CVEs published in May 2007
569 vulnerabilities, 108 critical, 0 exploited.
- fipsasp fipscmsSQL injection vulnerability in index.asp in fipsCMS 2.1 allows remote attackers to execute...7.5 High
- mentiss acgv acgvannuDirectory traversal vulnerability in theme/acgv.php in ACGVannu 1.3 and earlier allows remote...5.0 Medium
- american cart cartMultiple PHP remote file inclusion vulnerabilities in american cart 3.5 allow remote attackers to...7.5 High
- netsliver pfa cms** DISPUTED ** PHP remote file inclusion vulnerability in index.php in phpFullAnnu CMS (pfa CMS)...7.5 High
- mamboMOStlyDB Admin in Mambo 4.6.1 does not properly check privileges, which allows remote...4.0 Medium
- nuked-klanSQL injection vulnerability in Nuked-klaN 1.7.6 allows remote attackers to execute arbitrary SQL...7.5 High
- mambo open sourceThe dofreePDF function in includes/pdf.php in Mambo 4.6.1 does not properly check access rights...7.8 High
- podium cms cmsUnspecified vulnerability in Default.aspx in Podium CMS allows remote attackers to have an...4.3 Medium
- associated press newspowerAssociated Press (AP) Newspower 4.0.1 and earlier uses a default blank password for the MySQL...7.8 High
- hp tru64Unspecified vulnerability in dop in HP Tru64 UNIX 5.1B-4, 5.1B-3, and 5.1A PK6 allows local users...7.2 High
- advanced guestbook guestbookDirectory traversal vulnerability in Advanced Guestbook 2.4.2 allows remote attackers to bypass ...5.1 Medium
- advanced guestbook guestbookAdvanced Guestbook 2.4.2 allows remote attackers to obtain sensitive information via an invalid ...7.1 High
- advanced guestbook guestbookCross-site scripting (XSS) vulnerability in picture.php in Advanced Guestbook 2.4.2 allows remote...4.3 Medium
- wikkawikiThe RecentChanges feature in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to...5.0 Medium
- wikkawikiCross-site scripting (XSS) vulnerability in usersettings.php in WikkaWiki (Wikka Wiki) before 1.1...4.3 Medium
- devellion cubecartMultiple CRLF injection vulnerabilities in Devellion CubeCart 3.0.15 allow remote attackers to...5.0 Medium
- turnkey web tools sunshop shopping cartSQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 allows...7.5 High
- turnkey web tools sunshop shopping cartUnspecified vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 has unknown...6.4 Medium
- turnkey web tools sunshop shopping cartCross-site scripting (XSS) vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4...4.3 Medium
- simple machines forumSession fixation vulnerability in Simple Machines Forum (SMF) 1.1.2 and earlier allows remote...6.8 Medium
- persism cms cmsMultiple PHP remote file inclusion vulnerabilities in Persism CMS 0.9.2 and earlier allow remote...7.5 High
- php toptree bbs toptree bbsPHP remote file inclusion vulnerability in templates/default/tpl_message.php in PHP TopTree BBS 2...7.5 High
- xoops flashgames moduleSQL injection vulnerability in game.php in the Flashgames 1.0.1 module for XOOPS allows remote...7.5 High
- workbench survival guide survival guidePHP remote file inclusion vulnerability in header.php in workbench survival guide 0.11 allows...7.5 High
- versado cms cmsPHP remote file inclusion vulnerability in includes/ajax_listado.php in Versado CMS 1.07 allows...7.5 High
- pmecmsMultiple PHP remote file inclusion vulnerabilities in PMECMS 1.0 and earlier allow remote...7.5 High
- runcmsThe show_files function in RunCms 1.5.2 and earlier allows remote attackers to obtain sensitive...7.8 High
- runcmsSQL injection vulnerability in class/debug/debug_show.php in RunCms 1.5.2 and earlier allows...7.5 High
- npdsMultiple SQL injection vulnerabilities in mainfile.php in NPDS 5.10 and earlier allow remote...6.5 Medium
- picozipPicoZip allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive...7.8 High
- winaceWinAce allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive...7.8 High
- amavis, rahul dhesi zoo, unzoo +9 more +11 moreunzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers...7.8 High
- phphoo3** DISPUTED ** Multiple SQL injection vulnerabilities in admin.php in phpHoo3 allow remote...7.5 High
- trend micro serverprotectMultiple buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2- Build 1174...10.0 High
- obie website mini web shopMultiple cross-site scripting (XSS) vulnerabilities in Minh Nguyen Duong Obie Website Mini Web...4.3 Medium
- berylium berylium2PHP remote file inclusion vulnerability in berylium-classes.php in Berylium2 2003-08-18 allows...7.5 High
- tropicalm crowell resourceMultiple PHP remote file inclusion vulnerabilities in Tropicalm Crowell Resource 4.5.2 allow...7.5 High
- sun solaris, sunos +1 moreInteger signedness error in the acl (facl) system call in Solaris 10 before 20070507 allows local...7.2 High
- phpBuffer overflow in the user_filter_factory_create function in PHP before 5.2.2 has unknown impact...7.2 High
- phpBuffer overflow in the make_http_soap_request function in PHP before 5.2.2 has unknown impact and...5.1 Medium
- phpCRLF injection vulnerability in the ftp_putcmd function in PHP before 4.4.7, and 5.x before 5.2.2...2.6 Low
- php, canonical ubuntu linux, debian linux +2 more +4 moreBuffer overflow in the bundled libxmlrpc library in PHP before 4.4.7, and 5.x before 5.2.2, has...7.5 High
- avast antivirusavast! antivirus before 4.7.981 allows remote attackers to cause a denial of service (infinite...7.8 High
- avira antivir personalavpack32.dll before 7.3.0.6 in Avira AntiVir allows remote attackers to cause a denial of service...7.8 High
- panda antivirus, activescan, platinum 2006 internet security +3 more +5 morePanda Software Antivirus before 20070402 allows remote attackers to cause a denial of service ...7.8 High
- amaviszoo decoder 2.10 (zoo-2.10), as used in multiple products including (1) Barracuda Spam Firewall 3...7.8 High
- trend micro serverprotectBuffer overflow in AgRpcCln.dll for Trend Micro ServerProtect 5.58 for Windows before Security...10.0 High
- dynamicpadMultiple PHP remote file inclusion vulnerabilities in DynamicPAD before 1.03.31 allow remote...7.5 High
- smartcode vnc managerHeap-based buffer overflow in the ConnectAsyncEx function in VNC Viewer ActiveX control ...9.3 High
- linux kernelMemory leak in the PPP over Ethernet (PPPoE) socket implementation in the Linux kernel before 2.6...4.9 Medium
- Show moreLoading…