CVEs published in August 2007
522 vulnerabilities, 55 critical, 0 exploited.
- ibm aixAIX 5.2 and 5.3 install pioinit with user and group ownership of bin, which allows local users...6.9 Medium
- ibm aixBuffer overflow in the atm subset in arp in devices.common.IBM.atm.rte in AIX 5.2 and 5.3 allows...6.9 Medium
- ibm aixBuffer overflow in lpd in bos.rte.printers in AIX 5.2 and 5.3 allows local users with printq...6.9 Medium
- vietphpMultiple PHP remote file inclusion vulnerabilities in VietPHP allow remote attackers to execute...9.3 High
- camera life lifeUnspecified vulnerability in Camera Life before 2.6 allows remote attackers to download private...5.0 Medium
- camera life lifeMultiple unspecified vulnerabilities in Camera Life before 2.6 allow attackers to cause a denial...4.3 Medium
- andreas robertz phpnewsPHP remote file inclusion vulnerability in admin/inc/change_action.php in Andreas Robertz PHPNews...6.8 Medium
- idevspot phphostbotPHP remote file inclusion vulnerability in order/login.php in IDevSpot PhpHostBot 1.06 and...6.8 Medium
- jems scripts bellabiblio** DISPUTED ** BellaBiblio allows remote attackers to gain administrative privileges via a...7.5 High
- kde konquerorUnspecified vulnerability in KDE Konqueror 3.5.7 and earlier allows remote attackers to cause a...4.3 Medium
- ibm aixrmpvc on IBM AIX 4.3 allows local users to cause a denial of service (system crash) via long port...4.7 Medium
- microsoft internet explorerMicrosoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial...4.3 Medium
- bluecat networks adonisDirectory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 (Adonis...7.1 High
- kde konquerorVisual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL...6.8 Medium
- kde konquerorKDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval...4.3 Medium
- phpnuke php-nukeMultiple cross-site scripting (XSS) vulnerabilities in the Search Module in PHP-Nuke allow remote...4.3 Medium
- dovecotThe ACL plugin in Dovecot before 1.0.3 allows remote authenticated users with the insert right to...6.0 Medium
- redline software lanai cmsMultiple SQL injection vulnerabilities in module.php in LANAI (la-nai) CMS 1.2.14 allow remote...7.5 High
- aceboard forumSQL injection vulnerability in Recherche.php in Aceboard forum allows remote attackers to execute...7.5 High
- morgan ids next gen portfolio managerSQL injection vulnerability in default.asp in Next Gen Portfolio Manager allows remote attackers...7.5 High
- kerberosdev gallery in a boxSQL injection vulnerability in admin_console/index.asp in Gallery In A Box allows remote...7.5 High
- kaspersky lab anti-spamKaspersky Anti-Spam 3.0 MP1 before Critical Fix 2 (3.0.278.4) sets incorrect permissions for...4.4 Medium
- linux-ha heartbeatXHA (Linux-HA) on the BlueCat Networks Adonis DNS/DHCP Appliance 5.0.2.8 allows remote attackers...7.1 High
- hitachi groupmax collaboration portal, groupmax collaboration web client, ucosminexus collaboration portal +2 moreHitachi Groupmax Collaboration - Schedule, as used in Groupmax Collaboration Portal 07-32 through...3.5 Low
- mambo open sourceSession fixation vulnerability in Mambo 4.6.2 CMS allows remote attackers to hijack web sessions...9.3 High
- guidance software encaseGuidance Software EnCase Enterprise Edition (EEE) 6 does not properly verify the identity of the...4.3 Medium
- guidance software encaseGuidance Software EnCase 6.2 and 6.5 does not properly handle a volume with more than 25...5.0 Medium
- brian carrier the slueth kitntfs.c in fsstat in Brian Carrier The Sleuth Kit (TSK) before 2.09 interprets a certain variable...4.3 Medium
- brian carrier the slueth kitBrian Carrier The Sleuth Kit (TSK) before 2.09 allows user-assisted remote attackers to cause a...4.3 Medium
- brian carrier the slueth kitThe fs_data_put_str function in ntfs.c in fls in Brian Carrier The Sleuth Kit (TSK) before 2.09...4.3 Medium
- brian carrier the slueth kiticat in Brian Carrier The Sleuth Kit (TSK) before 2.09 omits NULL pointer checks in certain code...4.3 Medium
- brian carrier the slueth kiticat in Brian Carrier The Sleuth Kit (TSK) before 2.09 misinterprets a certain memory location as...4.3 Medium
- the sleuth kit sleuth kitUse-after-free vulnerability in ext2fs.c in Brian Carrier The Sleuth Kit (TSK) before 2.09 allows...4.3 Medium
- guidance software encaseGuidance Software EnCase 5.0 allows user-assisted remote attackers to cause a denial of service ...4.3 Medium
- ide group dvd rental system drsMultiple cross-site request forgery (CSRF) vulnerabilities in index.php in IDE Group DVD Rental...4.3 Medium
- ide group dvd rental system drsMultiple cross-site scripting (XSS) vulnerabilities in IDE Group DVD Rental System (DRS) 5.1...4.3 Medium
- panda antivirusPanda Antivirus 2008 stores service executables under the product's installation directory with...6.9 Medium
- joomla joomla\!Joomla! vulnerable to CRLF injection4.3 Medium
- joomla joomla\!Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow...4.3 Medium
- joomla joomla\!Session fixation vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to...9.3 High
- joomlaMultiple eval injection vulnerabilities in the com_search component in Joomla! 1.5 beta before...7.5 High
- joomla tour de france poolPHP remote file inclusion vulnerability in admin.tour_toto.php in the Tour de France Pool ...6.8 Medium
- joomlaJoomla! 1.0.12 allows remote attackers to obtain sensitive information via a direct request for ...5.0 Medium
- joomlaSQL injection vulnerability in administrator/popups/pollwindow.php in Joomla! 1.0.12 allows...7.5 High
- php arena pabugsSQL injection vulnerability in main.php in paBugs 2.0 Beta 3 and earlier allows remote attackers...7.5 High
- wikiwebweaverUnrestricted file upload vulnerability in index.php in WikiWebWeaver 1.1 and earlier allows...7.5 High
- pluck** DISPUTED ** PHP remote file inclusion vulnerability in data/inc/theme.php in Pluck 4.3, when...6.8 Medium
- pluck** DISPUTED ** Directory traversal vulnerability in data/inc/theme.php in Pluck 4.3, when...5.0 Medium
- hp address and routing parameter area\(arpa\) transportUnspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport...1.5 Low
- amg soft webdirectorCross-site scripting (XSS) vulnerability in index.php in WebDirector 2.2 and earlier allows...4.3 Medium
- Show moreLoading…