CVEs published January 29, 2007
36 CVEs were published on January 29, 2007: 0 critical, 0 high.
- Published
- 36
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 36
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 36
- CVE-2007-0557rMake before 1.0.4 drops root privileges in a way that retains the original supplemental groups, which might allow attackers to gain privile
- CVE-2007-0347The is_eow function in format.c in CVSTrac before 2.0.1 does not properly check for the "'" (quote) character, which allows remote authentic
- CVE-2006-6965CRLF injection vulnerability in lib/exe/fetch.php in DokuWiki 2006-03-09e, and possibly earlier, allows remote attackers to inject arbitrary
- CVE-2007-0538Telligent Community Server 2.1 and earlier allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingba
- CVE-2007-0539The wp_remote_fopen function in WordPress before 2.1 allows remote attackers to cause a denial of service (bandwidth or thread consumption)
- CVE-2007-0540WordPress allows remote attackers to cause a denial of service (bandwidth or thread consumption) via pingback service calls with a source UR
- CVE-2007-0541WordPress allows remote attackers to determine the existence of arbitrary files, and possibly read portions of certain files, via pingback s
- CVE-2007-0542Cross-site scripting (XSS) vulnerability in show.php in 212cafe Guestbook 4.00 beta allows remote attackers to inject arbitrary web script o
- CVE-2007-0543ZixForum 1.14 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to
- CVE-2007-0544Cross-site scripting (XSS) vulnerability in private.php in MyBB (aka MyBulletinBoard) allows remote authenticated users to inject arbitrary
- CVE-2007-0545Maxtricity Tagger 0.1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to dow
- CVE-2007-0546Toxiclab Shoutbox 1 stores sensitive information under the web root with insufficient access control, which allows remote attackers to downl
- CVE-2007-0547Cross-site scripting (XSS) vulnerability in CGI-RESCUE WebFORM 4.3 and earlier allows remote attackers to inject arbitrary web script or HTM
- CVE-2007-0548KarjaSoft Sami HTTP Server 2.0.1 allows remote attackers to cause a denial of service (daemon hang) via a large number of requests for nonex
- CVE-2007-0549Cross-site scripting (XSS) vulnerability in list3.php in 212cafeBoard 6.30 Beta allows remote attackers to inject arbitrary web script or HT
- CVE-2007-0550Cross-site scripting (XSS) vulnerability in search.php in 212cafeBoard 0.08 Beta allows remote attackers to inject arbitrary web script or H
- CVE-2007-0551Multiple PHP remote file inclusion vulnerabilities in cmsimple/cms.php in CMSimple 2.7 allow remote attackers to execute arbitrary PHP code
- CVE-2007-0552Cross-site scripting (XSS) vulnerability in install/default/error404.html in Oh no! Not another CMS (Onnac) 0.0.8.4 and earlier allows remot
- CVE-2007-0553Multiple cross-site scripting (XSS) vulnerabilities in index.inc.php in PHProxy before 0.5 beta 2 allow remote attackers to inject arbitrary
- CVE-2007-0554SQL injection vulnerability in print.asp in Guo Xu Guos Posting System (GPS) 1.2 allows remote attackers to execute arbitrary SQL commands v
- CVE-2004-2676The Spy Sweeper Enterprise Client (SpySweeperTray.exe) in WebRoot Spy Sweeper before 2.0 does not drop privileges when using the help functi
- CVE-2005-4825Cisco Clean Access 3.5.5 and earlier on the Secure Smart Manager allows remote attackers to bypass authentication and cause a denial of serv
- CVE-2006-6953The virtual keyboard implementation in GlobeTrotter Mobility Manager changes the color of a key as it is pressed, which allows local users t
- CVE-2006-6954Flock beta 1 0.7 allows remote attackers to cause a denial of service (application crash) via a web page that contains a large number of nes
- CVE-2006-6955Opera allows remote attackers to cause a denial of service (application crash) via a web page that contains a large number of nested marquee
- CVE-2006-6956Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via a web page that contains a large number of nest
- CVE-2006-6957PHP remote file inclusion vulnerability in addons/mod_media/body.php in Docebo 3.0.3 and earlier, when register_globals is enabled, allows r
- CVE-2006-6958Multiple PHP remote file inclusion vulnerabilities in phpBlueDragon 2.9.1 allow remote attackers to execute arbitrary PHP code via a URL in
- CVE-2006-6959WebRoot Spy Sweeper 4.5.9 and earlier allows local users to bypass the "Startup-Shield" security restrictions by modifying certain registry
- CVE-2006-6960The Compression Sweep feature in WebRoot Spy Sweeper 4.5.9 and earlier does not handle non-ZIP archives, which allows remote attackers to by
- CVE-2006-6961WebRoot Spy Sweeper 4.5.9 and earlier does not detect malware based on file contents, which allows remote attackers to bypass malware detect
- CVE-2006-6962PHP remote file inclusion vulnerability in rsgallery2.html.php in the RS Gallery2 component (com_rsgallery2) 1.11.2 for Joomla! allows attac
- CVE-2006-6963Multiple PHP remote file inclusion vulnerabilities in Docebo LMS 3.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the
- CVE-2006-6964MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote
- CVE-2007-0463Format string vulnerability in Apple Software Update 2.0.5 on Mac OS X 10.4.8 allows remote attackers to cause a denial of service (applicat
- CVE-2007-0537The KDE HTML library (kdelibs), as used by Konqueror 3.5.5, does not properly parse HTML comments, which allows remote attackers to conduct