CVEs published in September 2007
435 vulnerabilities, 53 critical, 1 exploited.
- berkeley boinc forumMultiple cross-site scripting (XSS) vulnerabilities in Boinc Forum 5.10.20 and earlier allow...4.3 Medium
- xwikiUnspecified vulnerability in the Multiwiki plugin in XWiki before 1.1 Enterprise RC2 allows...2.1 Low
- ekigapwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a...5.0 Medium
- toms-seiten.at toms gastenbuchMultiple cross-site scripting (XSS) vulnerabilities in admin/header.php in Toms Gaestebuch 1.01...4.3 Medium
- sisfo kampus kampusDirectory traversal vulnerability in dwoprn.php in Sisfo Kampus 2006 (Semarang 3) allows remote...5.0 Medium
- wordpressMultiple SQL injection vulnerabilities in Wordpress before 2.2.3 and Wordpress multi-user (MU)...7.5 High
- wordpresswp-admin/admin-functions.php in Wordpress before 2.2.3 and Wordpress multi-user (MU) before 1.2...4.3 Medium
- swsoft pleskMultiple SQL injection vulnerabilities in SWSoft Plesk 7.6.1, 8.1.0, 8.1.1, and 8.2.0 for Windows...7.5 High
- microsoft visual studioA certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0...6.8 Medium
- microsoft visual studioAbsolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support...5.8 Medium
- php mysql extension, php +1 moreThe MySQL extension in PHP 5.2.4 and earlier allows remote attackers to bypass safe_mode and...6.8 Medium
- sambaThe Winbind nss_info extension (nsswitch/idmap_ad.c) in idmap_ad.so in Samba 3.0.25 through 3.0...6.9 Medium
- linux kernelThe CIFS filesystem in the Linux kernel before 2.6.22, when Unix extension support is enabled,...4.4 Medium
- redhat enterprise linuxmm/mmap.c in the hugetlb kernel, when run on PowerPC systems, does not prevent stack expansion...4.7 Medium
- xwikiThe "You are not allowed..." error handler in XWiki 1.0 B1 and 1.0 B2 associates the doc variable...3.5 Low
- phpThe dl function in PHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of...4.3 Medium
- auracmsIncomplete blacklist vulnerability in index.php in AuraCMS 1.x and probably 2.x allows remote...6.8 Medium
- avnex av mp3 playerAvnex AV MP3 Player allows user-assisted remote attackers to cause a denial of service ...4.3 Medium
- media player classic player classicMedia Player Classic (MPC) allows user-assisted remote attackers to cause a denial of service ...4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the BotQuery extension in MediaWiki 1.7.x and earlier...4.3 Medium
- techexcel inc. customerwiseMultiple cross-site scripting (XSS) vulnerabilities in TechExcel CustomerWise (formerly TechExcel...4.3 Medium
- psi-labs social networking script psisnsSQL injection vulnerability in profile/myprofile.php in psi-labs.com social networking script ...7.5 High
- autodesk backburnerThe cmdjob utility in Autodesk Backburner 3.0.2 allows remote attackers to execute arbitrary...6.8 Medium
- apache http serverCross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2...4.3 Medium
- callisto photoparade playerBuffer overflow in the PhPInfo ActiveX control in PhPCtrl.dll in Callisto PhotoParade Player...9.3 High
- xwikiXWiki Remote Code Execution6.5 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox before Firefox 2.0.0.13, and SeaMonkey before 1.1.9, can automatically install...5.0 Medium
- one laptop per child olpc linuxJFFS2, as used on One Laptop Per Child (OLPC) build 542 and possibly other Linux systems, when...4.4 Medium
- microsoft internet explorer, ie +1 moreMicrosoft Internet Explorer 4.0 through 7 allows remote attackers to determine the existence of...4.3 Medium
- google picasaGoogle Picasa allows remote attackers to read image files stored by Picasa via unspecified...5.0 Medium
- webace webace-linkscriptSQL injection vulnerability in start.php in Webace-Linkscript (wls) 1.3 Special Edition (SE)...7.5 High
- rwscripts.com rw download liteMultiple SQL injection vulnerabilities in UPLOAD/index.php in RW::Download 2.0.3 lite allow...7.5 High
- x-diesel unreal commanderX-Diesel Unreal Commander 0.92 build 565 and 573 does not properly react to an FTP server's...4.3 Medium
- x-diesel unreal commanderDirectory traversal vulnerability in X-Diesel Unreal Commander 0.92 build 565 and 573 allows...5.8 Medium
- enriva development magellan explorerDirectory traversal vulnerability in Enriva Development Magellan Explorer 3.32 build 2305 and...9.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreMozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allows...9.3 High
- phpPHP 5.2.4 and earlier allows context-dependent attackers to cause a denial of service ...5.0 Medium
- ibm websphere application serverUnspecified vulnerability in the PD tools component in IBM WebSphere Application Server (WAS) 6.1...7.5 High
- immersion games cellfactor revolutionMultiple buffer overflows in CellFactor Revolution 1.03 and earlier allow remote attackers to...7.5 High
- proxy anket anketSQL injection vulnerability in anket.asp in Proxy Anket 3.0.1 allows remote attackers to execute...7.5 High
- phpmyquoteCross-site scripting (XSS) vulnerability in index.php in phpMyQuote 0.20 allows remote attackers...4.3 Medium
- phpmyquoteSQL injection vulnerability in index.php in phpMyQuote 0.20 allows remote attackers to execute...7.5 High
- phprealtyMultiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to...7.5 High
- ibm websphere application serverUnspecified vulnerability in the Edge Component in IBM WebSphere Application Server (WAS) 6.1...5.0 Medium
- immersion games cellfactor revolutionFormat string vulnerability in CellFactor Revolution 1.03 and earlier allows remote attackers to...7.5 High
- torrenttraderMultiple cross-site scripting (XSS) vulnerabilities in account_settings.php in TorrentTrader 1.07...2.6 Low
- directadminCross-site scripting (XSS) vulnerability in CMD_BANDWIDTH_BREAKDOWN in DirectAdmin 1.30.2 and...4.3 Medium
- mediawikiCross-site scripting (XSS) vulnerability in the API pretty-printing mode in MediaWiki 1.8.0...4.3 Medium
- deutsche post stampit webStampit Web uses guessable id values for online stamp purchases, which allows remote attackers to...5.0 Medium
- quaggabgpd in Quagga before 0.99.9 allows explicitly configured BGP peers to cause a denial of service ...3.5 Low
- Show moreLoading…