CVEs published in December 2007
434 vulnerabilities, 71 critical, 0 exploited.
- hp software updateThe HPRulesEngine.ContentCollection.1 ActiveX Control in RulesEngine.dll for HP Software Update 4...9.3 High
- sun solarisSolaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate...3.5 Low
- perforce p4webP4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on Windows, allows remote attackers...7.8 High
- net dns dnsNet/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS,...5.0 Medium
- ingresIngres 2.5 and 2.6 on Windows, as used in multiple CA products and possibly other products,...5.0 Medium
- redhat enterprise linuxThe default configuration for autofs 5 (autofs5) in some Linux distributions, such as Red Hat...6.2 Medium
- hosting controller controllerUnspecified vulnerability in IIS/iibind.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier...5.5 Medium
- hosting controller controllerMultiple unspecified vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow...5.5 Medium
- hosting controller controllerHosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated users to obtain...5.5 Medium
- hosting controller controllerUnspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote...5.5 Medium
- hosting controller controllerUnspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote...4.9 Medium
- hosting controller controllerUnspecified vulnerability in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote...5.5 Medium
- hosting controller controllerMultiple SQL injection vulnerabilities in Hosting Controller 6.1 Hot fix 3.3 and earlier allow...7.5 High
- hosting controller controllerHosting Controller 6.1 Hot fix 3.3 and earlier (1) allows remote attackers to change arbitrary...7.5 High
- hosting controller controllerHosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to register arbitrary...6.8 Medium
- hosting controller controllerinc_newuser.asp in Hosting Controller 6.1 Hot fix 3.3 and earlier allows remote authenticated...6.5 Medium
- hosting controller controllerHosting Controller 6.1 Hot fix 3.3 and earlier allows remote attackers to obtain login access via...10.0 High
- imesh.com imeshThe IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in...10.0 High
- imesh.com imeshThe IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in...7.1 High
- kvaliitti webdoc cmsMultiple SQL injection vulnerabilities in Kvaliitti WebDoc 3.0 CMS allow remote attackers to...10.0 High
- falcon series one cmsCross-site request forgery (CSRF) vulnerability in Falcon Series One CMS 1.4.3 allows remote...4.3 Medium
- falcon series one cmsMultiple cross-site scripting (XSS) vulnerabilities in Falcon Series One CMS 1.4.3 allow remote...7.5 High
- falcon series one cmsMultiple PHP remote file inclusion vulnerabilities in Falcon Series One CMS 1.4.3 allow remote...6.8 Medium
- plain black webguiUnspecified vulnerability in Plain Black WebGUI 7.4.0 through 7.4.17 allows remote authenticated...4.9 Medium
- geek-palace.com lineshoutMultiple cross-site scripting (XSS) vulnerabilities in shout.php (aka the shoutbox) in LineShout...4.3 Medium
- centreonMultiple PHP remote file inclusion vulnerabilities in Centreon 1.4.1 (aka Oreon 1.4) allow remote...7.5 High
- phprpgSQL injection vulnerability in index.php in phpRPG 0.8 allows remote attackers to execute...6.8 Medium
- safenet sentinel keys server, sentinel protection server +1 moreDirectory traversal vulnerability in SafeNet Sentinel Protection Server 7.0.0 through 7.4.0 and...5.0 Medium
- sun ray server softwareUnspecified vulnerability in the Device Manager daemon (utdevmgrd) in Sun Ray Server Software 2.0...7.8 High
- sun ray server softwareUnspecified vulnerability in the Device Manager daemon (utdevmgrd) in Sun Ray Server Software 2.0...6.4 Medium
- sun management\+centerThe Oracle database component in Sun Management Center (Sun MC) 3.6.1, 3.6, and 3.5 Update 1 has...9.4 High
- dokeosUnrestricted file upload vulnerability in the "My productions" component for main/auth/profile...4.9 Medium
- rosoftengineering rosoft media playerStack-based buffer overflow in Rosoft Media Player 4.1.7, 4.1.8, and possibly earlier versions...6.8 Medium
- citrix web interfaceCross-site scripting (XSS) vulnerability in the on-line help feature in Citrix Web Interface 2.0...4.3 Medium
- gf 3xplorer 3xplorerGF-3XPLORER 2.4 allows remote attackers to obtain configuration information via a direct request...5.0 Medium
- gf 3xplorer 3xplorerMultiple directory traversal vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to include...6.4 Medium
- gf 3xplorer 3xplorerMultiple cross-site scripting (XSS) vulnerabilities in GF-3XPLORER 2.4 allow remote attackers to...4.3 Medium
- texas imperial software wftpd pro explorerHeap-based buffer overflow in Texas Imperial Software WFTPD Pro Explorer 1.0 allows remote FTP...5.8 Medium
- phpmyrealtyMultiple SQL injection vulnerabilities in phpMyRealty (PMR) 1.0.9 allow (1) remote attackers to...7.5 High
- asterisk business edition, open source +1 moreAsterisk Open Source 1.2.x before 1.2.26 and 1.4.x before 1.4.16, and Business Edition B.x.x...4.3 Medium
- libexifInteger overflow in libexif 0.6.16 and earlier allows context-dependent attackers to execute...6.8 Medium
- libexif project libexiflibexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service ...4.3 Medium
- cisco firewall services moduleUnspecified vulnerability in Cisco Firewall Services Module (FWSM) 3.2(3) allows remote attackers...7.8 High
- exiv2, canonical ubuntu linux, debian linux +2 moreInteger overflow in exif.cpp in exiv2 library allows context-dependent attackers to execute...7.5 High
- adobe flash playerAdobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0, when running...4.4 Medium
- adobe flash playerAdobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 allows remote...5.8 Medium
- adobe flash playerMultiple cross-site scripting (XSS) vulnerabilities in Adobe Flash Player 9.x up to 9.0.48.0 and...4.3 Medium
- adobe flash playerAdobe Flash Player 9.x up to 9.0.48.0, 8.x up to 8.0.35.0, and 7.x up to 7.0.70.0 does not...9.3 High
- adobe flash playerUnspecified vulnerability in Adobe Flash Player 9.0.48.0 and earlier might allow remote attackers...6.8 Medium
- phpayIncomplete blacklist vulnerability in main.php in phPay 2.02.01 on Windows allows remote...5.8 Medium
- Show moreLoading…