CVEs published in June 2007
564 vulnerabilities, 95 critical, 0 exploited.
- fusetalkSQL injection vulnerability in index.cfm in FuseTalk 2.0 allows remote attackers to execute...7.5 High
- minibbDirectory traversal vulnerability in index.php in MiniBB 2.0.5 allows remote attackers to read...7.8 High
- yourfreescreamerPHP remote file inclusion vulnerability in templates/2blue/bodyTemplate.php in YourFreeScreamer 1...7.5 High
- phpmyinventoryPHP remote file inclusion vulnerability in Includes/global.inc.php in phpMyInventory 2.8 allows...10.0 High
- papoo cms lightMultiple cross-site scripting (XSS) vulnerabilities in Papoo Light 3.6 before 20070611 allow...3.5 Low
- utopia software news proCross-site scripting (XSS) vulnerability in login.php in Utopia News Pro 1.4.0 allows remote...2.6 Low
- realnetworks gamehouseMultiple buffer overflows in RealNetworks GameHouse dldisplay ActiveX control (ghdlctl.dll) allow...10.0 High
- fuzzylime forum forumCross-site scripting (XSS) vulnerability in low.php in Fuzzylime Forum 1.01b and earlier allows...4.3 Medium
- ifnet webif.cgiDirectory traversal vulnerability in webif.cgi in ifnet WEBIF allows remote attackers to include...9.0 High
- ibm websphere application serverCross-site scripting (XSS) vulnerability in the Samples component in IBM WebSphere Application...4.3 Medium
- ibm websphere application serverUnspecified vulnerability in the PD tools component in IBM WebSphere Application Server (WAS) 6.1...10.0 High
- ibm websphere application serverUnspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server ...10.0 High
- ibm websphere application serverUnspecified vulnerability in the Default Messaging Component in IBM WebSphere Application Server ...7.8 High
- dkretCross-site scripting (XSS) vulnerability in widgets/widget_search.php in dKret before 2.6 allows...4.3 Medium
- hp system management homepageHP System Management Homepage (SMH) before 2.1.9 for Linux, when used with Novell eDirectory,...9.0 High
- ibm websphere portalSQL injection vulnerability in content.php in WSPortal 1.0, when magic_quotes_gpc is disabled,...6.4 Medium
- ibm websphere portalcontent.php in WSPortal 1.0, when magic_quotes_gpc is disabled, allows remote attackers to obtain...5.0 Medium
- gnome evolutionCamel (camel-imap-folder.c) in the mailer component for Evolution Data Server 1.11 allows remote...6.8 Medium
- astaro security gatewayMultiple unspecified vulnerabilities in Astaro Security Gateway (ASG) before 7.005 allow remote...7.8 High
- portalappPortalApp stores sensitive information under the web root with insufficient access control, which...7.8 High
- e-vision cmsMultiple directory traversal vulnerabilities in e-Vision CMS 2.02 and earlier allow remote...7.8 High
- elxis cmsSQL injection vulnerability in mod_banners.php in Elxis CMS before 2006.4 20070613 allows remote...7.5 High
- joomla letterman subscriberCross-site scripting (XSS) vulnerability in mod_lettermansubscribe.php in the Letterman...4.3 Medium
- sun solarisUnspecified vulnerability in Sun Solaris 10 before 20070614, when IPv6 interfaces are present but...7.8 High
- virtuemartSQL injection vulnerability in VirtueMart before 1.0.11 allows remote attackers to execute...6.8 Medium
- novell clientBuffer overflow in the NFS mount daemon (XNFS.NLM) in Novell NetWare 6.5 SP6, and probably...7.1 High
- apache myfaces tomahawkMultiple cross-site scripting (XSS) vulnerabilities in certain JSF applications in Apache MyFaces...4.3 Medium
- novell extend directorThe launch method in the LocalExec ActiveX control (LocalExec.ocx) in Novell exteNd Director 4.1...9.3 High
- irc services servicesThe do_set_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves...5.0 Medium
- irc services servicesIRC Services before 5.0.62, and 5.1 before 5.1pre3, allows remote attackers to disconnect users...5.0 Medium
- bbpressSQL injection vulnerability in bb-includes/formatting-functions.php in bbPress before 0.8.1 might...7.5 High
- bbpressCross-site scripting (XSS) vulnerability in bb-login.php in bbPress 0.8.1 allows remote attackers...4.3 Medium
- web-app.net webappThe Menu Manager Mod for (1) web-app.net WebAPP (aka WebAPP NE) 0.9.9.3.3 through 0.9.9.8, and (2...7.5 High
- wordpressCross-site scripting (XSS) vulnerability in blogroll.php in the cordobo-green-park theme for...4.3 Medium
- wordpressCross-site scripting (XSS) vulnerability in 404.php in the Vistered-Little theme for WordPress...4.3 Medium
- wordpressCross-site scripting (XSS) vulnerability in searchform.php in the AndyBlue theme before 20070607...4.3 Medium
- wordpressCross-site scripting (XSS) vulnerability in functions.php in the default theme in WordPress 2.2...6.0 Medium
- xoops tinycontent modulePHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the TinyContent 1...6.8 Medium
- xoops horoscope modulePHP remote file inclusion vulnerability in footer.php in the Horoscope 1.0 module for XOOPS...7.5 High
- fuzzylime forum forumCross-site scripting (XSS) vulnerability in low.php in Fuzzylime Forum 1.0 allows remote...4.3 Medium
- fuzzylime forum forumSQL injection vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to execute...7.5 High
- tec-it tbarcode ocxThe TEC-IT TBarCode OCX ActiveX control (TBarCode7.ocx) 7.0.2.3524 allows remote attackers to...5.0 Medium
- ibm totalstorage ds400The IBM TotalStorage DS400 with firmware 4.15 uses a blank password for the (1) root, (2) user, ...10.0 High
- mecabBuffer overflow in MeCab before 0.96 has unknown impact and attack vectors.7.5 High
- simian systems inc sitellitePHP remote file inclusion vulnerability in phphtml.php in Idan Sofer PHP::HTML 0.6.4 allows...6.8 Medium
- singapore image gallery web applicationindex.php in Singapore Gallery allows remote attackers to obtain sensitive information via a...6.8 Medium
- simian systems inc sitellite cmsPHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug...6.8 Medium
- rubyonrails railsModerate severity vulnerability that affects rails4.3 Medium
- dotprojectCross-site scripting (XSS) vulnerability in dotProject before 2.1 RC2 allows remote attackers to...4.3 Medium
- sun java system directory serverUnspecified vulnerability in Sun Java System Directory Server (slapd) 6.0, and 5.2 with Patch 3...6.4 Medium
- Show moreLoading…