CVEs published in September 2007
435 vulnerabilities, 53 critical, 1 exploited.
- neuron news newsDirectory traversal vulnerability in index.php in Neuron News 1.0 allows remote attackers to...7.5 High
- lhaplusHeap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary...7.5 High
- symantec norton internet securityNorton Internet Security 2008 15.0.0.60 does not properly validate certain parameters to System...7.2 High
- icewarp merak mail serverCross-site scripting (XSS) vulnerability in the Webmail interface for IceWarp Merak Mail Server...4.3 Medium
- apple quicktime, mozilla firefox +1 moreArgument injection vulnerability in Apple QuickTime 7.1.5 and earlier, when running on systems...9.3 High
- zonelabs zonealarmZoneAlarm Pro 7.0.362.000 does not properly validate certain parameters to System Service...6.9 Medium
- kaspersky lab internet securityKaspersky Internet Security 7.0.0.125 does not properly validate certain parameters to System...4.4 Medium
- agnitum outpost firewallOutpost Firewall Pro 4.0.1025.7828 does not properly validate certain parameters to System...4.6 Medium
- gdata internetsecurity 2007G DATA InternetSecurity 2007 does not properly validate certain parameters to System Service...4.6 Medium
- ghostsecurity ghost security suiteGhost Security Suite alpha 1.200 does not properly validate certain parameters to System Service...2.1 Low
- ghostsecurity ghost security suiteGhost Security Suite beta 1.110 does not properly validate certain parameters to System Service...2.1 Low
- mozilla bugzillaThe offer_account_by_email function in User.pm in the WebService for Bugzilla before 3.0.2, and 3...7.5 High
- inotify inotify-toolsBuffer overflow in the inotifytools_snprintf function in src/inotifytools.c in the inotify-tools...6.8 Medium
- airdefense airsensorMultiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 and 4.4.1.4...5.0 Medium
- openengine** DISPUTED ** PHP remote file inclusion vulnerability in html/modules/extranet_profile/main.php...7.5 High
- skk openlab toolsThe main function in skkdic-expr.c in SKK Tools 1.2 allows local users to overwrite or delete...4.4 Medium
- elinksELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content...4.3 Medium
- phpbb xs xsCross-site scripting (XSS) vulnerability in profile.php in phpBB XS 2 allows remote attackers to...4.3 Medium
- francisco burzi php-nukeCross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows...5.1 Medium
- dibblerThe TSrvOptIA_NA::rebind method in SrvOptions/SrvOptIA_NA.cpp in Dibbler 0.6.0 allows remote...5.0 Medium
- dibblerMultiple integer overflows in Dibbler 0.6.0 allow remote attackers to cause a denial of service ...5.0 Medium
- dibblerDibbler 0.6.0 does not verify that certain length parameters are appropriate for buffer sizes,...5.0 Medium
- dibblerDibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib...7.5 High
- level one wbr3404txMultiple cross-site scripting (XSS) vulnerabilities in cgi-bin/ddns in the web management panel...4.3 Medium
- dblog cmsdBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access...5.0 Medium
- vmware aceUnspecified vulnerability in EMC VMware ACE before 1.0.3 Build 54075 allows attackers to have an...9.3 High
- emc vmware serverEMC VMware Server before 1.0.4 Build 56528 writes passwords in cleartext to unspecified log files...2.1 Low
- vmware ace, player, server +2 more +4 moreUnquoted Windows search path vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and...6.9 Medium
- microsoft isa serverThe SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2...5.0 Medium
- vmware ace, player, server +2 more +4 moreUnspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1...5.5 Medium
- vmware ace, player, server +2 more +4 moreUnspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1...6.5 Medium
- xiph.org libvorbisMultiple buffer overflows in Xiph.Org libvorbis before 1.2.0 allow context-dependent attackers to...4.3 Medium
- xiph.org libvorbislib/vorbisfile.c in libvorbisfile in Xiph.Org libvorbis before 1.2.0 allows context-dependent...4.3 Medium
- vmware ace, player, server +3 more +5 moreInteger underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x...10.0 High
- vmware ace, player, server +1 more +3 moreInteger overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server...10.0 High
- vmware ace, player, server +3 more +5 moreThe DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build...10.0 High
- ibm tivoli storage manager clientUnspecified vulnerability in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1,...5.0 Medium
- adobe acrobat, acrobat reader +1 moreUnspecified vulnerability in Adobe Acrobat and Reader 8.1 on Windows allows remote attackers to...9.3 High
gforgeDebiangforge - cross site scripting vulnerability in account/verify.phpNo score- kdebackend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown...6.8 Medium
- sun java web start, jre, sdk +2 moreBuffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6...10.0 High
- david harris mercury 32Stack-based buffer overflow in IMAPD in Mercury/32 4.52 allows remote authenticated users to...6.0 Medium
- yahoo messengerAbsolute path traversal vulnerability in a certain ActiveX control in the CYFT object in ft60.dll...5.0 Medium
- insane visions onecmsSQL injection vulnerability in userreviews.php in OneCMS 2.4 allows remote attackers to execute...7.5 High
- streamlineMultiple PHP remote file inclusion vulnerabilities in Streamline PHP Media Server 1.0-beta4 allow...6.8 Medium
- derek leung pslashMultiple PHP remote file inclusion vulnerabilities in pSlash 0.70 allow remote attackers to...7.5 High
- phormerMultiple cross-site scripting (XSS) vulnerabilities in index.php in Phormer 3.31 allow remote...4.3 Medium
- phpwebgalleryCross-site scripting (XSS) vulnerability in picture.php in PhpWebGallery 1.7.0, when Comments for...4.3 Medium
- wilson windowware webbatchwebbatch.exe in WebBatch allows remote attackers to obtain sensitive information via the...5.0 Medium
- wilson windowware webbatchCross-site scripting (XSS) vulnerability in WebBatch allows remote attackers to inject arbitrary...4.3 Medium
- Show moreLoading…