CVEs published in October 2007
543 vulnerabilities, 88 critical, 0 exploited.
- simple machines forumSQL injection vulnerability in Sources/Search.php in Simple Machines Forum (SMF) 1.1.3, when...6.8 Medium
- lussumo vanillaLussumo Vanilla 1.1.3 and earlier does not require admin privileges for (1) ajax/sortcategories...7.5 High
- lussumo vanillaMultiple SQL injection vulnerabilities in Lussumo Vanilla 1.1.3 and earlier allow remote...7.5 High
- phppm php project managementMultiple directory traversal vulnerabilities in PHP Project Management 0.8.10 and earlier allow...6.8 Medium
- phppm php project managementMultiple PHP remote file inclusion vulnerabilities in PHP Project Management 0.8.10 and earlier...6.8 Medium
- nortel business communications manager, centrex ip client manager, centrex ip element manager +6 more +8 moreThe Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP...7.1 High
- nortel ip softphone 2050, mobile voice client 2050 +1 moreThe Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice...7.1 High
- nortel business communications manager, centrex ip client manager, centrex ip element manager +6 more +8 moreThe Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP...4.3 Medium
- nortel business communications manager, centrex ip client manager, centrex ip element manager +6 more +8 moreThe Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and additional Nortel products from the IP...4.3 Medium
- nortel ip softphone 2050Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial...7.5 High
- sitracker support incident trackerMultiple unspecified vulnerabilities in Salford Software Support Incident Tracker (SiT!) before 3...10.0 High
- almico speedfanSpeedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64...4.9 Medium
- almico speedfanSpeedfan.sys in Alfredo Milani Comparetti SpeedFan 4.33, when used on Microsoft Windows Vista x64...7.2 High
- sun solarisMultiple unspecified vulnerabilities in the kernel in Sun Solaris 8 through 10 allow local users...4.9 Medium
- peopleaggregatorMultiple PHP remote file inclusion vulnerabilities in PeopleAggregator 1.2pre6, when...6.8 Medium
- bbsprocess bbportalsSQL injection vulnerability in tnews.php in BBsProcesS BBPortalS 1.5.10 through 2.0 allows remote...7.5 High
- candypress storeCross-site scripting (XSS) vulnerability in admin/logon.asp in ShoppingTree CandyPress Store 4.1...4.3 Medium
- towelsPHP remote file inclusion vulnerability in src/scripture.php in The Online Web Library Site ...6.8 Medium
- socketmailPHP remote file inclusion vulnerability in content/fnc-readmail3.php in SocketMail 2.2.8 allows...6.8 Medium
- baculamake_catalog_backup in Bacula 2.2.5, and probably earlier, sends a MySQL password as a command...5.5 Medium
- simongibson asp site search searchsimon liteCross-site scripting (XSS) vulnerability in filename.asp in ASP Site Search SearchSimon Lite 1.0...4.3 Medium
- nagiosCross-site scripting (XSS) vulnerability in Nagios 2.x before 2.10 allows remote attackers to...4.3 Medium
- nagios pluginsBuffer overflow in the check_snmp function in Nagios Plugins (nagios-plugins) 1.4.10 allows...5.0 Medium
- redhat enterprise linuxUnspecified vulnerability in the "stack unwinder fixes" in kernel in Red Hat Enterprise Linux 5,...4.7 Medium
- linux kernelThe eHCA driver in Linux kernel 2.6 before 2.6.22, when running on PowerPC, does not properly map...1.9 Low
- drupal, drupal fullname field for cck, token module +7 more +9 moreMultiple cross-site scripting (XSS) vulnerabilities in the Token module before 4.7.x-1.5, and 5.x...3.5 Low
- zehnet zz flashchatDirectory traversal vulnerability in admin/inc/help.php in ZZ:FlashChat 3.1 and earlier allows...7.5 High
- broadcom host-based intrusion prevention systemCross-site scripting (XSS) vulnerability in the Server component in CA Host-Based Intrusion...4.3 Medium
- alcatel-lucent omnivistaMultiple cross-site scripting (XSS) vulnerabilities in Alcatel OmniVista 4760 R4.2 and earlier...4.3 Medium
- vmware serverUnspecified vulnerability in VMware Server before 1.0.4 causes user passwords to be recorded in...7.2 High
- vmware player, server, workstation +2 moreUnquoted Windows search path vulnerability in the Authorization and other services in VMware...7.2 High
- vmware player, workstation +1 moreUnspecified vulnerability in VMware Player 1.0.x before 1.0.5 and 2.0 before 2.0.1, and...10.0 High
- realnetworks realplayerStack-based buffer overflow in the Database Component in MPAMedia.dll in RealNetworks RealPlayer...9.3 High
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute...9.3 High
- gnome gnome-vfs, mozilla firefox, seamonkey +2 moreMozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with...4.3 Medium
- mozilla firefox, seamonkey +1 moreMozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 can hide the window's titlebar when...4.3 Medium
- artmedic webdesign cmsIncomplete blacklist vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote...6.8 Medium
- awrateMultiple PHP remote file inclusion vulnerabilities in awrate 1.0 allow remote attackers to...6.8 Medium
- web links project linksCross-site scripting (XSS) vulnerability in Weblinks for Drupal 4.7.x before 4.7.x-1.0 and 5.x...4.3 Medium
- drupalThe hook_comments API in Drupal 4.7.x before 4.7.8 and 5.x before 5.3 does not pass publication...4.3 Medium
- drupalThe core Upload module in Drupal 4.7.x before 4.7.8 and 5.x before 5.3 places the .html extension...4.3 Medium
- drupalCRLF injection vulnerability in the drupal_goto function in includes/common.inc Drupal 4.7.x...5.1 Medium
- drupal, fedoraproject fedora +1 moreDrupal 5.x before 5.3 does not apply its Drupal Forms API protection against the user deletion...4.3 Medium
- drupal, fedoraproject fedora +1 moreinstall.php in Drupal 5.x before 5.3, when the configured database server is not reachable,...6.8 Medium
- awzmbMultiple PHP remote file inclusion vulnerabilities in awzMB 4.2 beta 1 and earlier allow remote...6.8 Medium
- nortel voip-core-cs, meridian option 11c, meridian option 51c +2 more +4 moreThe CS1000 signaling server in Nortel Enterprise VoIP-Core-CS 1000M Chassis/Cabinet, Enterprise...7.8 High
- miranda-im mirandaMultiple buffer overflows in Miranda before 0.7.1 allow remote attackers to execute arbitrary...6.8 Medium
- phpmyadminMultiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin before 2.11.1.2 allow remote...4.3 Medium
- mnogosearchCross-site scripting (XSS) vulnerability in mnoGoSearch before 3.2.43 allows remote attackers to...4.3 Medium
- david hansson ruby on railsSession fixation vulnerability in Rails6.8 Medium
- Show moreLoading…