2007 CVEs (page 65)
Page 65 of 66 — CVEs published in 2007, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2007-0113 | | 2007-01-09 | Buffer overflow in Packeteer PacketShaper PacketWise 8.x allows remote authenticated users to cause a denial of service (reset or reboot) via (1) a long traffi… | |
CVE-2007-0112 | | 2007-01-09 | SQL injection vulnerability in cats.asp in createauction allows remote attackers to execute arbitrary SQL commands via the catid parameter. | |
CVE-2007-0111 | | 2007-01-09 | Buffer overflow in Resco Photo Viewer for PocketPC 4.11 and 6.01, as used in mobile devices running Windows Mobile 5.0, 2003, and 2003SE, allows remote attacke… | |
CVE-2007-0110 | | 2007-01-09 | Cross-site scripting (XSS) vulnerability in nidp/idff/sso in Novell Access Manager Identity Server before 3.0.0-1013 allows remote attackers to inject arbitrar… | |
CVE-2007-0109 | | 2007-01-09 | wp-login.php in WordPress 2.0.5 and earlier displays different error messages if a user exists or not, which allows remote attackers to obtain sensitive inform… | |
CVE-2007-0108 | | 2007-01-09 | nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/2003 does not delete user profiles during a Terminal Service or Citrix session, which allows remote au… | |
CVE-2007-0107 | | 2007-01-09 | WordPress before 2.0.6, when mbstring is enabled for PHP, decodes alternate character sets after escaping the SQL query, which allows remote attackers to bypas… | |
CVE-2007-0106 | | 2007-01-09 | Cross-site scripting (XSS) vulnerability in the CSRF protection scheme in WordPress before 2.0.6 allows remote attackers to inject arbitrary web script or HTML… | |
CVE-2007-0105 | | 2007-01-09 | Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engine before 4.1 allows… | |
CVE-2007-0104 | | 2007-01-09 | The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows r… | |
CVE-2007-0103 | | 2007-01-09 | The Adobe PDF specification 1.3, as implemented by Adobe Acrobat before 8.0.0, allows remote attackers to have an unknown impact, possibly including denial of… | |
CVE-2007-0102 | | 2007-01-09 | The Adobe PDF specification 1.3, as implemented by Apple Mac OS X Preview, allows remote attackers to have an unknown impact, possibly including denial of serv… | |
CVE-2007-0101 | | 2007-01-08 | Cross-site request forgery (CSRF) vulnerability in SPINE allows remote attackers to perform unauthorized actions as administrators via unspecified vectors. NO… | |
CVE-2007-0100 | | 2007-01-08 | The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows remote attackers to overwrite… | |
CVE-2007-0099 | | 2007-01-08 | Race condition in the msxml3 module in Microsoft XML Core Services 3.0, as used in Internet Explorer 6 and other applications, allows remote attackers to execu… | |
CVE-2007-0098 | | 2007-01-05 | Directory traversal vulnerability in language.php in VerliAdmin 0.3 and earlier, when magic_quotes_gpc is disabled, allows remote attackers to include and exec… | |
CVE-2007-0097 | | 2007-01-05 | Multiple stack-based buffer overflows in the (1) LoadTree and (2) ReadHeader functions in PAISO.DLL 1.7.3.0 (1.7.3 beta) in ConeXware PowerArchiver 2006 9.64.0… | |
CVE-2007-0096 | | 2007-01-05 | CarbonCommunities stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database contai… | |
CVE-2007-0095 | | 2007-01-05 | phpMyAdmin 2.9.1.1 allows remote attackers to obtain sensitive information via a direct request for themes/darkblue_orange/layout.inc.php, which reveals the pa… | |
CVE-2007-0094 | | 2007-01-05 | Sven Moderow GuestBook 0.3a stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a datab… | |
CVE-2007-0093 | | 2007-01-05 | SQL injection vulnerability in page.php in Simple Web Content Management System allows remote attackers to execute arbitrary SQL commands via the id parameter. | |
CVE-2007-0092 | | 2007-01-05 | SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL commands via the product_id parameter. | |
CVE-2007-0091 | | 2007-01-05 | newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing p… | |
CVE-2007-0090 | | 2007-01-05 | WineGlass stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing pas… | |
CVE-2007-0089 | | 2007-01-05 | jgbbs stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing passwor… | |
CVE-2007-0088 | | 2007-01-05 | Multiple directory traversal vulnerabilities in openmedia allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) src parameter to page.ph… | |
CVE-2007-0087 | | 2007-01-05 | Microsoft Internet Information Services (IIS), when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of se… | |
CVE-2007-0086 | | 2007-01-05 | The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service (network bandwidt… | |
