CVEs published in September 2007
435 vulnerabilities, 53 critical, 1 exploited.
- bcoosSQL injection vulnerability in index.php in the Arcade module in bcoos 1.0.10 allows remote...7.5 High
- wordsmithDirectory traversal vulnerability in config.inc.php in Wordsmith 1.0 RC1, when register_globals...6.8 Medium
- wordsmithPHP remote file inclusion vulnerability in config.inc.php in Wordsmith 1.0 RC1, when...6.8 Medium
- furquim chironfsChironFS before 1.0 RC7 sets user/group ownership to the mounter account instead of the creator...7.2 High
- phpbb plusMultiple PHP remote file inclusion vulnerabilities in phpBB Plus 1.53, and 1.53a before 20070922,...6.8 Medium
- david watters helplinkPHP remote file inclusion vulnerability in show.php in David Watters Helplink 0.1.0 allows remote...7.5 High
- dragonfrugal dfd cartMultiple PHP remote file inclusion vulnerabilities in DFD Cart 1.1.4 and earlier, when...6.8 Medium
- online fantasy football league offl** DISPUTED ** PHP remote file inclusion vulnerability in lib/classes/offl_nflteam.php in Online...7.5 High
- guanxicrm business solutionPHP remote file inclusion vulnerability in modules/webmail2/inc/rfc822.php in guanxiCRM Business...7.5 High
- microsoft windows media playerMicrosoft Windows Media Player (WMP) 9 on Windows XP SP2 invokes Internet Explorer to render HTML...7.5 High
- ipswitch imailHeap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through...7.5 High
- linux kernelThe disconnect method in the Philips USB Webcam (pwc) driver in Linux kernel 2.6.x before 2.6.22...4.0 Medium
- multimedia dance music module for phpnukeDirectory traversal vulnerability in index.php in the Dance Music module for phpNuke, when...6.8 Medium
- egroupwareMultiple cross-site scripting (XSS) vulnerabilities in eGroupWare 1.4.001 allow remote attackers...4.3 Medium
- ibm rational clearquestUnspecified vulnerability in IBM Rational ClearQuest (CQ), when a Microsoft SQL Server or an IBM...7.5 High
- sk.logPHP remote file inclusion vulnerability in php-inc/log.inc.php in sk.log 0.5.3 and earlier allows...7.5 High
- sisd freesideCross-site scripting (XSS) vulnerability in search/cust_bill_event.cgi in Freeside 1.7.2 allows...4.3 Medium
- boesch-it simpnewsMultiple cross-site scripting (XSS) vulnerabilities in SimpNews 2.41.03 allow remote attackers to...4.3 Medium
- linux kernelThe ATM module in the Linux kernel before 2.4.35.3, when CLIP support is enabled, allows local...4.9 Medium
- kaspersky lab anti-virus, internet security +1 moreKaspersky Anti-Virus (KAV) and Internet Security 7.0 build 125 do not properly validate certain...2.1 Low
- apache geronimoUnspecified vulnerability in the management EJB (MEJB) in Apache Geronimo before 2.0.2 allows...5.0 Medium
- linux kernelThe snd_mem_proc_read function in sound/core/memalloc.c in the Advanced Linux Sound Architecture ...2.1 Low
- redhat linuxRed Hat Enterprise Linux 4 does not properly compile and link gdm with tcp_wrappers on x86_64...6.0 Medium
- alexander palmo simple php blogMultiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog (SPHPBlog) before 0.5.1,...4.3 Medium
- alexander palmo simple php blogIncomplete blacklist vulnerability in upload_img_cgi.php in Simple PHP Blog before 0.5.1 allows...7.5 High
- quiksoft easymail messageprinter objectHeap-based buffer overflow in the EasyMailMessagePrinter ActiveX control in emprint.DLL 6.0.1.0...10.0 High
- massimo chioni mobile entertainment moduleDirectory traversal vulnerability in data/compatible.php in the Nuke Mobile Entertainment 1 addon...7.5 High
- phpfullannuSQL injection vulnerability in index.php in phpFullAnnu (PFA) 6.0 allows remote attackers to...7.5 High
- imatix xitamiMultiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute...7.5 High
- webminUnspecified vulnerability in Webmin before 1.370 on Windows allows remote authenticated users to...9.0 High
- joomla, webmaster-tips flash slide show +1 morePHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show ...7.5 High
- xunlei web thunderBuffer overflow in a certain ActiveX control in Xunlei Web Thunder 5.6.9.344, possibly the...6.8 Medium
- adam scheinberg flipAdam Scheinberg Flip 3.0 and earlier stores sensitive information under the web root with...5.0 Medium
- adam scheinberg flipaccount.php in Adam Scheinberg Flip 3.0 and earlier allows remote attackers to create...7.5 High
- clansphereSQL injection vulnerability in mods/banners/navlist.php in Clansphere 2007.4 allows remote...7.5 High
- xcmsCross-site request forgery (CSRF) vulnerability in the cpass functionality in an admin action in...4.3 Medium
- greensqlMultiple cross-site scripting (XSS) vulnerabilities in GreenSQL allow remote attackers to inject...4.3 Medium
- barracuda networks spam firewallCross-site scripting (XSS) vulnerability in the Web administration interface in Barracuda Spam...4.3 Medium
- netsupport manager clientNetSupport Manager Client before 10.20.0004 allows remote attackers to bypass the (1) basic and ...10.0 High
- adodb lite lite, cmsmadesimple cms made simple, journalness +3 more +5 moreEval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used...6.8 Medium
- izicontentsMultiple directory traversal vulnerabilities in iziContents 1 RC6 and earlier allow remote...7.5 High
- izicontentsMultiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote...7.5 High
- izicontentsMultiple incomplete blacklist vulnerabilities in iziContents 1 RC6 and earlier allow remote...7.5 High
- imagemagick, canonical ubuntu linux +1 moreSign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context...7.8 High
- imagemagickOff-by-one error in the ReadBlobString function in blob.c in ImageMagick before 6.3.5-9 allows...9.3 High
- imagemagickMultiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to...6.8 Medium
- imagemagickImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a...4.3 Medium
- linux kernelThe IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7,...7.2 High
- itcms vigile cmsMultiple cross-site scripting (XSS) vulnerabilities in index.php in Vigile CMS 1.8 allow remote...4.3 Medium
- phpgedviewMultiple cross-site scripting (XSS) vulnerabilities in PhpGedView 4.1.1 allow remote attackers to...4.3 Medium
- Show moreLoading…