CVEs published in September 2007
435 vulnerabilities, 53 critical, 1 exploited.
- solidweb novus Cross-site scripting (XSS) vulnerability in buscar.asp in Solidweb Novus 1.0 allows remote... 4.3 Medium
- sitex cms SQL injection vulnerability in search.php in SiteX CMS 0.7.3 Beta allows remote attackers to... 6.8 Medium
- integramod nederland PHP remote file inclusion vulnerability in includes/archive/archive_topic.php in IntegraMOD... 6.8 Medium
- chupix cms PHP remote file inclusion vulnerability in admin/include/header.php in chupix 0.2.3, when... 6.8 Medium
- lustig lustig.cms PHP remote file inclusion vulnerability in forum/forum.php in lustig.cms BETA 2.5 allows remote... 6.8 Medium
- tcl tk tk Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl (Tcl/Tk) 8.4.13 through 8... 6.8 Medium
- dragonfrugal dfd cart Cross-site scripting (XSS) vulnerability in DFD Cart 1.1.4 and earlier allows remote attackers to... 4.3 Medium
- ibm tivoli storage manager client Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage... 10.0 High
- apple safari Unspecified vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4... 6.8 Medium
- apple safari Cross-site scripting (XSS) vulnerability in Safari in Apple iPhone 1.1.1 allows remote attackers... 4.3 Medium
- apple safari Cross-site scripting (XSS) vulnerability in Safari in Apple iPhone 1.1.1, and Safari 3 before... 4.3 Medium
- apple safari Safari in Apple iPhone 1.1.1, when requested to disable Javascript, does not disable it until... 6.8 Medium
- apple safari Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and in Mac OS X 10... 4.3 Medium
- apple safari Safari in Apple iPhone 1.1.1 allows remote user-assisted attackers to trick the iPhone user into... 4.3 Medium
- apple safari Safari in Apple iPhone 1.1.1, and Safari 3 before Beta Update 3.0.4 on Windows and Mac OS X 10.4... 4.3 Medium
- apple iphone, iphone os +1 more Mail in Apple iPhone 1.1.1 allows remote user-assisted attackers to force the iPhone user to make... 4.3 Medium
- apple iphone, iphone os +1 more Mail in Apple iPhone 1.1.1, when using SSL, does not warn the user when the mail server changes... 4.3 Medium
- apple iphone, iphone os +1 more Apple iPhone 1.1.1, with Bluetooth enabled, allows physically proximate attackers to cause a... 7.5 High
- openssl Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8... 6.8 Medium
- cisco catalyst 6500, catalyst 6500 ws-svc-nam-1, catalyst 6500 ws-svc-nam-2 +6 more +8 more Cisco Catalyst 6500 and Cisco 7600 series devices use 127/8 IP addresses for Ethernet Out-of-Band... 5.0 Medium
- 3ware 3dm disk management software, microsoft windows 2003 server, windows server 2003 +2 more +4 more Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial... 7.1 High
- sun solaris Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of... 4.9 Medium
- interspire activekb nx SQL injection vulnerability in index.php in Interspire ActiveKB NX 2.x allows remote attackers to... 7.5 High
- boesch-it simpgb SimpGB 1.46.02 allows remote attackers to obtain sensitive information via (1) an invalid lang... 4.3 Medium
- boesch-it simpgb SimpGB 1.46.02 stores sensitive information under the web root with insufficient access control,... 5.0 Medium
- boesch-it simpnews, php +1 more SimpNews 2.41.03 on Windows, when PHP before 5.0.0 is used, allows remote attackers to obtain... 5.0 Medium
- simpgb Multiple cross-site scripting (XSS) vulnerabilities in SimpGB 1.46.02 allow remote attackers to... 4.3 Medium
- symantec veritas backup exec Unspecified vulnerability in the client in Symantec Veritas Backup Exec for Windows Servers 11d... 10.0 High
- aol instant messenger The embedded Internet Explorer server control in AOL Instant Messenger (AIM) 6.5.3.12 and earlier... 6.8 Medium
- simplenews SimpNews 2.41.03 stores sensitive information under the web root with insufficient access control... 5.0 Medium
- simplenews SimpNews 2.41.03 allows remote attackers to obtain sensitive information via (1) an invalid lang... 5.0 Medium
- solidweb novus SQL injection vulnerability in notas.asp in Novus 1.0 allows remote attackers to execute... 7.5 High
- softbizscripts classifieds plus script SQL injection vulnerability in store_info.php in SoftBiz Classifieds PLUS allows remote attackers... 7.5 High
- jspwiki Cross-site scripting (XSS) vulnerability in JSPWiki 2.5.139-beta allows remote attackers to... 4.3 Medium
- jspwiki Multiple cross-site scripting (XSS) vulnerabilities in JSPWiki 2.4.103 and 2.5.139-beta allow... 4.3 Medium
- jspwiki JSPWiki 2.4.103 and 2.5.139-beta allows remote attackers to obtain sensitive information (full... 4.3 Medium
- sun solaris Unspecified vulnerability in the HID (Human Interface Device) class driver in Sun Solaris 8, 9,... 4.7 Medium
- frontaccounting Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.13, when... 9.3 High
- xensource inc xen pygrub (tools/pygrub/src/GrubConf.py) in Xen 3.0.3, when booting a guest domain, allows local... 6.9 Medium
- ekke doerre mods 4 xoops contenido ez publish Multiple PHP remote file inclusion vulnerabilities in Ekke Doerre Contenido 42VariablVersion ... 7.5 High
- phpmyprofiler ** DISPUTED ** PHP remote file inclusion vulnerability in include/plugin/block.t.php in Peter... 6.8 Medium
- roi revolution urchin report.cgi in Google Urchin allows remote attackers to bypass authentication and obtain sensitive... 5.0 Medium
- roi revolution urchin Cross-site scripting (XSS) vulnerability in session.cgi (aka the login page) in Google Urchin 5 5... 4.3 Medium
- eb design pty ltd ebcrypt A certain ActiveX control in EBCRYPT.DLL 2.0 in EB Design ebCrypt allows remote attackers to... 4.3 Medium
- eb design pty ltd ebcrypt Absolute path traversal vulnerability in the EbCrypt.eb_c_PRNGenerator.1 ActiveX control in... 7.5 High
- flatnuke Cross-site request forgery (CSRF) vulnerability in index.php in FlatNuke 2.6, and possibly 3,... 4.3 Medium
- ask.com ask toolbar Unspecified vulnerability in IAC Search & Media ask.com toolbar has unknown impact and remote... 10.0 High
- ask.com ask toolbar Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar... 9.3 High
- wordpress Cross-site scripting (XSS) vulnerability in wp-register.php in WordPress 2.0 allows remote... 4.3 Medium
- wordpress Cross-site scripting (XSS) vulnerability in wp-register.php in WordPress 2.0 and 2.0.1 allows... 4.3 Medium
- Show olderLoading…