CVEs published in October 2007
543 vulnerabilities, 88 critical, 0 exploited.
- microsoft expression mediaMicrosoft Expression Media stores the catalog password in cleartext in the catalog IVC file,...2.1 Low
- openser** DISPUTED ** OpenSER 1.2.2 does not verify the Digest authentication header URI against the...5.0 Medium
- cisco call managerCisco CallManager 5.1.1.3000-5 does not verify the Digest authentication header URI against the...5.0 Medium
- extremailInteger overflow in eXtremail 2.1.1 and earlier allows remote attackers to cause a denial of...10.0 High
- extremailMultiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an...10.0 High
- mydoop doop cmsDirectory traversal vulnerability in doop CMS 1.3.7 and earlier allows remote attackers to...7.5 High
- lfs live for speedStack-based buffer overflow in Live for Speed 0.5X10 and earlier allows remote authenticated...6.5 Medium
- viart shopideal_process.php in the iDEAL payment module in ViArt Shop 3.3 beta and earlier might allow...5.0 Medium
- sun solarisUnspecified vulnerability in the Sun Solaris RPC services library (librpcsvc) on Solaris 8...7.8 High
- microsoft windows mobileMicrosoft ActiveSync 4.1, as used in Windows Mobile 5.0, uses weak encryption (XOR obfuscation...4.6 Medium
- apache tomcatApache Tomcat Path Traversal Vulnerability3.5 Low
- itirou maruta mouseoverdictionary, mozilla firefox +1 moreCross-site scripting (XSS) vulnerability in the sidebar HTML page in the MouseoverDictionary...4.3 Medium
- alorys-hebergement kwsphp, newsletter module +1 moreSQL injection vulnerability in index.php in the newsletter module 1.0 for KwsPHP, when...6.8 Medium
- joomla, michael dempfle joomla flash uploader +1 moreMultiple PHP remote file inclusion vulnerabilities in Michael Dempfle Joomla Flash Uploader ...6.8 Medium
- microsoft internet explorerMicrosoft Internet Explorer 7 and earlier allows remote attackers to bypass the "File Download -...7.5 High
- wwwisisCross-site scripting (XSS) vulnerability in wxis.exe in WWWISIS 7.1 and earlier allows remote...4.3 Medium
- php file sharing system file sharing systemDirectory traversal vulnerability in index.php in PHP File Sharing System 1.5.1 allows remote...7.5 High
- php-statsMultiple eval injection vulnerabilities in Php-Stats 0.1.9.2 allow remote authenticated...8.5 High
- php-statsMultiple SQL injection vulnerabilities in php-stats.recjs.php in Php-Stats 0.1.9.2 allow remote...10.0 High
- com colorlab colorlab, joomla +1 morePHP remote file inclusion vulnerability in admin.color.php in the com_colorlab (aka com_color) 1...6.8 Medium
- apple safariUnspecified vulnerability in Safari on the Apple iPod touch (aka iTouch) and iPhone 1.1.1 allows...9.3 High
- softbizscripts recipes portal scriptSQL injection vulnerability in searchresult.php in Softbiz Recipes Portal Script allows remote...7.5 High
- madwifiMadwifi 0.9.3.2 and earlier allows remote attackers to cause a denial of service (panic) via a...4.3 Medium
- php, ioncube php encoder +1 moreioncube_loader_win_5.2.dll in the ionCube Loader 6.5 extension for PHP 5.2.4 does not follow...4.3 Medium
- perfection bytes pbemailAbsolute path traversal vulnerability in a certain ActiveX control in PBEmail7Ax.dll in PBEmail 7...6.4 Medium
- db software laboratory vimpxBuffer overflow in the DB Software Laboratory VImpX (VImpAX1) ActiveX control in VImpX.ocx 4.7.3...6.8 Medium
- cmsmadesimple cms made simpleCMS Made Simple 1.1.3.1 allows remote attackers to obtain the full path via a direct request for...5.0 Medium
- cmsmadesimple cms made simpleMultiple cross-site scripting (XSS) vulnerabilities in CMS Made Simple 1.1.3.1 allow remote...4.3 Medium
- cmsmadesimple cms made simpleCMS Made Simple 1.1.3.1 does not check the permissions assigned to users who attempt uploads,...3.5 Low
- cmsmadesimple cms made simpleCMS Made Simple 1.1.3.1 does not check the permissions assigned to users in some situations,...6.5 Medium
- opensusehugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local...3.3 Low
- suse linuxUnspecified vulnerability in the SSL implementation in Groupwise client system in the novell...7.5 High
- suse linuxUnspecified vulnerability in the SSL implementation in Groupwise client system in the novell...6.8 Medium
- crs manager manager** DISPUTED ** Multiple PHP remote file inclusion vulnerabilities in CRS Manager allow remote...7.5 High
- broadcom etrust integrated threat managementCA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 stores sensitive user...5.0 Medium
- vmware ace, player, server +1 more +3 moreUnspecified vulnerability in a certain ActiveX control in Reconfig.DLL in VMware Workstation 5.5...1.9 Low
- broadcom etrust integrated threat managementThe web console in CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 allows...5.8 Medium
- gdata antivirusBuffer overflow in a certain ActiveX control in ScanObjectBrowser.DLL in G DATA Antivirus 2007...7.6 High
- broadcom erwin process modelerUnspecified vulnerability in CA ERwin Process Modeler (formerly AllFusion Process Modeler) 7.2...4.3 Medium
- opensslOff-by-one error in the DTLS implementation in OpenSSL 0.9.8 before 0.9.8f allows remote...9.3 High
- broadcom brightstor arcserve backup, brightstor enterprise backup +1 moreMultiple unspecified vulnerabilities in (1) mediasvr and (2) caloggerd in CA BrightStor ARCServe...10.0 High
- broadcom brightstor arcserve backup, brightstor enterprise backup, business protection suite +1 more +3 moreQueue.dll for the message queuing service (LQserver.exe) in CA BrightStor ARCServe BackUp v9.01...10.0 High
- broadcom brightstor arcserve backup, brightstor enterprise backup +1 moreThe cadbd RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and Enterprise Backup...10.0 High
- broadcom brightstor arcserve backup, brightstor enterprise backup, business protection suite +1 more +3 moreUnspecified vulnerability in dbasvr in CA BrightStor ARCServe BackUp v9.01 through R11.5, and...10.0 High
- broadcom brightstor arcserve backup, brightstor enterprise backup +1 moreThe Message Engine RPC service in CA BrightStor ARCServe BackUp v9.01 through R11.5, and...10.0 High
- broadcom brightstor arcserve backup, brightstor enterprise backup +1 moreStack-based buffer overflow in the RPC interface for the Message Engine (mediasvr.exe) in CA...10.0 High
- broadcom brightstor arcserve backup, brightstor enterprise backup, business protection suite +1 more +3 moreMultiple buffer overflows in (1) RPC and (2) rpcx.dll in CA BrightStor ARCServe BackUp v9.01...10.0 High
- broadcom brightstor arcserve backup, brightstor enterprise backup +1 moreMultiple buffer overflows in (1) the Message Engine and (2) AScore.dll in CA BrightStor ARCServe...10.0 High
- hp linux imaging and printing projecthpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10...7.6 High
- pro.setun pro-searchCross-site scripting (XSS) vulnerability in PRO-search 0.17.1 and earlier allows remote attackers...4.3 Medium
- Show moreLoading…