CVEs published in September 2007
435 vulnerabilities, 53 critical, 1 exploited.
- phpbb2 plusPHP remote file inclusion vulnerability in language/lang_german/lang_main_album.php in phpBB Plus...6.8 Medium
- hp hp-uxThe logins command in HP-UX B.11.31, B.11.23, and B.11.11 does not correctly report password...9.0 High
- gnome balsaStack-based buffer overflow in the ir_fetch_seq function in balsa before 2.3.20 might allow...6.8 Medium
- ktauber stylesdemoSQL injection vulnerability in index.php in the Ktauber.com StylesDemo mod for phpBB 2.0.xx...7.5 High
- cowon america jetaudioDirectory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in...10.0 High
- mw6 technologies qrcode activexMultiple absolute path traversal vulnerabilities in the MW6QRCode.QRCode.1 ActiveX control in...10.0 High
- oblius obeditCross-site scripting (XSS) vulnerability in the save function in Obedit 3.03 allows user-assisted...4.3 Medium
- gcaldaemonThe readRequest method in org/gcaldaemon/core/http/HTTPListener.java in GCALDaemon 1.0-beta13...4.3 Medium
- kwsphpSQL injection vulnerability in index.php in the sondages module in KwsPHP 1.0 allows remote...7.5 High
- phpsyncmlMultiple PHP remote file inclusion vulnerabilities in phpSyncML 0.1.2 and earlier allow remote...7.5 High
- coppermine photo galleryCross-site scripting (XSS) vulnerability in mode.php in Coppermine Photo Gallery (CPG) 1.4.12 and...3.5 Low
- coppermine photo galleryDirectory traversal vulnerability in viewlog.php in Coppermine Photo Gallery (CPG) 1.4.12 and...6.5 Medium
- b1g b1gmailCross-site scripting (XSS) vulnerability in hilfe.php in b1gMail 6.3.1 allows remote attackers to...4.3 Medium
- automated solutions modbus slave activex controlUnspecified vulnerability in the Modbus/TCP Diagnostic function in MiniHMI.exe for the Automated...7.5 High
- avaya ip soft phoneMultiple buffer overflows in unspecified ActiveX controls in COM objects in Avaya IP Softphone R5...6.8 Medium
- mega-nerd libsndfileHeap-based buffer overflow in the flac_buffer_copy function in libsndfile 1.0.17 and earlier...7.5 High
- sysinternals regmonRegMon 7.04 does not properly validate certain parameters to System Service Descriptor Table ...1.9 Low
- isecsoft prosecurityProSecurity 1.40 Beta 2 does not properly validate certain parameters to System Service...4.4 Medium
- diamondcs processguardProcessGuard 3.410 does not properly validate certain parameters to System Service Descriptor...4.4 Medium
- sysinternals process monitorProcess Monitor 1.22 does not properly validate certain parameters to System Service Descriptor...4.4 Medium
- privacyware privatefirewallPrivatefirewall 5.0.14.2 does not properly validate certain parameters to System Service...4.4 Medium
- online armor personal firewallOnline Armor Personal Firewall 2.0.1.215 does not properly validate certain parameters to System...4.4 Medium
- gforgeSQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows...6.8 Medium
- pythonMultiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context...5.8 Medium
- winimageWinImage 8.10 and earlier allows remote attackers to cause a denial of service (infinite loop)...5.0 Medium
- winimageVisual truncation vulnerability in WinImage 8.10 and earlier allows remote attackers to spoof a...9.3 High
- winimageDirectory traversal vulnerability in WinImage 8.10 and earlier allows user-assisted remote...9.3 High
- lindenlab second lifeThe login_to_simulator method in Linden Lab Second Life, as used by the secondlife:// protocol...7.5 High
- linden lab second lifeArgument injection vulnerability in the Linden Lab Second Life secondlife:// protocol handler, as...5.0 Medium
- jelsoft oscmaxCross-site scripting (XSS) vulnerability in catalog_products_with_images.php in osCMax 2.0.0-RC3...4.3 Medium
- tinywebgalleryMultiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) 1.6.3.4 allow remote...4.3 Medium
- data-vision remotedocs r-viewerRemoteDocs R-Viewer before 1.6.3768 stores encrypted RDZ file data in unencrypted temporary files...1.9 Low
- data-vision remotedocs r-viewerUnspecified vulnerability in RemoteDocs R-Viewer before 1.6.3768 allows user-assisted remote...9.3 High
- al-enterprise omnipcx enterprise communication server, alcatel omnipcx enterprise +1 moremasterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1...9.8 Critical
- chupix cmsMultiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote...7.5 High
- kwsphpMultiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary...7.5 High
- joomla flash fun componentPHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun! ...6.8 Medium
- joomla joom12pic componentPHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (com_joom12pic) 1...6.8 Medium
- simpcmsSQL injection vulnerability in index.php in SimpCMS allows remote attackers to execute arbitrary...7.5 High
- omnistar interactive article managerSQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to...7.5 High
- yapig** DISPUTED ** PHP remote file inclusion vulnerability in sample.php in YaPiG 0.95b allows...6.8 Medium
- phportal** DISPUTED ** PHP remote file inclusion vulnerability in form/db_form/employee.php in PHPortal...6.8 Medium
- phpreactor** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in php(Reactor) 1.2.7pl1 allow...6.8 Medium
- webmedia explorer explorerMultiple PHP remote file inclusion vulnerabilities in Webmedia Explorer (webmex) 3.2.2 allow...5.1 Medium
- myphppagetoolMultiple PHP remote file inclusion vulnerabilities in myphpPagetool 0.4.3 allow remote attackers...7.5 High
- photochannel pni digital media upload plugin activex controlMultiple stack-based buffer overflows in the PhotoChannel Networks PNI Digital Media Photo Upload...9.3 High
- jasmine technologies lettergradeLetterGrade allows remote attackers to obtain sensitive information (installation path or account...5.0 Medium
- jasmine technologies lettergradeMultiple cross-site scripting (XSS) vulnerabilities in LetterGrade allow remote attackers to...4.3 Medium
- opera browserThe canvas.createPattern function in Opera 9.x before 9.22 for Linux, FreeBSD, and Solaris does...5.0 Medium
- baofeng stormMultiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and...9.3 High
- Show moreLoading…