CVEs published in July 2007
570 vulnerabilities, 71 critical, 0 exploited.
- asteridexMultiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote...7.5 High
- maia mailguard mailguardMultiple directory traversal vulnerabilities in Maia Mailguard 1.0.2 and earlier might allow...5.0 Medium
- maia mailguard mailguardDirectory traversal vulnerability in login.php in Maia Mailguard 1.0.2 and earlier allows remote...5.0 Medium
- vtiger crmThe report module in vtiger CRM before 5.0.3 does not properly apply security rules, which allows...4.0 Medium
- vtiger crmindex.php in vtiger CRM before 5.0.3 allows remote authenticated users to perform administrative...6.5 Medium
- sap internet communication manager, web application server +1 moreInternet Communication Manager (aka ICMAN.exe or ICM) in SAP NetWeaver Application Server 6.x and...7.8 High
- sap dbMultiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB,...7.5 High
- sap internet graphics serverCross-site scripting (XSS) vulnerability in ADM:GETLOGFILE in SAP Internet Graphics Service (IGS)...4.3 Medium
- visual irc ircStack-based buffer overflow in Visual IRC (ViRC) 2.0 allows remote IRC servers to execute...7.5 High
- vrnewsadmin.php in VRNews 1.1.1, and possibly other 1.x versions, does not require authentication,...9.3 High
- vastal i-tech phpvidSQL injection vulnerability in categories_type.php in phpVID 0.9.9 allows remote attackers to...7.5 High
- emeeting online dating softwareMultiple SQL injection vulnerabilities in eMeeting Online Dating Software 5.2 allow remote...7.5 High
- sap enjoysapMultiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote...5.0 Medium
- sap enjoysapMultiple unspecified vulnerabilities in ActiveX controls in the EnjoySAP SAP GUI allow remote...5.0 Medium
- sap enjoysapHeap-based buffer overflow in the rfcguisink.rfcguisink.1 ActiveX control in the EnjoySAP SAP GUI...7.6 High
- sap enjoysapStack-based buffer overflow in the kweditcontrol.kwedit.1 ActiveX control in FrontEnd\SapGui...7.6 High
- vtiger crmvtiger CRM before 5.0.3 allows remote authenticated users with access to the Analytics DashBoard...4.0 Medium
- vtiger crmSQL injection vulnerability in the dashboard (include/utils/SearchUtils.php) in vtiger CRM before...6.5 Medium
- vtiger crmThe SOAP webservice in vtiger CRM before 5.0.3 does not ensure that authenticated accounts are...5.5 Medium
- vtiger crmvtiger CRM before 5.0.3, when a migrated build is used, allows remote authenticated users to read...2.1 Low
- vtiger crmWordPlugin in the wordintegration component in vtiger CRM before 5.0.3 allows remote...4.0 Medium
- vtiger crmvtiger CRM before 5.0.3 allows remote authenticated users to import and export the information...8.5 High
- vtiger crmindex.php in vtiger CRM before 5.0.3 allows remote authenticated users to obtain all users' names...5.5 Medium
- ez publisheZ publish before 3.8.5 does not properly enforce permissions for editing in a specific language,...4.0 Medium
- ez publisheZ publish before 3.8.1 does not properly enforce permissions for "content edit Language" when...4.0 Medium
- zen cart cartSession fixation vulnerability in Zen Cart 1.3.7 and earlier allows remote attackers to hijack...8.5 High
- izzysoft phpvideoproinc/vul_check.inc in phpVideoPro before 0.8.8 permits non-alphanumeric characters in the sess_id...4.3 Medium
- adventnet manageengine netflow analyzerMultiple cross-site scripting (XSS) vulnerabilities in AdventNet ManageEngine OpManager 6 and 7...2.6 Low
- adventnet manageengine netflow analyzerMultiple cross-site scripting (XSS) vulnerabilities in ManageEngine NetFlow Analyzer 5 allow...4.3 Medium
- elite bulletin board bulletin boardPM.php in Elite Bulletin Board before 1.0.10 allows remote authenticated users to delete...6.5 Medium
- elite bulletin board bulletin boardUnspecified vulnerability in Profile.php in Elite Bulletin Board before 1.0.10 allows remote...5.0 Medium
- b1g b1gbbCross-site scripting (XSS) vulnerability in visitenkarte.php in b1gBB 2.24.0 allows remote...4.3 Medium
- b1g b1gbbMultiple SQL injection vulnerabilities in b1gbb 2.24.0 allow remote attackers to execute...7.5 High
- vbzoomSQL injection vulnerability in reply.php in VBZooM 1.12 allows remote attackers to execute...7.5 High
- mycmsMyCMS 0.9.8 and earlier allows remote attackers to gain privileges via the admin cookie parameter...7.5 High
- mycmsMultiple direct static code injection vulnerabilities in MyCMS 0.9.8 and earlier allow remote...7.5 High
- mycmsPHP remote file inclusion vulnerability in games.php in MyCMS 0.9.8 and earlier allows remote...7.5 High
- postnuke software foundation pnphpbb2SQL injection vulnerability in viewforum.php in PNphpBB2 1.2i and earlier for Postnuke allows...7.5 High
- girlserv adsSQL injection vulnerability in details_news.php in Girlserv ads 1.5 and earlier allows remote...7.5 High
- inforest communications supercaliSQL injection vulnerability in index.php in SuperCali PHP Event Calendar 0.4.0 allows remote...7.5 High
- jedox paloThe Jedox Palo 1.5 client transmits the password in cleartext, which might allow remote attackers...5.0 Medium
- phpidsPHPIDS does not properly handle certain code containing newlines, as demonstrated by a try/catch...4.3 Medium
- phpidsPHPIDS before 20070703 does not properly handle setting the .text property of a SCRIPT element...4.3 Medium
- phpidsPHPIDS before 20070703 does not properly handle (1) arithmetic expressions and (2) unclosed...4.3 Medium
- phpidsPHPIDS before 20070703 does not properly handle use of the substr method in (1) document.location...4.3 Medium
- microsoft internet explorer** DISPUTED ** Microsoft Internet Explorer 6 executes web script from URIs of arbitrary scheme...4.3 Medium
- freedomain.co.nr cloneSQL injection vulnerability in includes/functions in FreeDomain.co.nr Clone allows remote...7.5 High
- linksys wag54gsMultiple cross-site scripting (XSS) vulnerabilities in setup.cgi on the Cisco Linksys WAG54GS...4.3 Medium
- akocommentMultiple SQL injection vulnerabilities in akocomment allow remote attackers to execute arbitrary...6.8 Medium
- yoggie pico, pico pro +1 moreIncomplete blacklist vulnerability in cgi-bin/runDiagnostics.cgi in the web interface on the...9.3 High
- Show moreLoading…