cve.nowby Sazabi

CVEs published February 23, 2007

28 CVEs were published on February 23, 2007: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 28
Critical: 0
High: 0
Medium: 1
Low: 0
Unrated: 27
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 28

CVE-2007-1086Unspecified binaries in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allow local users to create or modify arbitrary files…UnratedFeb 23, 2007
CVE-2007-1087IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to…UnratedFeb 23, 2007
CVE-2007-1088Stack-based buffer overflow in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allows local users to execute arbitrary code via…UnratedFeb 23, 2007
CVE-2007-1089IBM DB2 Universal Database (UDB) 9.1 GA through 9.1 FP1 allows local users with table SELECT privileges to perform unauthorized UPDATE and…UnratedFeb 23, 2007
CVE-2006-5877The enigmail extension before 0.94.2 does not properly handle large, encrypted file e-mail attachments, which allows remote attackers to…UnratedFeb 23, 2007
CVE-2006-7025SQL injection vulnerability in admin/config.php in Bookmark4U 2.0 and 2.1 allows remote attackers to inject arbitrary SQL command via the…UnratedFeb 23, 2007
CVE-2006-7026PHP remote file inclusion vulnerability in sources/join.php in Aardvark Topsites PHP 4.2.2 and earlier, when register_globals is enabled…UnratedFeb 23, 2007
CVE-2006-7027Microsoft Internet Security and Acceleration (ISA) Server 2004 logs unusual ASCII characters in the Host header, including the tab, which…UnratedFeb 23, 2007
CVE-2006-7028Single CPU Sun systems running Solaris 7, 8, or 9, such as Netra, allows remote attackers to cause a denial of service (console hang) via…UnratedFeb 23, 2007
CVE-2006-7029Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a frameset with only one…UnratedFeb 23, 2007
CVE-2006-7030Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via certain malformed HTML…UnratedFeb 23, 2007
CVE-2006-7031Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a table element with…Medium · 6.5Feb 23, 2007
CVE-2006-7032PHP remote file inclusion vulnerability in phpbb/getmsg.php in FlashBB 1.1.5 and earlier allows remote attackers to execute arbitrary code…UnratedFeb 23, 2007
CVE-2006-7033Cross-site scripting (XSS) vulnerability in Super Link Exchange Script 1.0 allows remote attackers to inject arbitrary web script or HTML…UnratedFeb 23, 2007
CVE-2006-7034SQL injection vulnerability in directory.php in Super Link Exchange Script 1.0 might allow remote attackers to execute arbitrary SQL…UnratedFeb 23, 2007
CVE-2006-7035Directory traversal vulnerability in make_thumbnail.php in Super Link Exchange Script 1.0 allows remote attackers to read arbitrary files…UnratedFeb 23, 2007
CVE-2006-7036PHP remote file inclusion vulnerability in register.php for Andys Chat 4.5 allows remote attackers to execute arbitrary code via the…UnratedFeb 23, 2007
CVE-2006-7037Mathcad 12 through 13.1 allows local users to bypass the security features by directly accessing or editing the XML representation of the…UnratedFeb 23, 2007
CVE-2006-7038Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service (crash) via…UnratedFeb 23, 2007
CVE-2006-7039The IMAP4 service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service (crash) via a…UnratedFeb 23, 2007
CVE-2006-7040Unspecified vulnerability in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service (crash) via…UnratedFeb 23, 2007
CVE-2006-7041The SMTP service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service (infinite loop) via a…UnratedFeb 23, 2007
CVE-2007-0320Multiple buffer overflows in (a) an ActiveX control (iftw.dll) and (b) Netscape plug-in (npiftw32.dll) for Macrovision (formerly…UnratedFeb 23, 2007
CVE-2007-0321Buffer overflow in the Update Service Agent ActiveX Control in isusweb.dll for Macrovision FLEXnet Connect (formerly InstallShield Update…UnratedFeb 23, 2007
CVE-2007-1085Cross-site scripting (XSS) vulnerability in Google Desktop allows remote attackers to bypass protection schemes and inject arbitrary web…UnratedFeb 23, 2007

Show all 28 entriesShow fewer entries