CVE-2007-0085 | | 2007-01-05 | Unspecified vulnerability in sys/dev/pci/vga_pci.c in the VGA graphics driver for wscons in OpenBSD 3.9 and 4.0, when the kernel is compiled with the PCIAGP op… | |
CVE-2007-0084 | | 2007-01-05 | Buffer overflow in the Windows NT Message Compiler (MC) 1.00.5239 on Microsoft Windows XP allows local users to gain privileges via a long MC-filename. NOTE… | |
CVE-2007-0083 | | 2007-01-05 | Cross-site scripting (XSS) vulnerability in Nuked Klan 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in… | |
CVE-2007-0082 | | 2007-01-05 | users_adm/start1.php in IMGallery 2.5 and earlier does not properly handle files with multiple extensions, which allows remote authenticated users to upload an… | |
CVE-2007-0081 | | 2007-01-05 | Sunbelt Kerio Personal Firewall (SKPF) 4.3.268 and 4.3.246, and possibly other versions allows local users to provide a Trojan horse iphlpapi.dll to SKPF by pl… | |
CVE-2007-0080 | | 2007-01-05 | Buffer overflow in the SMB_Connect_Server function in FreeRadius 1.1.3 and earlier allows attackers to execute arbitrary code related to the server desthost fi… | |
CVE-2007-0079 | | 2007-01-05 | rblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct reque… | |
CVE-2007-0078 | | 2007-01-05 | BattleBlog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct… | |
CVE-2007-0077 | | 2007-01-05 | lblog stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct reque… | |
CVE-2007-0076 | | 2007-01-05 | Openforum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing use… | |
CVE-2007-0075 | | 2007-01-05 | AspBB stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing user pa… | |
CVE-2007-0059 | | 2007-01-05 | Cross-zone scripting vulnerability in Apple Quicktime 3 to 7.1.3 allows remote user-assisted attackers to execute arbitrary code and list filesystem contents v… | |
CVE-2007-0058 | | 2007-01-04 | Cisco Clean Access (CCA) 3.5.x through 3.5.9 and 3.6.x through 3.6.1.1 on the Clean Access Manager (CAM) allows remote attackers to bypass authentication and d… | |
CVE-2007-0057 | | 2007-01-04 | Cisco Clean Access (CCA) 3.6.x through 3.6.4.2 and 4.0.x through 4.0.3.2 does not properly configure or allow modification of a shared secret authentication ke… | |
CVE-2007-0056 | | 2007-01-04 | Multiple cross-site scripting (XSS) vulnerabilities in AShop Deluxe 4.5 and AShop Administration Panel allow remote attackers to inject arbitrary web script or… | |
CVE-2007-0055 | | 2007-01-04 | Directory traversal vulnerability in formbankcgi.exe/AbfrageForm in Formbankserver 1.9 allows remote attackers to read arbitrary files via directory traversal… | |
CVE-2007-0054 | | 2007-01-04 | Cross-site scripting (XSS) vulnerability in gbrowse.php in Belchior Foundry vCard PRO allows remote attackers to inject arbitrary web script or HTML via the so… | |
CVE-2007-0053 | | 2007-01-04 | SQL injection vulnerability in detail.asp in ASP SiteWare autoDealer 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the iPro par… | |
CVE-2007-0052 | | 2007-01-04 | SQL injection vulnerability in haberdetay.asp in Vizayn Haber allows remote attackers to execute arbitrary SQL commands via the id parameter. | |
CVE-2007-0051 | | 2007-01-04 | Format string vulnerability in Apple iPhoto 6.0.5 (316), and other versions before 6.0.6, allows remote user-assisted attackers to execute arbitrary code via a… | |
CVE-2007-0050 | | 2007-01-04 | PHP remote file inclusion vulnerability in index.php in OpenPinboard 2.0 allows remote attackers to execute arbitrary PHP code via a URL in the language parame… | |
CVE-2007-0049 | | 2007-01-04 | Geckovich TaskTracker Pro 1.5 and earlier allows remote attackers to add administrative or other accounts via an Add action with a modified GroupID in a direct… | |
CVE-2007-0048 | | 2007-01-03 | Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when us… | |
CVE-2007-0047 | | 2007-01-03 | CRLF injection vulnerability in Adobe Acrobat Reader Plugin before 8.0.0, when used with the Microsoft.XMLHTTP ActiveX object in Internet Explorer, allows remo… | |
CVE-2007-0046 | | 2007-01-03 | Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to execute arbitrary cod… | |
CVE-2007-0045 | | 2007-01-03 | Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x befo… | |
CVE-2007-0044 | | 2007-01-03 | Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the browser to make unauth… | |
CVE-2007-0017 | | 2007-01-03 | Multiple format string vulnerabilities in (1) the cdio_log_handler function in modules/access/cdda/access.c in the CDDA (libcdda_plugin) plugin, and the (2) cd… | |
CVE-2007-0016 | | 2007-01-03 | Stack-based buffer overflow in MoviePlay 4.76 allows remote attackers to execute arbitrary code via a long filename in a LST file. | |
CVE-2007-0015 | | 2007-01-01 | Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a long rtsp:// URI. |