CVEs published in April 2007
627 vulnerabilities, 111 critical, 0 exploited.
- enterasys netsight console, netsight inventory manager +1 moreStack-based buffer overflow in the TFTPD component in Enterasys NetSight Console 2.1 and NetSight...7.5 High
- creascripts creadirectorySQL injection vulnerability in error.asp in CreaScripts CreaDirectory 1.2 allows remote attackers...7.5 High
- phpbandmanagerPHP remote file inclusion vulnerability in suite/index.php in phpBandManager 0.8 allows remote...7.5 High
- phporacleviewMultiple PHP remote file inclusion vulnerabilities in inc/include_all.inc.php in phporacleview...6.8 Medium
- phorumMultiple SQL injection vulnerabilities in Phorum before 5.1.22 allow remote attackers to execute...7.5 High
- phorumCross-site request forgery (CSRF) vulnerability in include/admin/banlist.php in Phorum before 5.1...7.5 High
- oicgroup exponent cmsMultiple cross-site scripting (XSS) vulnerabilities in Exponent CMS 0.96.6 Alpha and earlier...4.3 Medium
- intervations navicopa web serverUnspecified vulnerability in InterVations NaviCOPA Web Server 2.01 20070323 allows remote...7.8 High
- lunascapeCross-site scripting (XSS) vulnerability in the RSS feed reader functionality in Lunascape 4.1.3...4.3 Medium
- nortel contivity, vpn router 5000 +1 moreNortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before...7.5 High
- nortel contivity, vpn router 5000, vpn router portfolio +2 moreNortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 5_05.149, 5_05.3xx before...10.0 High
- nortel vpn router 1010, vpn router 1050, vpn router 1100 +5 more +7 moreNortel VPN Router (aka Contivity) 1000, 2000, 4000, and 5000 before 6_05.140 uses a fixed DES key...9.0 High
- shop-scriptPHP remote file inclusion vulnerability in cart.php in Shop-Script 2.0 allows remote attackers to...7.5 High
- dynatrackerPHP remote file inclusion vulnerability in includes_handler.php in DynaTracker 151 allows remote...7.5 High
- searchactivityPHP remote file inclusion vulnerability in searchbot.php in Searchactivity allows remote...7.5 High
- phpmytgpPHP remote file inclusion vulnerability in addvip.php in phpMYTGP 1.4b allows remote attackers to...7.5 High
- labs4 htmleditboxPHP remote file inclusion vulnerability in _editor.php in HTMLeditbox 2.2 allows remote attackers...7.5 High
- goldcoders hyip manager proMultiple PHP remote file inclusion vulnerabilities in HYIP Manager Pro allow remote attackers to...7.5 High
- mynewsgroupPHP remote file inclusion vulnerability in include.php in MyNewsGroups :) allows remote attackers...10.0 High
- julmajanne julmacmsDirectory traversal vulnerability in file.php in JulmaCMS 1.4 allows remote attackers to read...7.8 High
- intervideo home theaterMultiple buffer overflows in the WinDVDX ActiveX control in InterVideo Home Theater 2.1.13.0 and...10.0 High
- nero mediahome, mediahome ce +1 moreNMMediaServer.exe in Nero MediaHome 2.5.5.0 and CE 1.3.0.4 allows remote attackers to cause a...7.8 High
- silverstripeUnspecified vulnerability in the search functionality in SilverStripe 2.0.0 has unknown impact...10.0 High
- papooSQL injection vulnerability in kontakt.php in Papoo 3.02 and earlier allows remote attackers to...7.5 High
- autostand category categoryPHP remote file inclusion vulnerability in the AutoStand 1.1 and earlier module for Joomla!...6.8 Medium
- filezillaMultiple format string vulnerabilities in FileZilla before 2.2.32 allow remote attackers to...9.3 High
- minibb, tosmo mambo mambo +1 moreMultiple PHP remote file inclusion vulnerabilities in MiniBB Forum 1.5a and earlier, as used by...7.5 High
- open business management business managementUnspecified vulnerability in the admin script in Open Business Management (OBM) before 2.0.0...10.0 High
- minishare minimal http serverMiniShare 1.5.4, and possibly earlier, allows remote attackers to cause a denial of service ...7.8 High
- crea-bookMultiple SQL injection vulnerabilities in Crea-Book 1.0, and possibly earlier, when...6.8 Medium
- mxbb mx shotcastPHP remote file inclusion vulnerability in getinfo1.php in the Shotcast 1.0 RC2 module for mxBB...7.5 High
- vwar virtual warMultiple SQL injection vulnerabilities in the Virtual War (VWar) 1.5.0 R15 module for PHP-Nuke...7.5 High
- bloofoxcms** DISPUTED ** PHP remote file inclusion vulnerability in install/index.php in BlooFoxCMS 0.2.2...7.5 High
- bloofoxcmsCross-site scripting (XSS) vulnerability in plugins/spaw/img_popup.php in BloofoxCMS 0.2.2 allows...4.3 Medium
- flowersCross-site scripting (XSS) vulnerability in cas.php in FloweRS 2.0 allows remote attackers to...4.3 Medium
- flowersCross-site scripting (XSS) vulnerability in cas.php in FloweRS 2.0 allows remote attackers to...4.3 Medium
- webkalk2PHP remote file inclusion vulnerability in engine/engine.inc.php in WebKalk2 1.9.0 allows remote...7.5 High
- vwar virtual warMultiple cross-site scripting (XSS) vulnerabilities in the Virtual War (VWar) 1.5.0 R15 and...4.3 Medium
- qdblogMultiple SQL injection vulnerabilities in authenticate.php in Quick and Dirty Blog (QDBlog) 0.4,...7.5 High
- qdblogMultiple directory traversal vulnerabilities in Quick and Dirty Blog (QDBlog) 0.4, and possibly...7.5 High
- news manager deluxe manager deluxeDirectory traversal vulnerability in includes/footer.php in News Manager Deluxe (NMDeluxe) 1.0.1...6.8 Medium
- expowPHP remote file inclusion vulnerability in autoindex.php in Expow 0.8 allows remote attackers to...7.5 High
- arash audiocmsMultiple PHP remote file inclusion vulnerabilities in audioCMS arash 0.1.4 allow remote attackers...7.5 High
- surat kabar phpwebnewsMultiple cross-site scripting (XSS) vulnerabilities in Endy Kristanto Surat kabar / News...4.3 Medium
- frogss cmsMultiple SQL injection vulnerabilities in Frogss CMS 0.7 and earlier allow remote attackers to...7.5 High
- gforge garennesMultiple PHP remote file inclusion vulnerabilities in Garennes 0.6.1 and earlier allow remote...7.5 High
- asteriskThe SIP channel driver (chan_sip) in Asterisk before 1.2.18 and 1.4.x before 1.4.3 does not...7.8 High
- apple quicktimeInteger overflow in the FlipFileTypeAtom_BtoN function in Apple Quicktime 7.1.5, and other...9.3 High
- apple quicktimeHeap-based buffer overflow in the JVTCompEncodeFrame function in Apple Quicktime 7.1.5 and other...9.3 High
- asteriskThe Manager Interface in Asterisk before 1.2.18 and 1.4.x before 1.4.3 allows remote attackers to...7.8 High
- Show moreLoading…