2007 CVE Vulnerabilities

6,580 CVEs published in 2007.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2007-3579——PHPIDS before 20070703 does not properly handle setting the .text property of a SCRIPT element before its attachment to ...
CVE-2007-3580——PHPIDS does not properly handle certain code containing newlines, as demonstrated by a try/catch block within a loop, wh...
CVE-2007-3581——The Jedox Palo 1.5 client transmits the password in cleartext, which might allow remote attackers to obtain the password...
CVE-2007-3582——SQL injection vulnerability in index.php in SuperCali PHP Event Calendar 0.4.0 allows remote attackers to execute arbitr...
CVE-2007-3583——SQL injection vulnerability in details_news.php in Girlserv ads 1.5 and earlier allows remote attackers to execute arbit...
CVE-2007-3584——SQL injection vulnerability in viewforum.php in PNphpBB2 1.2i and earlier for Postnuke allows remote attackers to execut...
CVE-2007-3585——PHP remote file inclusion vulnerability in games.php in MyCMS 0.9.8 and earlier allows remote attackers to execute arbit...
CVE-2007-3588——SQL injection vulnerability in reply.php in VBZooM 1.12 allows remote attackers to execute arbitrary SQL commands via th...
CVE-2007-3011——The DBAsciiAccess CGI Script in the web interface in Fujitsu-Siemens Computers ServerView before 4.50.09 allows remote a...
CVE-2007-3012——The web interface in Fujitsu-Siemens Computers PRIMERGY BX300 Switch Blade allows remote attackers to obtain sensitive i...
CVE-2007-3568——The _LoadBMP function in imlib 1.9.15 and earlier allows context-dependent attackers to cause a denial of service (infin...
CVE-2007-3569——Multiple cross-site scripting (XSS) vulnerabilities in Oliver Library Management System allow remote attackers to inject...
CVE-2007-3567——MySQLDumper 1.21b through 1.23 REV227 uses a "Limit GET" statement in the .htaccess authentication mechanism, which allo...
CVE-2007-3570——The Linux Access Gateway in Novell Access Manager before 3.0 SP1 Release Candidate 1 (RC1) allows remote attackers to by...
CVE-2007-3571——The Apache Web Server as used in Novell NetWare 6.5 and GroupWise allows remote attackers to obtain sensitive informatio...
CVE-2007-3561——Cross-site scripting (XSS) vulnerability in ara.asp in Efendy Blog 1.0 allows remote attackers to inject arbitrary web s...
CVE-2007-3562——SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary ...
CVE-2007-3560——Multiple unspecified vulnerabilities in Esqlanelapse before 2.6 have unknown impact and attack vectors.
CVE-2007-3563——SQL injection vulnerability in includes/view_page.php in AV Arcade 2.1b allows remote attackers to execute arbitrary SQL...
CVE-2007-3557——SQL injection vulnerability in admin/login.php in Wheatblog (wB) 1.1, when magic_quotes_gpc is disabled, allows remote a...
CVE-2007-3558——SQL injection vulnerability in Coppermine Photo Gallery (CPG) before 1.4.11 allows remote attackers to execute arbitrary...
CVE-2007-3559——Cross-site scripting (XSS) vulnerability in infusions/shoutbox_panel/shoutbox_panel.php in PHP-Fusion 6.01.10 and 6.01.9...
CVE-2007-2949——Integer overflow in the seek_to_and_unpack_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers...
CVE-2007-3554——Stack-based buffer overflow in the HPSDDX Class (SDD) ActiveX control in sdd.dll in HP Instant Support - Driver Check be...
CVE-2007-3555——Cross-site scripting (XSS) vulnerability in index.php in Moodle 1.7.1 allows remote attackers to inject arbitrary web sc...

Check if your code is affected by 2007 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now