2007

Multiple PHP file inclusion vulnerabilities in WGS-PPC (aka PPC Search Engine), as distributed with other aliases, allow

SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to

Camouflage 1.2.1 embeds password information in the carrier file, which allows remote attackers to bypass authentication

Unspecified vulnerability in libnsl in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (crash)

Stack-based buffer overflow in the LiveJournal support (hooks/ljhook.cc) in CenterICQ 4.9.11 through 4.21.0, when using

Integer overflow in the Vector Markup Language (VML) implementation (vgx.dll) in Microsoft Internet Explorer 5.01, 6, an

Microsoft Excel 2000, 2002, 2003, Viewer 2003, Office 2004 for Mac, and Office v.X for Mac does not properly handle cert

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to exe

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-assisted remote attackers to exe

Heap-based buffer overflow in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows user-as

Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT r

Buffer overflow in the Advanced Search (Finder.exe) feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assist

Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and v.X for Mac allows remote attackers to execute arbitrary

Array index error in the uri_lookup function in the URI parser for neon 0.26.0 to 0.26.2, possibly only on 64-bit platfo

SQL injection vulnerability in down.asp in Kolayindir Download (Yenionline) allows remote attackers to execute arbitrary

SQL injection vulnerability in orange.asp in ShopStoreNow E-commerce Shopping Cart allows remote attackers to execute ar

PHP remote file inclusion vulnerability in bn_smrep1.php in BinGoPHP News (BP News) 3.01 allows remote attackers to exec

EMembersPro 1.0 stores sensitive information under the web root with insufficient access control, which allows remote at

Multiple PHP remote file inclusion vulnerabilities in index.php in Dayfox Blog allow remote attackers to execute arbitra

MitiSoft stores sensitive information under the web root with insufficient access control, which allows remote attackers

OhhASP stores sensitive information under the web root with insufficient access control, which allows remote attackers t

AJLogin 3.5 stores sensitive information under the web root with insufficient access control, which allows remote attack

Webulas stores sensitive information under the web root with insufficient access control, which allows remote attackers

HarikaOnline 2.0 stores sensitive information under the web root with insufficient access control, which allows remote a

M-Core stores the database under the web document root, which allows remote attackers to obtain sensitive information vi

SQL injection vulnerability in info_book.asp in Digirez 3.4 and earlier allows remote attackers to execute arbitrary SQL

SQL injection vulnerability in main.asp in LocazoList 2.01a beta5 and earlier allows remote attackers to execute arbitra

SQL injection vulnerability in user.php in iGeneric iG Calendar 1.0 allows remote attackers to execute arbitrary SQL com

JAMWiki before 0.5.0 does not properly check permissions during moves of "read-only or admin-only topics," which allows

SQL injection vulnerability in compare_product.php in iGeneric iG Shop 1.4 allows remote attackers to execute arbitrary

Multiple SQL injection vulnerabilities in display_review.php in iGeneric iG Shop 1.4 and earlier allow remote attackers

Multiple eval injection vulnerabilities in iGeneric iG Shop 1.0 allow remote attackers to execute arbitrary code via the

Unspecified vulnerability in the DECnet-Plus 7.3-2 feature in DECnet/OSI 7.3-2 for OpenVMS ALPHA, and the DECnet-Plus 7.

DiskManagementTool in the DiskManagement.framework 92.29 on Mac OS X 10.4.8 does not properly validate Bill of Materials

Heap-based buffer overflow in Opera 9.02 allows remote attackers to execute arbitrary code via a JPEG file with an inval

The Javascript SVG support in Opera before 9.10 does not properly validate object types in a createSVGTransformFromMatri

Digger Solutions Intranet Open Source (IOS) stores sensitive information under the web root with insufficient access con

Stack-based buffer overflow in the CSAdmin service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 an

SQL injection vulnerability in cats.asp in createauction allows remote attackers to execute arbitrary SQL commands via t

The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, whic

Race condition in the msxml3 module in Microsoft XML Core Services 3.0, as used in Internet Explorer 6 and other applica

Multiple stack-based buffer overflows in the (1) LoadTree and (2) ReadHeader functions in PAISO.DLL 1.7.3.0 (1.7.3 beta)

The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to caus

Microsoft Internet Information Services (IIS), when accessed through a TCP connection with a large window size, allows r

jgbbs stores sensitive information under the web root with insufficient access control, which allows remote attackers to

WineGlass stores sensitive information under the web root with insufficient access control, which allows remote attacker

newsCMSlite stores sensitive information under the web root with insufficient access control, which allows remote attack

SQL injection vulnerability in productdetail.asp in E-SMARTCART 1.0 allows remote attackers to execute arbitrary SQL com

SQL injection vulnerability in page.php in Simple Web Content Management System allows remote attackers to execute arbit

Sven Moderow GuestBook 0.3a stores sensitive information under the web root with insufficient access control, which allo