CVEs published in August 2007
522 vulnerabilities, 55 critical, 0 exploited.
- ibm surepos 500IBM SurePOS 500 has (1) a default password of "12345" for the manager and (2) blank default...4.6 Medium
- turnkey web tools sunshop shopping cartSQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 RC 6 allows...7.5 High
- phpThe perl extension in PHP does not follow safe_mode restrictions, which allows context-dependent...7.5 High
- the seasar foundation mayaaCross-site scripting (XSS) vulnerability in Mayaa before 1.1.12 allows remote attackers to inject...4.3 Medium
- entrust entelligence security providerEntrust Entelligence Security Provider (ESP) 8 does not properly validate certificates in certain...6.4 Medium
- vmware workstationUnspecified vulnerability in vstor2-ws60.sys in VMWare Workstation 6.0 allows local users to...6.9 Medium
- vmware workstationvstor-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service (host...6.9 Medium
- hp dynrootdisk, hp-ux, ignite-ux +2 moreThe get_system_info command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk (DRD) A.1.0.16.417...3.3 Low
- interworx web control panelMultiple cross-site scripting (XSS) vulnerabilities in InterWorx Hosting Control Panel (InterWorx...4.3 Medium
- interworx web control panelMultiple cross-site scripting (XSS) vulnerabilities in InterWorx Hosting Control Panel (InterWorx...4.3 Medium
- the seasar foundation escafewebCross-site scripting (XSS) vulnerability in Easy Software Cafeteria escafeWeb (aka Tuigwaa) 1.0...4.3 Medium
- phpMultiple buffer overflows in php_iisfunc.dll in the iisfunc extension for PHP 5.2.0 and earlier...7.5 High
- 2532gigsDirectory traversal vulnerability in activateuser.php in 2532|Gigs 1.2.1 allows remote attackers...7.5 High
- bitchxStack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary...10.0 High
- acti network video recorderMultiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in...5.0 Medium
- acti network video recorderBuffer overflow in the nvUnifiedControl.AUnifiedControl.1 ActiveX control in nvUnifiedControl.dll...7.5 High
- wbb2-addon acrotxtSQL injection vulnerability in acrotxt.php in WBB2-Addon: Acrotxt 1 allows remote attackers to...7.5 High
- motorola timbuktuMultiple buffer overflows in Motorola Timbuktu Pro before 8.6.5 for Windows allow remote...10.0 High
- motorola timbuktuDirectory traversal vulnerability in Motorola Timbuktu Pro before 8.6.5 for Windows allows remote...7.8 High
- lighttpdBuffer overflow in the fcgi_env_add function in mod_proxy_backend_fastcgi.c in the mod_fastcgi...6.8 Medium
- bufferzonesecurity bufferzoneBuffer underflow in redlight.sys in BufferZone 2.1 and 2.5 allows local users to cause a denial...7.2 High
- sophos anti-virus, scanning engine, small business suite +2 moreSophos Anti-Virus for Windows and for Unix/Linux before 2.48.0 allows remote attackers to cause a...6.8 Medium
- sophos anti-virus, scanning engine, small business suite +2 moreSophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of...7.8 High
- subversion, tortoisesvn +1 moreDirectory traversal vulnerability in Subversion before 1.4.5, as used by TortoiseSVN before 1.4.5...6.0 Medium
- alpha centauri software sidvault ldap serverMultiple buffer overflows in the login mechanism in sidvault in Alpha Centauri Software SIDVault...10.0 High
- fetchmailsink.c in fetchmail before 6.3.9 allows context-dependent attackers to cause a denial of service ...5.0 Medium
- hitachi cosminexus application server enterprise, cosminexus application server standard, electronic form workflow - standard set +4 more +6 moreCosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's...4.6 Medium
- hitachi cosminexus application server enterprise, cosminexus application server standard, electronic form workflow - standard set +4 more +6 moreCosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's...4.4 Medium
- hitachi cosminexus dabroker, dabroker +1 moreUnspecified vulnerability in Hitachi DABroker before 03-02-/D and Cosminexus DABroker before 02...4.3 Medium
- realnetworks helix dna serverHeap-based buffer overflow in the RTSP service in Helix DNA Server before 11.1.4 allows remote...10.0 High
- clam anti-virus clamavclamav-milter in ClamAV before 0.91.2, when run in black hole mode, allows remote attackers to...7.6 High
- novell groupwise webaccessCross-site scripting (XSS) vulnerability in the webacc servlet in Novell GroupWise 6.5 WebAccess...4.3 Medium
- opensymphony xworkOpenSymphony XWork vulnerable to improper input validation6.8 Medium
- asteriskAsterisk Open Source 1.4.5 through 1.4.11, when configured to use an IMAP voicemail storage...5.0 Medium
- guliverkli media player classicBuffer overflow in the CFLICStream::_deltachunk function in FLICSource.cpp in Media Player...6.8 Medium
- pythonDirectory traversal vulnerability in the (1) extract and (2) extractall functions in the tarfile...6.8 Medium
- ipswitch ws ftpCross-site scripting (XSS) vulnerability in Ipswitch WS_FTP allows remote attackers to inject...4.3 Medium
- tiki tikiwiki cms\/groupwareCross-site scripting (XSS) vulnerability in tiki-remind_password.php in Tikiwiki (aka Tiki CMS...4.3 Medium
- thomson st 2030 sip phoneThe Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of...5.0 Medium
- agares media arcademSQL injection vulnerability in index.php in Agares Media Arcadem 2.01 allows remote attackers to...7.5 High
- agares media arcademPHP remote file inclusion vulnerability in index.php in Agares Media Arcadem 2.01 allows remote...7.5 High
- altools alpassFormat string vulnerability in ALPass 2.7 English and 3.02 Korean might allow user-assisted...5.1 Medium
- altools alpassMultiple buffer overflows in ALPass 2.7 English and 3.02 Korean allow user-assisted remote...6.8 Medium
- apache geronimoThe login method in LoginModule implementations in Apache Geronimo 2.0 does not throw...10.0 High
- x-diesel unreal commanderUnreal Commander 0.92 build 565 and 573 writes portions of heap memory into local files when...4.3 Medium
- x-diesel unreal commanderUnreal Commander 0.92 build 565 and 573 lists the filenames from the Central Directory of a ZIP...5.8 Medium
- x-diesel unreal commanderMultiple directory traversal vulnerabilities in Unreal Commander 0.92 build 565 and 573 allow...6.8 Medium
- wordpress muCross-site scripting (XSS) vulnerability in wp-newblog.php in WordPress multi-user (MU) 1.0 and...4.3 Medium
- mozilla bugzillaCross-site scripting (XSS) vulnerability in enter_bug.cgi in Bugzilla 2.17.1 through 2.20.4, 2.22...4.3 Medium
- university of minnesota mapserverMultiple cross-site scripting (XSS) vulnerabilities in MapServer before 4.10.3 allow remote...4.3 Medium
- Show moreLoading…