpath portalSQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute...6.5 Medium
- clam anti-virus clamavFile descriptor leak in the PDF handler in Clam AntiVirus (ClamAV) allows remote attackers to...7.8 High
- dmcmsUnrestricted file upload vulnerability in includes/upload_file.php in DmCMS allows remote...7.5 High
- ipswitch ws ftpUnspecified vulnerability in the Initialize function in NetscapeFTPHandler in WS_FTP Home and...7.8 High
- mybbMultiple SQL injection vulnerabilities in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and...7.5 High
- mybulletinboardSQL injection vulnerability in calendar.php in MyBB (aka MyBulletinBoard) 1.2.5 and earlier...7.5 High
- netsprint ask ie toolbarA certain ActiveX control in askPopStp.dll in Netsprint Ask IE Toolbar 1.1 allows remote...7.8 High
- accusoft imagegear, corel paint shop pro +1 moreBuffer overflow in igcore15d.dll 15.1.2.0 and 15.2.0.0 for AccuSoft ImageGear, as used in Corel...6.8 Medium
- extreme phpbb phpbbMultiple PHP remote file inclusion vulnerabilities in Extreme PHPBB2 3.0 Pre Final allow remote...7.5 High
- ripe website manager website managerSQL injection vulnerability in contact/index.php in Ripe Website Manager 0.8.4 and earlier allows...7.5 High
- ripe website manager website managerCross-site scripting (XSS) vulnerability in contact/index.php in Ripe Website Manager 0.8.4 and...4.3 Medium
- lan management system management systemPHP remote file inclusion vulnerability in modules/rtmessageadd.php in LAN Management System (LMS...7.5 High
- gpl php board php boardMultiple PHP remote file inclusion vulnerabilities in GPL PHP Board (GPB) unstable-2001.11.14-1...7.5 High
- big blue guestbookCross-site scripting (XSS) vulnerability in Big Blue Guestbook allows remote attackers to inject...4.3 Medium
- acvsws php5PHP remote file inclusion vulnerability in inc_ACVS/SOAP/Transport.php in Accueil et Conseil en...6.8 Medium
- post revolution revolutionMultiple PHP remote file inclusion vulnerabilities in Post Revolution 6.6 and 7.0 RC2 allow...7.5 High
- pagodeDirectory traversal vulnerability in navigator/navigator_ok.php in Pagode 0.5.8 allows remote...10.0 High
- cjg explorer pro explorer pro, joomla, phpsitebackup +1 more +3 morePHP remote file inclusion vulnerability in lib/pcltar.lib.php (aka pcltar.php) in the PclTar...6.8 Medium
- novell groupwiseStack-based buffer overflow in the base64_decode function in GWINTER.exe in Novell GroupWise (GW)...10.0 High
- oracle e-business suiteThe APPLSYS.FND_DM_NODES package in Oracle E-Business Suite does not check for valid sessions,...9.4 High
- postgresql, canonical ubuntu linux, debian linux +2 moreUntrusted search path vulnerability in PostgreSQL before 7.3.19, 7.4.x before 7.4.17, 8.0.x...6.0 Medium
- oracle e-business suiteThe ADI_BINARY component in the Oracle E-Business Suite allows remote attackers to download...7.8 High
- lan management system management systemCross-site scripting (XSS) vulnerability in LAN Management System (LMS) before 1.6.9 allows...4.3 Medium
- brettle development neatuploadRace condition in the NeatUpload ASP.NET component 1.2.11 through 1.2.16, 1.1.18 through 1.1.23,...5.0 Medium
- joomla jambook** DISPUTED ** PHP remote file inclusion vulnerability in jambook.php in the Jambook ...6.8 Medium
- alvaro alvaros messengeraMSN (aka Alvaro's Messenger) 0.96 and earlier allows remote attackers to cause a denial of...5.0 Medium
- gentoo xnviewStack-based buffer overflow in XnView 1.90.3 allows user-assisted remote attackers to execute...10.0 High
- acd systems acdsee, photo editor +1 moreStack-based buffer overflow in the ID_X.apl plugin in ACDSee 9.0 Build 108, Pro 8.1 Build 99, and...9.3 High
- antonio da cruz photofiltre studioBuffer overflow in Photofiltre Studio 8.1.1 allows user-assisted remote attackers to execute...9.3 High
- freepbxMultiple cross-site scripting (XSS) vulnerabilities in freePBX 2.2.x allow remote attackers to...6.8 Medium
- eba news newsPHP remote file inclusion vulnerability in admin/public/webpages.php in Eba News 1.1 allows...6.8 Medium
- mx smartor full album packPHP remote file inclusion vulnerability in admin/admin_album_otf.php in the MX Smartor Full Album...6.8 Medium
- extremaileXtremail 2.1.1 and earlier does not verify the ID field (aka transaction id) in DNS responses,...10.0 High
- extremailStack-based buffer overflow in eXtremail 2.1.1 and earlier allows remote attackers to execute...10.0 High
- foxit pdf readerFoxit Reader 2.0 allows remote attackers to cause a denial of service (application crash) via a...5.0 Medium
- supasiteMultiple PHP remote file inclusion vulnerabilities in Supasite 1.23b allow remote attackers to...6.8 Medium
- jchit counterDirectory traversal vulnerability in imgsrv.php in jchit counter 1.0.0 allows remote attackers to...5.0 Medium
- php-ring webring systemSQL injection vulnerability in index.php in PHP-Ring Webring System (aka uPHP_ring_website) 0.9...7.5 High
- maran php forumUnrestricted file upload vulnerability in forum_write.php in Maran PHP Forum allows remote...6.8 Medium
- webinsta fm managerPHP remote file inclusion vulnerability in admin/login.php in Webinsta FM Manager 0.1.4 and...6.8 Medium
- nullsoft winampBuffer overflow in Nullsoft Winamp 5.3 allows user-assisted remote attackers to cause a denial of...7.1 High
- raiden professional servers raidenftpdMultiple unspecified vulnerabilities in IXceedCompression in XceddZipLib (RaidenFTPD.dll) in...7.8 High
- objective development sharityMultiple unspecified vulnerabilities in Objective Development Sharity before 3.3 allow remote...7.8 High
- apple mac os x, mac os x server +1 moreload_webdav in Apple Mac OS X 10.3.9 through 10.4.9 does not properly clean the environment when...7.2 High
- Show moreLoading…