CVEs published in October 2007
543 vulnerabilities, 88 critical, 0 exploited.
- siteupMultiple cross-site scripting (XSS) vulnerabilities in index.cgi in Site-Up 2.64 and earlier...4.3 Medium
- scottmanktelow stride cmsStride 1.0 has a default administrator username of "scott" with the password "running", which...7.5 High
- javaatwork myftpuploader module, scottmanktelow stride +1 moreinclude/imageupload.js in the MyFTPUploader module in Stride 1.0 contains sensitive information...7.8 High
- scottmanktelow stride cmsMultiple SQL injection vulnerabilities in Stride 1.0 allow remote attackers to execute arbitrary...7.5 High
- nucleus cms cmsCross-site scripting (XSS) vulnerability in index.php in Nucleus 3.01 allows remote attackers to...4.3 Medium
- umi-cms umi cmsCross-site scripting (XSS) vulnerability in UMI CMS allows remote attackers to inject arbitrary...4.3 Medium
- joomla, joomla com search component +1 moreCross-site scripting (XSS) vulnerability in the com_search component in Joomla! 1.0.13 and...4.3 Medium
- interspire activekb nxMultiple cross-site scripting (XSS) vulnerabilities in ActiveKB NX 2.5.4 allow remote attackers...4.3 Medium
- interspire activekbSQL injection vulnerability in admin/index.php in Interspire ActiveKB 1.5 allows remote attackers...6.4 Medium
- phpThe disable_functions feature in PHP 4 and 5 allows attackers to bypass intended restrictions by...7.5 High
- tiki tikiwiki cms\/groupwaretiki-graph_formula.php in TikiWiki 1.9.8 allows remote attackers to execute arbitrary code via...7.5 High
- digium asteriskMultiple buffer overflows in the voicemail functionality in Asterisk 1.4.x before 1.4.13, when...6.8 Medium
- sun sunosUnspecified vulnerability in "Solaris Auditing" in the Basic Security Module (BSM) in Sun Solaris...4.9 Medium
- 3com 3crwe554g72tThe 3Com 3CRWER100-75 router with 1.2.10ww software, when remote management is disabled but a web...2.6 Low
- 3com 3crwe554g72tThe 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server,...10.0 High
- care2x 2gMultiple PHP remote file inclusion vulnerabilities in CARE2X 2G 2.2 allow remote attackers to...7.5 High
- boastmachineDirectory traversal vulnerability in index.php in boastMachine (aka bMachine) 2.8 allows remote...5.0 Medium
- drupalDrupal 5.2 and earlier does not properly unset variables when the input data includes a numeric...6.8 Medium
- mozilla firefoxCross-site scripting (XSS) vulnerability in Mozilla Firefox 2.0, when UTF-7 document content is...4.3 Medium
- mozilla firefoxCross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0, when UTF-7 document...2.6 Low
- flac libflac, nullsoft winamp +1 moreMultiple integer overflows in Free Lossless Audio Codec (FLAC) libFLAC before 1.2.1, as used in...9.3 High
- kaspersky lab online scannerMultiple format string vulnerabilities in the kavwebscan.CKAVWebScan ActiveX control (kavwebscan...9.3 High
- quoc-huy mp3 allopassMultiple PHP remote file inclusion vulnerabilities in the Quoc-Huy MP3 Allopass (com_mp3_allopass...6.8 Medium
- linksys spa941Cross-site scripting (XSS) vulnerability in the Linksys SPA941 VoIP Phone with firmware 5.1.8...4.3 Medium
- joomla, webmaster-tips flash rss reader +1 morePHP remote file inclusion vulnerability in admin.wmtrssreader.php in the webmaster-tips.net Flash...6.8 Medium
- nuhit nuseo php enterprisePHP remote file inclusion vulnerability in admin/nuseo_admin_d.php in NuSEO PHP Enterprise 1.6 ...6.8 Medium
- cplinks cpdynalinksSQL injection vulnerability in category.php in cpDynaLinks 1.02 allows remote attackers to...6.8 Medium
- joomlaequipment jcontentsubscriptionMultiple PHP remote file inclusion vulnerabilities in the JContentSubscription (com_jcs) 1.5.8...6.8 Medium
- hp select identityUnspecified vulnerability in HP Select Identity 4.01 through 4.01.010 and 4.10 through 4.13.001...10.0 High
- picoflat cms cmsPHP remote file inclusion vulnerability in index.php in PicoFlat CMS 0.4.14 and earlier allows...6.8 Medium
- joomla, swmenupro swmenufree +1 more** DISPUTED ** PHP remote file inclusion vulnerability in preview.php in the swMenuFree ...6.8 Medium
- webdesktopMultiple PHP remote file inclusion vulnerabilities in WebDesktop 0.1 allow remote attackers to...6.8 Medium
- pindoramaPHP remote file inclusion vulnerability in active/components/xmlrpc/client.php in Pindorama 0.1...6.8 Medium
- phpmyadminCross-site scripting (XSS) vulnerability in scripts/setup.php in phpMyAdmin 2.11.1, when accessed...4.3 Medium
- alcatel speedtouch 7g router, bt home hub +1 moreMultiple cross-site scripting (XSS) vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router,...4.3 Medium
- alcatel speedtouch 7g router, bt home hub +1 moreMultiple cross-site request forgery (CSRF) vulnerabilities in the Thomson/Alcatel SpeedTouch 7G...4.3 Medium
- alcatel speedtouch 7g router, bt home hub +1 moreThe Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allows...10.0 High
- cisco wireless control system, wireless lan solution engine +1 moreThe conversion utility for converting CiscoWorks Wireless LAN Solution Engine (WLSE) 4.1.91.0 and...10.0 High
- cisco iosStack-based buffer overflow in the Line Printer Daemon (LPD) in Cisco IOS before 12.2(18)SXF11,...9.3 High
- tcl tk tk toolkitBuffer overflow in the FileReadGIF function in tkImgGIF.c for Tk Toolkit 8.4.12 and earlier, and...4.3 Medium
- gnu trampThe (1) tramp-make-temp-file and (2) tramp-make-tramp-temp-file functions in Tramp 2.1.10...6.9 Medium
- sun java virtual machineInterpretation conflict in the Sun Java Virtual Machine (JVM) allows user-assisted remote...2.6 Low
- lightblogcp_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when...6.5 Medium
- ldapscriptsldapscripts 1.4 and 1.7 sends a password as a command line argument when calling some LDAP...2.1 Low
- dws systems inc. sql-ledger, ledgersmb +1 moreMultiple SQL injection vulnerabilities in (a) LedgerSMB 1.0.0 through 1.2.7 and (b) DWS Systems...10.0 High
- modxcmsMultiple SQL injection vulnerabilities in mutate_content.dynamic.php in MODx 0.9.6 allow remote...6.8 Medium
- netwin dnewswebMultiple cross-site scripting (XSS) vulnerabilities in cgi-bin/dnewsweb.exe in NetWin DNewsWeb ...4.3 Medium
- massive entertainment world in conflictThe GetMagicNumberString function in Massive Entertainment World in Conflict 1.000 and earlier...5.0 Medium
- sun solarisMultiple unspecified vulnerabilities in labeld in Trusted Extensions in Sun Solaris 10 allow...4.9 Medium
- sun solarisUnspecified vulnerability in the Virtual File System (VFS) in Sun Solaris 10 allows local users...4.9 Medium
- Show moreLoading…