CVEs published in May 2007
569 vulnerabilities, 108 critical, 0 exploited.
- phpPHP 4.x and 5.x before 5.2.1, when running on multi-threaded systems, does not ensure thread...9.3 High
- apple safariCross-domain vulnerability in Apple Safari 2.0.4 allows remote attackers to access restricted...10.0 High
- phpThe fopen function in PHP 5.2.0 does not properly handle invalid URI handlers, which allows...10.0 High
- cisco call managerCross-site scripting (XSS) vulnerability in the web application firewall in Cisco CallManager...4.3 Medium
- madwifiArray index error in the (1) ieee80211_ioctl_getwmmparams and (2) ieee80211_ioctl_setwmmparams...10.0 High
- madwifiThe ath_beacon_config function in if_ath.c in MadWifi before 0.9.3.1 allows remote attackers to...5.0 Medium
- madwifiThe 802.11 network stack in net80211/ieee80211_input.c in MadWifi before 0.9.3.1 allows remote...5.0 Medium
- microworld technologies escanStack-based buffer overflow in the MicroWorld Agent service (MWAGENT.EXE) in MicroWorld...10.0 High
- php group phpThe array_fill function in ext/standard/array.c in PHP 4.4.2 and 5.1.2 allows context-dependent...5.0 Medium
- gforgeplugins/scmcvs/www/cvsweb.php in the CVSWeb CGI in GForge 4.5.16 before 20070524, aka gforge...6.8 Medium
- file, sleuth kit the sleuth kith +1 moreInteger overflow in the "file" program 4.20, when running on 32-bit systems, as used in products...5.1 Medium
- johntp adsense-deluxeCross-site request forgery (CSRF) vulnerability in adsense-deluxe.php in the AdSense-Deluxe 0.x...6.0 Medium
- lead technologies leadtools isis activex controlHeap-based buffer overflow in LEAD Technologies LEADTOOLS ISIS ActiveX Control (ltisi14E.ocx) 14...9.3 High
- madirish webmail webmailPHP remote file inclusion vulnerability in lib/addressbook.php in Madirish Webmail 2.0 allows...7.5 High
- atmail webmailMultiple cross-site scripting (XSS) vulnerabilities in ReadMsg.php in @Mail 5.02 and earlier...4.3 Medium
- alstrasoft e-friendsSQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote...10.0 High
- ht editor editorMultiple buffer overflows in HT Editor before 2.0.6 might allow remote attackers to execute...6.8 Medium
- wavelink media tutorialcmsTutorialCMS 1.01 and earlier, when register_globals is enabled, allows remote attackers to bypass...9.3 High
- wordpressSQL injection vulnerability in wp-admin/admin-ajax.php in WordPress before 2.2 allows remote...7.5 High
- ksign ksignswatMultiple stack-based buffer overflows in the KSign KSignSWAT ActiveX Control (AxKSignSWAT.dll) 2...7.5 High
- track\+Cross-site scripting (XSS) vulnerability in reportItem.do in Track+ 3.3.2 and earlier allows...4.3 Medium
- cactusoft parodiaCross-site scripting (XSS) vulnerability in cand_login.asp in CactuSoft Parodia 6.4 and earlier...4.3 Medium
- ol bookmarks bookmarksSQL injection vulnerability in read/index.php in ol'bookmarks 0.7.4 allows remote attackers to...7.5 High
- ol bookmarks bookmarksMultiple PHP remote file inclusion vulnerabilities in ol'bookmarks 0.7.4 allow remote attackers...7.5 High
- microsoft internet information servicesThe "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services ...10.0 High
- pegasus imagn activex controlMultiple stack-based buffer overflows in the Pegasus ImagN' ActiveX control (IMW32O40.OCX) 4.00...7.5 High
- cisco ios transmission control protocolCisco IOS 12.4 and earlier, when using the crypto packages and SSL support is enabled, allows...7.8 High
- hlstatsCross-site scripting (XSS) vulnerability in hlstats.php in HLstats 1.35, and possibly earlier,...4.3 Medium
- osk advance-flowCross-site scripting (XSS) vulnerability in OSK Advance-Flow 4.41 and earlier allows remote...4.3 Medium
- gazi download portal download portalSQL injection vulnerability in down_indir.asp in Gazi Download Portal allows remote attackers to...10.0 High
- opera browserBuffer overflow in the transfer manager in Opera before 9.21 for Windows allows user-assisted...9.3 High
- gnu gnats, yngve svendsen gnatsweb +1 moreCross-site scripting (XSS) vulnerability in gnatsweb.pl in Gnatsweb 4.00 and Gnats 4.1.99 allows...4.3 Medium
- eggheads eggdrop irc botStack-based buffer overflow in mod/server.mod/servrmsg.c in Eggdrop 1.6.18, and possibly earlier,...6.8 Medium
- galixMultiple cross-site scripting (XSS) vulnerabilities in index.php in GaliX 2.0 allow remote...5.8 Medium
- clientexecMultiple cross-site scripting (XSS) vulnerabilities in index.php in ClientExec (CE) 3.0 beta2,...4.3 Medium
- candypress storeMultiple cross-site scripting (XSS) vulnerabilities in scripts/prodList.asp in CandyPress Store 3...4.3 Medium
- vizayn urun tanitim sitesiSQL injection vulnerability in default.asp in Vizayn Urun Tanitim Sitesi 0.2 allows remote...7.5 High
- rm easymail plusCross-site scripting (XSS) vulnerability in cp/ps/Main/login/Login in RM EasyMail Plus allows...4.3 Medium
- jetbox cmsCross-site scripting (XSS) vulnerability in index.php in Jetbox CMS 2.1 allows remote attackers...4.3 Medium
- php group pearDirectory traversal vulnerability in the installer in PEAR 1.0 through 1.5.3 allows user-assisted...6.8 Medium
- phpThe imap_body function in PHP before 4.4.4 does not implement safemode or open_basedir checks,...2.1 Low
- dell bsafe cert-c, bsafe crypto-c +1 moreThe RSA Crypto-C before 6.3.1 and Cert-C before 2.8 libraries, as used by RSA BSAFE, multiple...5.0 Medium
- geeklogPHP remote file inclusion vulnerability in ImageImageMagick.php in Geeklog 2.x allows remote...7.5 High
- com yanc yancSQL injection vulnerability in the Yet another Newsletter Component (aka YaNC or com_yanc)...7.5 High
- hp tru64Unspecified vulnerability in the Secure Shell (SSH) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows...10.0 High
- vp-asp shopping cartCross-site scripting (XSS) vulnerability in shopcontent.asp in VP-ASP Shopping Cart 6.50, and...6.8 Medium
- sun jdk, jre, sdk +2 moreThe BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6...4.3 Medium
- sun jdk, jre, sdk +2 moreInteger overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK)...6.8 Medium
- lead technologies leadtools raster thumbnail object libraryStack-based buffer overflow in the BrowseDir function in the (1) lttmb14E.ocx or (2) LTRTM14e.DLL...7.5 High
- ircd-ratboxRatbox IRC Daemon (aka ircd-ratbox) 2.2.5 and earlier allows remote attackers to cause a denial...5.0 Medium
- Show moreLoading…