CVEs published in June 2007
564 vulnerabilities, 95 critical, 0 exploited.
- microsoft internet explorer, windows xp, windows 2000 +3 more +5 moreRace condition in Microsoft Internet Explorer 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7...7.1 High
- mozilla firefoxMozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1)...4.3 Medium
- broadcom anti-virus for the enterprise, brightstor arcserve backup, common services +10 more +12 moreStack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA ...9.3 High
- broadcom anti-virus for the enterprise, brightstor arcserve backup, brightstor enterprise backup +1 more +3 moreStack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA ...10.0 High
- ibm lotus dominoIBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent...9.3 High
- microsoft windows xpMicrosoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent...5.5 Medium
- gaya design comicsenseSQL injection vulnerability in index.php in Comicsense allows remote attackers to execute...7.5 High
- peercastPeercast places a cleartext password in a query string, which might allow attackers to obtain...7.8 High
- agnitum outpost firewallUnrestricted critical resource lock in Agnitum Outpost Firewall PRO 4.0 1007.591.145 and earlier...4.9 Medium
- pbsiteMultiple PHP remote file inclusion vulnerabilities in PBSite allow remote attackers to execute...7.5 High
- comdev web bloggerPHP remote file inclusion vulnerability in sampleblogger.php in Comdev Web Blogger 4.1 allows...7.5 High
- rainbowsoft z-blogZ-Blog 1.7 stores sensitive information under the web root with insufficient access control,...7.8 High
- sendcardDirectory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote...7.8 High
- comdev ecommercePHP remote file inclusion vulnerability in sampleecommerce.php in Comdev eCommerce 4.1 allows...7.5 High
- hunkaray okul portalySQL injection vulnerability in haberoku.asp in Hunkaray Okul Portaly 1.1 allows remote attackers...7.5 High
- eqdkplistmembers.php in EQdkp 1.3.2c and earlier allows remote attackers to obtain sensitive...7.1 High
- aigaionMultiple cross-site scripting (XSS) vulnerabilities in Aigaion before 1.3.3 allow remote...4.3 Medium
- eqdkpSQL injection vulnerability in listmembers.php in EQdkp 1.3.2 and earlier allows remote attackers...7.5 High
- zenturi programcheckerA certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to...7.8 High
- microsoft internet explorerDirectory traversal vulnerability in Microsoft Internet Explorer allows remote attackers to read...7.8 High
- mozilla firefoxMozilla Firefox 2.0.0.4 and earlier allows remote attackers to read files in the local Firefox...4.3 Medium
- mozilla firefoxDirectory traversal vulnerability in Mozilla Firefox 2.0.0.4 and earlier on Mac OS X and Unix...7.8 High
- mozilla firefoxDirectory traversal vulnerability in Mozilla Firefox before 2.0.0.4 on Windows allows remote...7.1 High
- digital river esellerate sdkBuffer overflow in the GetWebStoreURL function in a certain ActiveX control in...9.3 High
- bdigital web solutions webstudio cmsCross-site scripting (XSS) vulnerability in index.php in BDigital Web Solutions WebStudio allows...4.3 Medium
- sun solarisxscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology...4.6 Medium
- centennial discovery, numara asset manager +1 moreStack-based buffer overflow in XferWan.exe as used in multiple products including (1) Symantec...9.3 High
- macrovision flexnet connect, update service +1 moreMultiple buffer overflows in an ActiveX control (boisweb.dll) in Macrovision FLEXnet Connect 6.0...10.0 High
- ibm lotus domino web serverUnspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x...7.8 High
- dvd x studios x playerStack-based buffer overflow in DVD X Player 4.1 Professional allows remote attackers to execute...6.8 Medium
- eqdkp attunement and keyCross-site scripting (XSS) vulnerability in the Attunement and Key Tracker 0.95 and earlier...4.3 Medium
- phpreactorMultiple PHP remote file inclusion vulnerabilities in php(Reactor) 1.2.7 and earlier allow remote...7.5 High
- particle soft gallerySQL injection vulnerability in viewimage.php in Particle Soft Particle Gallery 1.0.1 and earlier...7.5 High
- mealex my datebookCross-site scripting (XSS) vulnerability in diary.php in My Databook allows remote attackers to...4.3 Medium
- mealex my databookSQL injection vulnerability in diary.php in My Databook allows remote attackers to execute...7.5 High
- hp system management homepageCross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 2.1.2...4.3 Medium
- cactusoft cactushopCactushop 6 and earlier stores sensitive information under the web root with insufficient access...7.8 High
- osi codes inc. phpliveMultiple cross-site scripting (XSS) vulnerabilities in PHP Live! 3.2.2 allow remote attackers to...4.3 Medium
- sendcardSendCard 3.3.0 allows remote attackers to obtain sensitive information via an invalid sc_language...5.0 Medium
- madirish webmail webmailMultiple PHP remote file inclusion vulnerabilities in Madirish Webmail 2.0 allow remote attackers...6.8 Medium
- xoops icontent modulePHP remote file inclusion vulnerability in include/wysiwyg/spaw_control.class.php in the icontent...6.8 Medium
- websvnCross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly...4.3 Medium
- codelib linkerCross-site scripting (XSS) vulnerability in index.php in Codelib Linker 2.0.4 and earlier allows...4.3 Medium
- codelib linkerCross-site scripting (XSS) vulnerability in search.php in Codelib Linker 2.0.4 and earlier allows...4.3 Medium
- calimero.cmsSession fixation vulnerability in Calimero.CMS 3.3.1232 and earlier allows remote attackers to...7.5 High
- postnuke software foundation pnphpbbSQL injection vulnerability in index.php in the PNphpBB2 1.2i and earlier module for PostNuke...7.5 High
- revokesoft revokebbSQL injection vulnerability in inc/class_users.php in RevokeSoft RevokeBB 1.0 RC4 and earlier...7.5 High
- chameleon cms cmsSession fixation vulnerability in chameleon cms 3.0 and earlier allows remote attackers to hijack...7.5 High
- buttercup wfm wfmCross-site scripting (XSS) vulnerability in index.php in Buttercup web file manager (BWFM) May...4.3 Medium
- gnu screen** DISPUTED ** GNU screen 4.0.3 allows local users to unlock the screen via a CTRL-C sequence at...7.2 High
- Show moreLoading…