cve.nowby Sazabi

CVEs published May 11, 2007

47 CVEs were published on May 11, 2007: 0 critical, 0 high. Browse them by severity, product and exploitation status.

Published: 47
Critical: 0
High: 0
Medium: 0
Low: 0
Unrated: 47
Now in CISA KEV: 0
Fix available: 0

Medium, low and unrated 47

CVE-2007-2624Dynamic variable evaluation vulnerability in shared/config/cp_config.php in All In One Control Panel (AIOCP) before 1.3.016 allows remote…UnratedMay 11, 2007
CVE-2007-2625Cross-site scripting (XSS) vulnerability in shared/code/cp_authorization.php in All In One Control Panel (AIOCP) before 1.3.016 allows…UnratedMay 11, 2007
CVE-2007-2626SQL injection vulnerability in admin.php in SchoolBoard allows remote attackers to execute arbitrary SQL commands via the (1) username and…UnratedMay 11, 2007
CVE-2007-2627Cross-site scripting (XSS) vulnerability in sidebar.php in WordPress, when custom 404 pages that call get_sidebar are used, allows remote…UnratedMay 11, 2007
CVE-2007-2628PHP remote file inclusion vulnerability in include/logout.php in Justin Koivisto SecurityAdmin for PHP (aka PHPSecurityAdmin, PSA) 4.0.2…UnratedMay 11, 2007
CVE-2007-2629Bradford CampusManager Network Control Application Server 3.1(6) allows remote attackers to obtain sensitive information (backup, log, and…UnratedMay 11, 2007
CVE-2007-2630Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as used in…UnratedMay 11, 2007
CVE-2007-2616Stack-based buffer overflow in the SSL version of the NMDMC.EXE service in Novell NetMail 3.52e FTF2 and probably earlier allows remote…UnratedMay 11, 2007
CVE-2007-2617srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when…UnratedMay 11, 2007
CVE-2007-2618CRLF injection vulnerability in index.php in Drake CMS 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP…UnratedMay 11, 2007
CVE-2007-2619Symantec pcAnywhere 11.5.x and 12.0.x retains unencrypted login credentials for the most recent login within process memory, which allows…UnratedMay 11, 2007
CVE-2007-2620PHP remote file inclusion vulnerability in inc/config.inc.php in Jakub Steiner (aka jimmac) original 0.11 allows remote attackers to…UnratedMay 11, 2007
CVE-2007-2621SQL injection vulnerability in event_view.php in Thyme Calendar 1.3 allows remote attackers to execute arbitrary SQL commands via the eid…UnratedMay 11, 2007
CVE-2007-2622Multiple SQL injection vulnerabilities in TaskDriver 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the…UnratedMay 11, 2007
CVE-2007-2623Multiple buffer overflows in RControl.dll in Remote Display Dev kit 1.2.1.0 allow remote attackers to cause a denial of service (Internet…UnratedMay 11, 2007
CVE-2006-3456The Symantec NAVOPTS.DLL ActiveX control (aka Symantec.Norton.AntiVirus.NAVOptions) 12.2.0.13, as used in Norton AntiVirus, Internet…UnratedMay 11, 2007
CVE-2007-2594PHP remote file inclusion vulnerability in inc/articles.inc.php in phpMyPortal 3.0.0 RC3 allows remote attackers to execute arbitrary PHP…UnratedMay 11, 2007
CVE-2007-2595RSAuction 2.73.1.3 allows remote authenticated users to move their own account status from Suspended to Active via a direct request for…UnratedMay 11, 2007
CVE-2007-2596PHP remote file inclusion vulnerability in common/func.php in aForum 1.32 and earlier allows remote attackers to execute arbitrary PHP…UnratedMay 11, 2007
CVE-2007-2597Multiple PHP remote file inclusion vulnerabilities in telltarget CMS 1.3.3 allow remote attackers to execute arbitrary PHP code via a URL…UnratedMay 11, 2007
CVE-2007-2598SQL injection vulnerability in print.php in SimpleNews 1.0.0 FINAL allows remote attackers to execute arbitrary SQL commands via the…UnratedMay 11, 2007
CVE-2007-2599Multiple SQL injection vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers to execute…UnratedMay 11, 2007
CVE-2007-2600Multiple cross-site scripting (XSS) vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers to…UnratedMay 11, 2007
CVE-2007-2601Buffer overflow in a certain ActiveX control in the GDivX Zenith Player AviFixer class in fix.dll 1.0.0.1 allows remote attackers to…UnratedMay 11, 2007
CVE-2007-2602Buffer overflow in MIBEXTRA.EXE in Ipswitch WhatsUp Gold 11 allows attackers to cause a denial of service (application crash) or execute…UnratedMay 11, 2007

Show all 47 entriesShow fewer entries