CVEs published in May 2007
569 vulnerabilities, 108 critical, 0 exploited.
- esyndicat promanage-admins.php in eSyndiCat Pro 1.x allows remote attackers to create additional...6.8 Medium
- globus toolkitUnspecified vulnerability in globus-job-manager in Globus Toolkit 4.1.1 and earlier (globus_nexus...7.8 High
- rational software hidden administratorUnspecified vulnerability in Rational Soft Hidden Administrator 1.7 and earlier allows remote...10.0 High
- packeteer packetshaperPacketeer PacketShaper uses fixed increments in TCP initial sequence number (ISN) values, which...7.5 High
- wikyblogCross-site scripting (XSS) vulnerability in include/sessionRegister.php in WikyBlog before 1.4.13...6.8 Medium
- psychostatsPsychoStats 3.0.6b and earlier allows remote attackers to obtain sensitive information via a...5.0 Medium
- libstatsPHP remote file inclusion vulnerability in template_csv.php in Libstats 1.0.3 and earlier allows...7.5 High
- molyx boardMultiple directory traversal vulnerabilities in MolyX BOARD 2.5.0 allow remote attackers to read...7.8 High
- alstrasoft template sellerUnrestricted file upload vulnerability in admin/addsptemplate.php in AlstraSoft Template Seller...7.5 High
- alstrasoft template sellerAlstraSoft Template Seller Pro 3.25 and earlier sends a redirect to the web browser but does not...10.0 High
- alstrasoft live supportAlstraSoft Live Support 1.21 sends a redirect to the web browser but does not exit when...10.0 High
- sunlight-cms sunlight cmsMultiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to...7.5 High
- zomplogSQL injection vulnerability in plugins/mp3playlist/mp3playlist.php in Zomplog 3.8 and earlier...7.5 High
- ca brightstor arcserve backup(1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc.dll and rwxdr.dll) in CA BrightStor...7.8 High
- lead technologies leadtools jpeg 2000Stack-based buffer overflow in the LEAD Technologies LeadTools JPEG 2000 LEADJ2K.LEADJ2K.140...9.3 High
- qualcomm eudoraStack-based buffer overflow in Eudora 7.1 allows user-assisted, remote SMTP servers to execute...9.3 High
- opendap bes, hyrax +1 moreBES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 does not properly handle compressed files,...7.5 High
- openbsd openssh, netapp hci management node, hci storage node +2 more +4 moreOpenSSH, when using OPIE (One-Time Passwords in Everything) for PAM, allows remote attackers to...4.3 Medium
- opendap bes, hyrax +1 moreUnspecified vulnerability in BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 allows remote...7.8 High
- jetbox cmsMultiple SQL injection vulnerabilities in index.php in Jetbox CMS 2.1 allow remote attackers to...7.5 High
- jetbox cmsJetbox CMS 2.1 allows remote attackers to obtain sensitive information via (1) a direct request...5.0 Medium
- apache tomcatApache Tomcat Vulnerable to Cross-Site Scripting4.3 Medium
- backup manager managerlib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext...7.2 High
- ac zoom blockhostsblockhosts.py in BlockHosts before 2.0.3 does not properly parse daemon log files, which allows...6.8 Medium
- linux kernelThe embedded Linux kernel in certain Sun-Brocade SilkWorm switches before 20070516 does not...7.8 High
- sienzo digital music mentorBuffer overflow in the UnlockSupport function in the LockModules subsystem in a certain ActiveX...10.0 High
- build it fast it fastMultiple PHP remote file inclusion vulnerabilities in Build it Fast (bif3) 0.4.1 allow remote...7.5 High
- magicisoStack-based buffer overflow in MagicISO 5.4 build 239 and earlier allows remote attackers to...7.5 High
- adempiereThe canUpdate function in model/MRole.java in Adempiere before 3.1.6 does not properly validate...9.0 High
- adempiereMultiple SQL injection vulnerabilities in the insert function in the ValuePreference class (grid...7.5 High
- winimageMultiple buffer overflows in WinImage 8.0.8000 allow user-assisted remote attackers to execute...9.3 High
- dean j robinson redoableMultiple cross-site scripting (XSS) vulnerabilities in Redoable 1.2 allow remote attackers to...6.8 Medium
- libgdThe gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of...4.3 Medium
- adobe creative suiteThe installer for Adobe Version Cue CS3 Server on Apple Mac OS X, as used in Adobe Creative Suite...7.5 High
- precisionid barcode barcodeThe PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode.dll, when Internet Explorer 6...10.0 High
- freetypeInteger signedness error in truetype/ttgload.c in Freetype 2.3.4 and earlier might allow remote...6.8 Medium
- runawaysoft haber portalRunawaySoft Haber portal 1.0 stores sensitive information under the web root with insufficient...5.0 Medium
- runawaysoft haber portalSQL injection vulnerability in devami.asp in RunawaySoft Haber portal 1.0 allows remote attackers...6.4 Medium
- phpglossarMultiple PHP remote file inclusion vulnerabilities in PHPGlossar 0.8 allow remote attackers to...7.5 High
- simpnewsSQL injection vulnerability in print.php in SimpNews 2.40.01 and earlier allows remote attackers...7.5 High
- faqengineSQL injection vulnerability in question.php in FAQEngine 4.16.03 and earlier allows remote...5.0 Medium
- phpThe substr_count function in PHP 5.2.1 and earlier allows context-dependent attackers to obtain...4.3 Medium
- rdiffwebDirectory traversal vulnerability in rdw_helpers.py in rdiffWeb before 0.3.5.1 allows remote...5.0 Medium
- plain black webguiThe viewList function in lib/WebGUI/Asset/Wobject/DataForm.pm in Plain Black WebGUI before 7.3.14...3.5 Low
- vdesk webmailCross-site scripting (XSS) vulnerability in printcal.pl in vDesk Webmail 4.03 allows remote...4.3 Medium
- yate yet another telephony engineThe SIP channel module in Yet Another Telephony Engine (Yate) before 1.2.0 sets the...7.8 High
- precisionid barcode barcodeStack-based buffer overflow in the PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode...7.5 High
- glosswordPHP remote file inclusion vulnerability in custom_vars.php in GlossWord 1.8.1 allows remote...7.5 High
- labs.beffa.org w2boxUnrestricted file upload vulnerability in labs.beffa.org w2box 4.0.0 Beta4 allows remote...7.5 High
- littlecms lcmsStack-based buffer overflow in Little CMS (lcms) before 1.15 allows remote attackers to execute...9.3 High
- Show moreLoading…