CVEs published in December 2007
434 vulnerabilities, 71 critical, 0 exploited.
- roundcube webmailCross-site scripting (XSS) vulnerability in RoundCube webmail 0.1rc2, 2007-12-09, and earlier...4.3 Medium
- drupal feature moduleFeature 4.7.x-dev and 5.x-dev before 20071206, a Drupal module, does not follow Drupal's Forms...4.3 Medium
- clam anti-virus clamavUnspecified vulnerability in the bzip2 decompression algorithm in nsis/bzlib_private.h in ClamAV...10.0 High
- clam anti-virus clamavOff-by-one error in ClamAV before 0.92 allows remote attackers to execute arbitrary code via a...6.8 Medium
- clam anti-virus clamavInteger overflow in libclamav in ClamAV before 0.92 allows remote attackers to execute arbitrary...7.5 High
- wordpressSQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote...6.8 Medium
- real time logic barracudadrive web server, barracudadrive web server home server +1 moreMultiple directory traversal vulnerabilities in BarracudaDrive Web Server before 3.8 allow (1)...5.5 Medium
- real time logic barracudadrive web server, barracudadrive web server home server +1 moreCross-site scripting (XSS) vulnerability in BarracudaDrive Web Server before 3.8 allows remote...4.3 Medium
- real time logic barracudadrive web server, barracudadrive web server home server +1 moreGroup Chat in BarracudaDrive Web Server before 3.8 allows remote authenticated users to cause a...4.0 Medium
- real time logic barracudadrive web server, barracudadrive web server home server +1 moreBarracudaDrive Web Server before 3.8 allows remote attackers to read the source code for web...5.0 Medium
- microsoft windows vistaUnspecified vulnerability in Server Message Block Version 2 (SMBv2) signing support in Microsoft...10.0 High
- microsoft windows vistaUnspecified vulnerability in the Windows Advanced Local Procedure Call (ALPC) in the kernel in...7.2 High
- microsoft internet explorer, ie +1 moreMicrosoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via ...6.8 Medium
- microsoft ie, internet explorer +1 moreMicrosoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via...6.8 Medium
- microsoft internet explorer, ie +1 moreMicrosoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via...6.8 Medium
- microsoft internet explorer, ie +1 moreUse-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet...9.3 High
- microsoft directxStack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI)...8.5 High
- microsoft directxBuffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote...9.3 High
- microsoft message queuingStack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows...9.0 High
- microsoft windows media format runtime, windows media services +1 moreHeap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and...9.3 High
- websense reporting tools, web security suite, enterpise +2 moreCross-site scripting (XSS) vulnerability in the logon page in Web Reporting Tools portal in...4.3 Medium
- falt4 cms extreme rc4SQL injection vulnerability in (1) index.php, and possibly (2) admin/index.php, in Falt4Extreme...7.5 High
- falt4 cms extreme rc4Multiple cross-site scripting (XSS) vulnerabilities in Falt4Extreme RC4 10.9.2007 allow remote...4.3 Medium
- webspellMultiple cross-site scripting (XSS) vulnerabilities in index.php in webSPELL 4.1.2 allow remote...4.3 Medium
- httploggerCross-site scripting (XSS) vulnerability in HttpLogger 0.8.1 allows remote attackers to inject...4.3 Medium
- jfree jfreechartMultiple cross-site scripting (XSS) vulnerabilities in clickstats.php in wwwstats 3.21 allow...4.3 Medium
- jfree jfreechartMultiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8...4.3 Medium
- s9y serendipityCross-site scripting (XSS) vulnerability in the remote RSS sidebar plugin ...4.3 Medium
- ibm hardware management consoleMultiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 7 R3.2.0 allow...4.6 Medium
- mysqlThe federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4,...5.0 Medium
- mysqlMySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 does not update the...3.5 Low
- novell netmailMultiple heap-based buffer overflows in avirus.exe in Novell NetMail 3.5.2 before Messaging...6.8 Medium
- oracle mysqlMySQL 5.1.x before 5.1.23 and 6.0.x before 6.0.4 allows remote authenticated users to gain...5.8 Medium
- mysql community server, enterprise server, server +2 moreMySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x...7.1 High
- open newsletter newsletterCross-site scripting (XSS) vulnerability in compose.php in OpenNewsletter 2.5 and earlier allows...4.3 Medium
- fusion news newsCross-site request forgery (CSRF) vulnerability in Fusion News 3.9.0 allows remote attackers to...5.0 Medium
- drupalMultiple SQL injection vulnerabilities in Drupal and vbDrupal 4.7.x before 4.7.9 and 5.x before 5...7.5 High
- drupal shoutboxCross-site scripting (XSS) vulnerability in the Shoutbox module for Drupal 5.x before Shoutbox 5...4.3 Medium
- php heaven phpmychatMultiple cross-site scripting (XSS) vulnerabilities in PHPMyChat 0.14.5 allow remote attackers to...4.3 Medium
- phpmychatPHP remote file inclusion vulnerability in users_popupL.php3 in phpMyChat 0.14.5 allows remote...5.0 Medium
- ibm lotus sametimeCross-site scripting (XSS) vulnerability in the WebRunMenuFrame page in the online meeting center...4.3 Medium
- ibm hardware management consoleMultiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 3 R3.7 allow...4.9 Medium
- ibm hardware management consoleMultiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 6 R1.3 allow...10.0 High
- mwopen e-commerceSQL injection vulnerability in leggi_commenti.asp in MWOpen 1.4 and earlier allows remote...7.5 High
- xigla absolute banner manager.netSQL injection vulnerability in abm.aspx in Xigla Absolute Banner Manager .NET 4.0 allows remote...7.5 High
- iptel serwebMultiple directory traversal vulnerabilities in js/get_js.php in SERWeb 2.0.0 dev1 and earlier...5.0 Medium
- iptel serwebMultiple PHP remote file inclusion vulnerabilities in SerWeb 2.0.0 dev1 and earlier allow remote...6.8 Medium
- tecnick.com tcexamMultiple SQL injection vulnerabilities in TCExam before 5.1.000 allow remote attackers to execute...7.5 High
- lxlabs hypervmCross-site scripting (XSS) vulnerability in the login page in Lxlabs HyperVM 2.0 allows remote...4.3 Medium
- sambaStack-based buffer overflow in the send_mailslot function in nmbd in Samba 3.0.0 through 3.0.27a,...9.3 High
- Show moreLoading…