CVEs published in July 2007
570 vulnerabilities, 71 critical, 0 exploited.
- tbdev.net drCross-site scripting (XSS) vulnerability in takeprofedit.php in TBDev.NET DR 11-10-05-BETA-SF1...2.6 Low
- hydraircHeap-based buffer overflow in HydraIRC 0.3.151 allows remote IRC servers to cause a denial of...7.8 High
- hydraircFormat string vulnerability in HydraIRC 0.3.151 allows remote attackers to cause a denial of...7.8 High
- exlibris group metalibCross-site scripting (XSS) vulnerability in Ex Libris MetaLib 3.13 and 4 allows remote attackers...2.6 Low
- exlibris group alephMultiple cross-site scripting (XSS) vulnerabilities in Ex Libris ALEPH allow remote attackers to...4.3 Medium
- cerulean studios trillianThe AOL Instant Messenger (AIM) protocol handler in Cerulean Studios Trillian allows remote...5.0 Medium
- cerulean studios trillianBuffer overflow in the AOL Instant Messenger (AIM) protocol handler in AIM.DLL in Cerulean...9.3 High
- ibm proventia network ips gx5108, proventia network ips gx5008 +1 morePHP remote file inclusion in main.php in ISS Proventia Network IPS GX5108 1.3 and GX5008 1.5...9.3 High
- ibm proventia network ips gx5108, proventia network ips gx5008 +1 moreCross-site scripting (XSS) vulnerability in alert.php in ISS Proventia Network IPS GX5108 1.3 and...3.5 Low
- interactual technologies player, roxio cineplayer +1 moreMultiple stack-based buffer overflows in (a) InterActual Player 2.60.12.0717 and (b) Roxio...9.3 High
- apple mac os xUnspecified vulnerability in mDNSResponder in Apple Mac OS X allows remote attackers to execute...10.0 High
- mozilla firefoxMozilla Firefox allows for cookies to be set with a null domain (aka "domainless cookies"), which...5.0 Medium
- microsoft internet explorerMicrosoft Internet Explorer 7 on Windows XP SP2 allows remote attackers to prevent users from...9.3 High
- mehmet zati karahan mzk blogSQL injection vulnerability in katgoster.asp in MzK Blog (tr) allows remote attackers to execute...10.0 High
- ipswitch ws ftpThe Logging Server (Logsrv.exe) in IPSwitch WS_FTP 7.5.29.0 allows remote attackers to cause a...7.8 High
- citadel webcitMultiple cross-site scripting (XSS) vulnerabilities in Webcit before 7.11 allow remote attackers...2.6 Low
- citadel webcitCross-site request forgery (CSRF) vulnerability in Webcit before 7.11 allows remote attackers to...7.5 High
- kde konquerorkonqueror/konq_combo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme...2.6 Low
- opera browserOpera 9.21 allows remote attackers to spoof the data: URI scheme in the address bar via a long...5.0 Medium
- drupal logintoboggan moduleCross-site scripting (XSS) vulnerability in the LoginToboggan module 5.x-1.x-dev before 20070712...3.5 Low
- drupal logintoboggan moduleCross-site scripting (XSS) vulnerability in the LoginToboggan module 4.7.x-1.0, 4.7.x-1.x-dev,...4.3 Medium
- brics jwig** DISPUTED ** JWIG might allow context-dependent attackers to cause a denial of service ...7.8 High
- republike slovenije pirsBuffer overflow in pirs32.exe in Poslovni informator Republike Slovenije (PIRS) 2007 allows local...4.9 Medium
- mkportalMultiple SQL injection vulnerabilities in MKPortal 1.1.1 allow remote attackers to execute...7.5 High
- mkportal noboard modulePHP remote file inclusion vulnerability in include/user.php in the NoBoard BETA module for...4.3 Medium
- cmscoutSQL injection vulnerability in forums.php in CMScout 1.23 and earlier allows remote attackers to...7.5 High
- esyndicat directoryMultiple SQL injection vulnerabilities in eSyndiCat allow remote attackers to execute arbitrary...7.5 High
- it747 realtor 747SQL injection vulnerability in index.php in Realtor 747 allows remote attackers to execute...7.5 High
- prozilla directory scriptMultiple SQL injection vulnerabilities in Prozilla Directory Script allow remote attackers to...7.5 High
- php arena pafiledbSQL injection vulnerability in includes/search.php in paFileDB 3.6 allows remote attackers to...7.5 High
- sitescape forumMultiple cross-site scripting (XSS) vulnerabilities in SiteScape Forum before 7.3 allow remote...2.6 Low
- phpThe glob function in PHP 5.2.3 allows context-dependent attackers to cause a denial of service...6.8 Medium
- activeweb contentserveractiveWeb contentserver CMS before 5.6.2964 does not limit the file-creation ability of editors...4.0 Medium
- activeweb contentserverThe WYSIWYG editor applet in activeWeb contentserver CMS before 5.6.2964 only filters malicious...4.0 Medium
- clavister coreplusThe IKE implementation in Clavister CorePlus before 8.80.03, and 8.80.00, does not properly...5.4 Medium
- clavister coreplusThe AntiVirus engine in the HTTP-ALG in Clavister CorePlus before 8.81.00 and 8.80.03 might allow...5.0 Medium
- clavister coreplusThe SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properly parse SMTP...10.0 High
- symantec client security, norton antivirus +1 moreUnspecified vulnerability in the Real-time scanner (RTVScan) component in Symantec AntiVirus...6.0 Medium
- phpThe session_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows...4.3 Medium
- tcpdump, apple mac os x, mac os x server +4 more +6 moreInteger overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote...9.8 Critical
- hitachi tpi server baseUnspecified vulnerability in Hitachi TP1/Server Base before 03-05-/P, 05-00-x before 05-00-/G, 05...7.1 High
- hitachi cosminexus application server, cosminexus client, cosminexus developer +8 more +10 moreBuffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511,...10.0 High
- hitachi jp1-netm-dm managerSQL injection vulnerability in Job Management Partner 1/NETM/DM (JP1/NETM/DM) Manager on Windows...7.5 High
- azerbaijan development group azdgdatingMultiple PHP remote file inclusion vulnerabilities in AzDG Dating Gold 3.0.5 allow remote...4.3 Medium
- policydBuffer overflow in the w_read function in sockets.c in Cami Sardinha and Nigel Kukard policyd...7.5 High
- phpThe com_print_typeinfo function in the bz2 extension in PHP 5.2.3 allows context-dependent...5.8 Medium
- inmostoreSQL injection vulnerability in admin/index.php in Inmostore 4.0 allows remote attackers to...7.5 High
- esoft instagate ex2 utmThe eSoft InstaGate EX2 UTM device stores the admin password within the settings HTML document,...7.6 High
- esoft instagate ex2 utmThe eSoft InstaGate EX2 UTM device does not require entry of the old password when changing the...7.5 High
- esoft instagate ex2 utm** DISPUTED ** Cross-site request forgery (CSRF) vulnerability on the eSoft InstaGate EX2 UTM...9.3 High
- Show moreLoading…