CVEs published in June 2007
564 vulnerabilities, 95 critical, 0 exploited.
- elkagroup image gallerySQL injection vulnerability in property.php in elkagroup Image Gallery 1.0 allows remote...7.5 High
- eva-webMultiple PHP remote file inclusion vulnerabilities in index.php3 in EVA-Web 1.1 through 2.2 allow...7.5 High
- civiltech avax vector activexA certain ActiveX control in Avaxswf.dll 1.0.0.1 in Civitech Avax Vector 1.3 allows remote...6.4 Medium
- xythos digital locker, enterprise document manager, webfile server +2 moreXythos Enterprise Document Manager (XEDM), Digital Locker (XDL), and possibly WebFile Server...4.0 Medium
- xythos enterprise document managerMultiple cross-site request forgery (CSRF) vulnerabilities in Xythos Enterprise Document Manager ...6.5 Medium
- xythos enterprise document managerMultiple cross-site scripting (XSS) vulnerabilities in Xythos Enterprise Document Manager (XEDM)...3.5 Low
- sun solarisThe libsldap library in Sun Solaris 8, 9, and 10 allows local users to cause a denial of service ...4.9 Medium
- vincent hor calendarixcalendar.php in Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information...5.0 Medium
- apache http server, apple mac os x server +1 morecache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a...5.0 Medium
- symantec mail securitylibdayzero.dll in the Filter Hub Service (filter-hub.exe) in Symantec Mail Security for SMTP...7.8 High
- microsoft windows 2000, windows 2003 server, windows xp +2 moreMicrosoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service ...5.0 Medium
- apache http server, canonical ubuntu linux, fedoraproject fedora +4 more +6 moreCross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP...4.3 Medium
- trend micro officescancgiChkMasterPwd.exe before 8.0.0.142 in Trend Micro OfficeScan Corporate Edition 8.0 allows...10.0 High
- trend micro officescanStack-based buffer overflow in CGIOCommon.dll before 8.0.0.1042 in Trend Micro OfficeScan...10.0 High
- papooSQL injection vulnerability in Papoo 3.6, and possibly earlier, allows remote attackers to...7.5 High
- edocstoreSQL injection vulnerability in essentials/minutes/doc.php in eDocStore allows remote attackers to...7.5 High
- gorani network 6alblogPHP remote file inclusion vulnerability in admin/index.php in 6ALBlog allows remote authenticated...6.5 Medium
- gorani network 6alblogSQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary...6.8 Medium
- gorani network 6alblogSQL injection vulnerability in member.php in 6ALBlog allows remote attackers to execute arbitrary...6.8 Medium
- bugmall shopping cartCross-site scripting (XSS) vulnerability in index.php in BugMall Shopping Cart 2.5 and earlier...4.3 Medium
- bugmall shopping cartSQL injection vulnerability in BugMall Shopping Cart 2.5 and earlier allows remote attackers to...6.8 Medium
- bugmall shopping cartBugMall Shopping Cart 2.5 and earlier has a default username "demo" and password "demo," which...7.5 High
- sj labs sjphoneBuffer overflow in SJ Labs SJphone 1.60.303c, running under Windows Mobile 2003 on the Samsung...4.3 Medium
- rim blackberry 7270, blackberry software +1 moreThe Research in Motion BlackBerry 7270 with 4.0 SP1 Bundle 83 allows remote attackers to cause a...4.3 Medium
- research in motion limited blackberry 7270The Research in Motion BlackBerry 7270 before 4.0 SP1 Bundle 108 does not properly manage...2.3 Low
- research in motion limited blackberry 7270Format string vulnerability on the Research in Motion BlackBerry 7270 before 4.0 SP1 Bundle 108...2.3 Low
- aastra telecom 9112i sip phoneFormat string vulnerability in the Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot...5.0 Medium
- snom 320 linuxThe Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36,...6.4 Medium
- snom 320 linuxThe Snom 320 SIP Phone, running snom320 linux 3.25, snom320-SIP 6.2.3, and snom320 jffs23.36,...5.0 Medium
- nortel sip softphoneBuffer overflow in the SIP header parsing module in the Nortel PC Client SIP Soft Phone 4.1 3.5...7.8 High
- aol instant messengerAOL Instant Messenger (AIM) 6.1.32.1 on Windows XP allows remote attackers to cause a denial of...7.8 High
- microsoft msn messengerMicrosoft MSN Messenger 4.7 on Windows XP allows remote attackers to cause a denial of service ...5.0 Medium
- rkd software barcode activexStack-based buffer overflow in the BeginPrint method in a certain ActiveX control in RKD Software...9.3 High
- netart media pharmacy systemindex.php in Pharmacy System 2 and earlier allows remote attackers to obtain sensitive...5.0 Medium
- netart media pharmacy systemSQL injection vulnerability in index.php in Pharmacy System 2 and earlier allows remote attackers...7.5 High
- pluxmlUnrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote...7.5 High
- valerio capello dagger - the cutting edgePHP remote file inclusion vulnerability in cal.func.php in Valerio Capello Dagger - The Cutting...6.8 Medium
- simple invoices invoicesSQL injection vulnerability in index.php in Simple Invoices 2007 05 25 allows remote attackers to...7.5 High
- e107Unrestricted file upload vulnerability in signup.php in e107 0.7.8 and earlier, when photograph...6.8 Medium
- zoneo-soft phptrafficaMultiple unspecified vulnerabilities in phpTrafficA before 1.4.2 allow remote attackers to have...7.5 High
- zoneo-soft phptrafficaSQL injection vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote attackers...7.5 High
- zoneo-soft phptrafficaCross-site scripting (XSS) vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows...4.3 Medium
- zoneo-soft phptrafficaDirectory traversal vulnerability in index.php in phpTrafficA 1.4.2 and earlier allows remote...5.0 Medium
- zoneo-soft phptrafficaMultiple cross-site scripting (XSS) vulnerabilities in phpTrafficA before 1.2beta2 allow remote...4.3 Medium
- web-app.org webappThe moveim function in cgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7...7.5 High
- web-app.org webappcgi-bin/cgi-lib/instantmessage.pl in web-app.org WebAPP before 0.9.9.7 uses the From field of an...7.5 High
- web-app.org webappThe getcgi function in cgi-bin/cgi-lib/subs.pl in web-app.org WebAPP before 0.9.9.7 attempts to...7.5 High
- web-app.org webappThe (1) login, (2) admin profile edit, (3) reminder, (4) edit profile, (5) profile view, (6)...7.5 High
- web-app.org webappThe Random Cookie Password functionality in the loaduser function in cgi-bin/cgi-lib/subs.pl in...7.5 High
- web-app.org webappThe editprofile3 function in cgi-bin/cgi-lib/user.pl in web-app.org WebAPP before 0.9.9.7 does...7.5 High
- Show moreLoading…