CVEs published in July 2007
570 vulnerabilities, 71 critical, 0 exploited.
- clever components internet activex suiteAbsolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in...9.3 High
- drupalMultiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x before 5.2, and 4.7.x before 4...4.3 Medium
- drupalMultiple cross-site request forgery (CSRF) vulnerabilities in Drupal 5.x before 5.2 allow remote...4.3 Medium
- nessus vulnerability scannerThe SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6...7.8 High
- nessus vulnerability scannerDirectory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3...9.3 High
- frank yaul corehttpMultiple buffer overflows in the HttpSprockMake function in http.c in Frank Yaul corehttp 0.5...9.0 High
- vmware workstationAbsolute path traversal vulnerability in a certain ActiveX control in IntraProcessLogging.dll 5.5...5.8 Medium
- emc vmwareAbsolute path traversal vulnerability in a certain ActiveX control in vielib.dll 2.2.5.42958 in...4.3 Medium
- neocrome seditioUnrestricted file upload vulnerability in pfs.php in Neocrome Seditio 121 and earlier allows...6.5 Medium
- adult directory directorySQL injection vulnerability in directory.php in Prozilla Adult Directory allows remote attackers...7.5 High
- 8pixel.net simple blogSQL injection vulnerability in comments_get.asp in SimpleBlog 3.0 allows remote attackers to...7.5 High
- php123 top sitesSQL injection vulnerability in category.php in PHP123 Top Sites allows remote attackers to...7.5 High
- linphaSQL injection vulnerability in include/img_view.class.php in LinPHA 1.3.1 and earlier allows...7.5 High
- bakbone netvault reporterMultiple heap-based buffer overflows in (1) clsscheduler.exe (aka scheduler client) and (2)...10.0 High
- nukeditCross-site scripting (XSS) vulnerability in utilities/login.asp in nukedit 4.9.7 and earlier...4.3 Medium
- ultradefragHeap-based buffer overflow in the FindFiles function in UltraDefrag 1.0.3 allows local users to...4.6 Medium
- adempiere bazaarUnspecified vulnerability in WebUI in ADempiere Bazaar before 3.3 beta Victoria edition allows...10.0 High
- phpsysinfoCross-site scripting (XSS) vulnerability in index.php in phpSysInfo 2.5.4-dev and earlier allows...4.3 Medium
- geobloggeoBlog (aka BitDamaged) 1 does not require authentication for (1) deletecomment.php, (2)...6.4 Medium
- joomla pony gallerySQL injection vulnerability in index.php in the Pony Gallery (com_ponygallery) 1.5 and earlier...7.5 High
- apple cups, fedoraproject fedora +1 moreThe CUPS service, as used in SUSE Linux before 20070720 and other Linux distributions, allows...5.0 Medium
- securecomputing securityreporterfile.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) before 4.6.3 allows...5.0 Medium
- netscape navigator, microsoft internet explorer +1 moreMultiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to...7.5 High
- mozilla firefox, microsoft internet explorer +1 moreMultiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and 3.0alpha allow remote...6.8 Medium
- microsoft outlook, outlook express +1 moreArgument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain...4.3 Medium
- mozillaArgument injection vulnerability involving Mozilla, when certain URIs are registered, allows...4.3 Medium
- guidance software encase** DISPUTED ** Guidance Software EnCase allows user-assisted attackers to trigger a buffer over...4.3 Medium
- guidance software encase** DISPUTED ** Guidance Software EnCase allows user-assisted remote attackers to cause a denial...4.3 Medium
- guidance software encase** DISPUTED ** Guidance Software EnCase does not properly handle (1) certain malformed MBR...5.0 Medium
- yahoo widgetsStack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets)...9.3 High
- php, t1lib +1 moreBuffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1...7.5 High
- crystal reality llc crystalplayer proBuffer overflow in CrystalPlayer Pro 1.98 allows user-assisted remote attackers to execute...6.8 Medium
- nessus vulnerability scannerDirectory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3...7.8 High
- nvidia video driverNVIDIA drivers (nvidia-drivers) before 1.0.7185, 1.0.9639, and 100.14.11, as used in Gentoo Linux...7.2 High
- linux kernelStack-based buffer overflow in the random number generator (RNG) implementation in the Linux...4.6 Medium
- redhat fedora coreBuffer overflow in the wpa_printf function in the debugging code in wpa_supplicant in the Fedora...5.8 Medium
- jboss application serverThe Access Control functionality (JMXOpsAccessControlFilter) in JMX Console in JBoss Application...6.0 Medium
- libvorbislibvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to...6.8 Medium
- ibm aixBuffer overflow in the ftp client in IBM AIX 5.3 SP6 and 5.2.0 allows local users to execute...6.9 Medium
- ibm aixpioout in IBM AIX 5.3 SP6 allows local users to execute arbitrary code by specifying a malicious...6.9 Medium
- ibm aixStack-based buffer overflow in capture in IBM AIX 5.3 SP6 and 5.2.0 allows remote attackers to...6.9 Medium
- libvorbislib/info.c in libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent...6.8 Medium
- webspellAbsolute path traversal vulnerability in index.php in Webspell 4.01.02 allows remote attackers to...7.5 High
- areca cliBuffer overflow in cli32 in Areca CLI 1.72.250 and earlier might allow local users to gain...6.6 Medium
- telaxus llc epesiepesi framework before 0.8.6 does not properly verify file extensions, which allows remote...6.8 Medium
- sun java system application serverUnspecified vulnerability in Sun Java System (SJS) Application Server 8.1 through 9.0 before...4.3 Medium
- w1l3d4 philboardCross-site scripting (XSS) vulnerability in W1L3D4_aramasonuc.asp in W1L3D4 Philboard 0.3 allows...4.3 Medium
- aruba mobility controllerCross-site scripting (XSS) vulnerability in the login CGI program in Aruba Mobility Controller 2...4.3 Medium
- cpanelCross-site scripting (XSS) vulnerability in frontend/x/htaccess/changepro.html in cPanel 10.9.1...4.3 Medium
- brain book software software secureMultiple cross-site scripting (XSS) vulnerabilities in login.php in Brain Book Software Secure 1...4.3 Medium
- Show moreLoading…