CVEs published in May 2007
569 vulnerabilities, 108 critical, 0 exploited.
- audio cd tools cd ripper ocxUnspecified vulnerability in the Init function in the Audio CD Ripper OCX (AudioCDRipperOCX.ocx)...7.8 High
- progress whatsup goldBuffer overflow in MIBEXTRA.EXE in Ipswitch WhatsUp Gold 11 allows attackers to cause a denial of...7.8 High
- divx city gdivx zenith playerBuffer overflow in a certain ActiveX control in the GDivX Zenith Player AviFixer class in fix.dll...9.3 High
- wavelink media tutorialcmsMultiple cross-site scripting (XSS) vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00...6.8 Medium
- wavelink media tutorialcmsMultiple SQL injection vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier...7.5 High
- simplenewsSQL injection vulnerability in print.php in SimpleNews 1.0.0 FINAL allows remote attackers to...10.0 High
- telltargetcms telltarget cmsMultiple PHP remote file inclusion vulnerabilities in telltarget CMS 1.3.3 allow remote attackers...7.5 High
- agner fog aforumPHP remote file inclusion vulnerability in common/func.php in aForum 1.32 and earlier allows...7.5 High
- rscript rsauctionRSAuction 2.73.1.3 allows remote authenticated users to move their own account status from...6.5 Medium
- phpmyportalPHP remote file inclusion vulnerability in inc/articles.inc.php in phpMyPortal 3.0.0 RC3 allows...7.5 High
- symantec norton antivirus, norton internet security, norton system works +2 moreThe Symantec NAVOPTS.DLL ActiveX control (aka Symantec.Norton.AntiVirus.NAVOptions) 12.2.0.13, as...8.5 High
- microsoft terminal serverThe Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to...7.5 High
- nokia groupwise mobile server, intellisync mobile suite, intellisync wireless email express +2 moreMultiple cross-site scripting (XSS) vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2, 6...4.3 Medium
- nokia groupwise mobile server, intellisync mobile suite, intellisync wireless email express +2 moreusrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly...7.5 High
- nokia groupwise mobile server, intellisync mobile suite, intellisync wireless email express +2 moreNokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell...6.4 Medium
- squirrelmailCross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4...5.0 Medium
- ca anti-virus for the enterprise, broadcom integrated threat management +1 moreCA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions ...7.2 High
- broadcom antispyware for the enterprise, etrust integrated threat management, etrust pestpatrol +2 moreStack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8,...10.0 High
- squirrelmailMultiple cross-site scripting (XSS) vulnerabilities in the HTML filter in SquirrelMail 1.4.0...4.3 Medium
- office ocx viewer ocxMultiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote...9.3 High
- cisco iosThe IOS FTP Server in Cisco IOS 11.3 through 12.4 allows remote authenticated users to cause a...6.3 Medium
- cisco iosThe FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which...9.3 High
- barcodewiz barcode activex controlStack-based buffer overflow in the Verify function in the BarCodeWiz ActiveX control 2.0 and 2.52...9.3 High
- mcafee security center, securitycenter agent, virusscan +2 moreBuffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager...10.0 High
- oracle mysql, canonical ubuntu linux, debian linux +2 moreThe in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18...4.0 Medium
- ibm db2Multiple buffer overflows in the DB2 JDBC Applet Server (DB2JDS) service in IBM DB2 9.x and...10.0 High
- apache tomcatThe default SSL cipher configuration in Apache Tomcat 4.1.28 through 4.1.31, 5.0.0 through 5.0.30...2.6 Low
- apache tomcatApache Tomcat XSS In Accept-Language Headers2.6 Low
- adobe robohelp, robohelp server +1 moreCross-site scripting (XSS) vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote...4.3 Medium
- apache tomcatCross-site scripting in Apache Tomcat4.3 Medium
- apache tomcatApache Tomcat XSS Vulnerability4.3 Medium
- microsoft sharepoint server, sharepoint services, windows 2003 +2 moreMultiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0...4.3 Medium
- apple safariUnspecified vulnerability in Apple Safari allows local users to obtain sensitive information ...1.9 Low
- acp3Multiple cross-site scripting (XSS) vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to...5.8 Medium
- acp3Unspecified vulnerability in search/list/action_search/index.php in ACP3 4.0 beta 3 allows remote...7.5 High
- acp3Multiple SQL injection vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to execute...7.5 High
- east wind software advdaudio.ocxBuffer overflow in the East Wind Software advdaudio.ocx 1.5.1.1 ActiveX control allows user...6.8 Medium
- vm watermark watermarkPHP remote file inclusion vulnerability in watermark.php in the vm (aka Jean-Francois Laflamme)...7.5 High
- archangelmgt weblogDirectory traversal vulnerability in index.php in Archangel Weblog 0.90.02 allows remote...5.0 Medium
- phptreePHP remote file inclusion vulnerability in plugin/HP_DEV/cms2.php in PHPtree 1.3 allows remote...7.5 High
- noahPHP remote file inclusion vulnerability in modules/noevents/templates/mfa_theme.php in NoAh (aka...7.5 High
- xoops wfquotes moduleSQL injection vulnerability in index.php in the wfquotes 1.0 0 module for XOOPS allows remote...7.5 High
- guilain omont wikivi5PHP remote file inclusion vulnerability in handlers/page/show.php in Wikivi5 allows remote...7.5 High
- practical creative and code friendlyMultiple PHP remote file inclusion vulnerabilities in Friendly 1.0d1 and earlier allow remote...7.5 High
- taltech tal bar code activex controlBuffer overflow in the SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows...9.3 High
- taltech tal bar code activex controlThe SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to...5.0 Medium
- cdelia software imageprocessingCdelia Software ImageProcessing allows user-assisted remote attackers to cause a denial of...7.1 High
- sienzo digital music mentorMultiple stack-based buffer overflows in the Sienzo Digital Music Mentor (DMM) 2.6.0.4 ActiveX...10.0 High
- versalsoft http file upload activex controlBuffer overflow in the AddFile function in VersalSoft HTTP File Upload ActiveX control ...9.3 High
- kayako esupportCross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 3.00.90 allows remote...4.3 Medium
- Show moreLoading…