CVEs published in June 2007
564 vulnerabilities, 95 critical, 0 exploited.
- comersus open technologies cartMultiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers...4.3 Medium
- comersus open technologies cartSQL injection vulnerability in comersus_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows...7.5 High
- avaya 4602sw ip phoneThe Avaya 4602 SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware uses a constant...5.0 Medium
- avaya 4602sw ip phoneThe Avaya 4602 SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware allows remote...5.0 Medium
- avaya 4602sw ip phoneThe Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware accepts SIP INVITE...5.0 Medium
- avaya 4602sw ip phoneThe Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware does not use the...7.5 High
- avaya one-xBuffer overflow in the Session Initiation Protocol (SIP) User Access Client (UAC) message parsing...5.0 Medium
- avaya one-xThe Session Initiation Protocol (SIP) User Access Client (UAC) message parsing module in Avaya...7.8 High
- videolan vlc media playerMultiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c...9.3 High
- yourfreescreamerMultiple PHP remote file inclusion vulnerabilities in YourFreeScreamer 1.0, when register_globals...6.8 Medium
- altap portable executable viewer, servant salamander +1 moreStack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable...6.8 Medium
- efstratios geroulis jasmine cmsMultiple SQL injection vulnerabilities in Jasmine CMS 1.0 allow remote attackers to execute...7.5 High
- efstratios geroulis jasmine cmsDirectory traversal vulnerability in admin/plugin_manager.php in Jasmine CMS 1.0 allows remote...9.0 High
- xoops articles moduleSQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows...7.5 High
- apple safariApple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title...7.1 High
- tdizinCross-site scripting (XSS) vulnerability in arama.asp in TDizin allows remote attackers to inject...4.3 Medium
- simple machines forumUnspecified vulnerability in Simple Machines Forum (SMF) 1.1.2 allows remote attackers to execute...7.5 High
- simple machines forumSimple Machines Forum (SMF) 1.1.2 uses a concatenation method with insufficient randomization...7.5 High
- solar empire empireSQL injection vulnerability in game_listing.php in Solar Empire 2.9.1.1 and earlier allows remote...7.5 High
- ultrize minibillPHP remote file inclusion vulnerability in crontab/run_billing.php in MiniBill 1.2.5 allows...7.5 High
- cerulean studios trillianHeap-based buffer overflow in Cerulean Studios Trillian 3.x before 3.1.6.0 allows remote...9.3 High
- gnu emacs, debian linux +1 moreEmacs 21 allows user-assisted attackers to cause a denial of service (crash) via certain crafted...7.8 High
- apache http server, canonical ubuntu linux, fedoraproject fedora +3 more +5 moreApache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a...4.7 Medium
- apache http serverApache httpd 2.0.59 and 2.2.4, with the Prefork MPM module, allows local users to cause a denial...4.9 Medium
- fusetalkSQL injection vulnerability in forum/include/error/autherror.cfm in FuseTalk allows remote...7.5 High
- f-secure anti-virus, anti-virus linux client security, anti-virus linux server security +3 more +5 moreMultiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow...9.3 High
- awffullCross-site scripting (XSS) vulnerability in AWFFull before 3.7.4, when AllSearchStr (aka the All...4.3 Medium
- speySQL injection vulnerability in Spey before 0.4.1 allows remote attackers to execute arbitrary SQL...7.5 High
- cybozu labs musooMultiple PHP remote file inclusion vulnerabilities in Musoo 0.21 allow remote attackers to...7.5 High
- xunlei web thunderboltThe ThunderServer.webThunder.1 ActiveX control in xunlei Web Thunderbolt 1.7.3.109 allows remote...9.3 High
- yabbDirectory traversal vulnerability in Yet another Bulletin Board (YaBB) 2.1 and earlier allows...6.5 Medium
- phpMultiple buffer overflows in libtidy, as used in the Tidy extension for PHP 5.2.3 and possibly...7.5 High
- livecmsSQL injection vulnerability in categoria.php in LiveCMS 3.4 and earlier allows remote attackers...7.5 High
- livecmsUnrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to...7.5 High
- livecmsCross-site scripting (XSS) vulnerability in LiveCMS 3.4 and earlier allows remote attackers to...4.3 Medium
- livecmscategoria.php in LiveCMS 3.4 and earlier allows remote attackers to obtain sensitive information...9.3 High
- xoops wiwimod modulePHP remote file inclusion vulnerability in spaw/spaw_control.class.php in the WiwiMod 0.4 module...7.5 High
- skeltoac automattic statsCross-site scripting (XSS) vulnerability in the skeltoac stats (Automattic Stats) 1.0 plugin for...4.3 Medium
- mozilla firefoxMozilla Firefox before 2.0.0.5, when run on Windows, allows remote attackers to bypass file type...6.8 Medium
- apple safaricorefoundation.dll in Apple Safari 3.0.1 (552.12.2) for Windows allows remote attackers to cause...7.8 High
- sun solarisGNOME XScreenSaver in Sun Solaris 8 and 9 before 20070417, when root is logged into the console,...6.8 Medium
- microsoft office, office msodatasourcecontrol activex +1 moreBuffer overflow in the Microsoft Office MSODataSourceControl ActiveX object allows remote...7.8 High
- php hosting biller hosting billerCross-site scripting (XSS) vulnerability in index.php in Php Hosting Biller 1.0 allows remote...4.3 Medium
- postgresqlThe Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements...9.0 High
- postgresqlPostgreSQL 8.1 and probably later versions, when the PL/pgSQL (plpgsql) language has been created...10.0 High
- postgresql, debian linux +1 morePostgreSQL 8.1 and probably later versions, when local trust authentication is enabled and the...6.9 Medium
- wikindxUnspecified vulnerability in the localization before 1.2 module for WIKINDX allows attackers to...10.0 High
- siteatschoolCross-site scripting (XSS) vulnerability in index.php in Site@School (S@S) 2.4.10 allows remote...4.3 Medium
- mailwasher serverMailWasher Server before 2.2.1, when used with LDAP or Active Directory (AD), does not properly...7.1 High
- apple safariApple Safari 3.0 and 3.0.1 on Windows XP SP2 allows attackers to cause a denial of service ...4.3 Medium
- Show moreLoading…