2000

Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffin

cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to read arbitrary files by specifying the fil

cgiproc CGI script in Nortel Contivity HTTP server allows remote attackers to cause a denial of service via a malformed

Visual Casel (Vcasel) does not properly prevent users from executing files, which allows local users to use a relative p

WebSite Pro allows remote attackers to determine the real pathname of webdirectories via a malformed URL request.

Super Mail Transfer Package (SMTP), later called MsgCore, has a memory leak which allows remote attackers to cause a den

Netscape Navigator uses weak encryption for storing a user's Netscape mail password.

Netscape Mail Notification (nsnotify) utility in Netscape Communicator uses IMAP without SSL, even if the user has set a

MySQL allows local users to modify passwords for arbitrary MySQL users via the GRANT privilege.

IIS 4.0 allows a remote attacker to obtain the real pathname of the document root by requesting non-existent files with

CuteFTP uses weak encryption to store password information in its tree.dat file.

IMail IMONITOR status.cgi CGI script allows remote attackers to cause a denial of service with many calls to status.cgi.

Network HotSync program in Handspring Visor does not have authentication, which allows remote attackers to retrieve emai

The Allaire Spectra Configuration Wizard allows remote attackers to cause a denial of service by repeatedly resubmitting

KDE K-Mail allows local users to gain privileges via a symlink attack in temporary user directories.

The Allaire Spectra Webtop allows authenticated users to access other Webtop sections by specifying explicit URLs.

WebTV email client allows remote attackers to force the client to send email without the user's knowledge via HTML.