CVE-2007-5703

CVE-2007-5703 concerns multiple cross-site scripting (XSS) vulnerabilities in the RSA KEON Registration Authority Web Interface 1.0, specifically in (1) Request-spk.xuda and (2) Add-msie-request.xuda. Remote attackers could inject arbitrary web script or HTML via unspecified vectors. Public sourc...

CVE-2007-5413

HP OpenView Radia Integration Server, specifically httpd.tkd, is affected in CM Infrastructure v4.0–4.2i and CCM v2.0. The vulnerability arises from insufficient validation of URLs containing tilde references (e.g., ~root) in the HTTP server bound to TCP port 3465, enabling remote attackers to re...

CVE-2007-5706

CVE-2007-5706 describes an absolute path traversal vulnerability in the download.php of Jeebles Directory 2.9.60. An attacker can read arbitrary files by supplying a full pathname in the query string. The vulnerability is documented across multiple sources and is classified as a high-severity iss...

CVE-2007-4999

libpurple in Pidgin 2.1.0 through 2.2.1, when using HTML logging, allows remote attackers to cause a denial of service NULL dereference and application crash via a message that contains invalid HTML data, a different vector than CVE-2007-4996...

CVE-2007-5702

CVE-2007-5702 covers a Cross-site Scripting (XSS) vulnerability in the Novell OpenSUSE SWAMP Workflow Administration and Management Platform 1.x, specifically in the login component swamp/action/LoginActions (the login box). The vulnerability arises from improper handling of the username paramete...

CVE-2007-4999

CVE-2007-4999 affects libpurple/Pidgin versions 2.1.0–2.2.1 with HTML logging enabled. The issue causes a NULL dereference and application crash when processing messages containing invalid HTML data, resulting in denial of service. Public references in OpenVAS/Ubuntu/Fedora/openSUSE advisories in...

CVE-2007-4222

CVE-2007-4222 describes a stack-based buffer overflow in IBM Lotus Notes’ nnotes.dll TagAttributeListCopy function. The flaw occurs when processing HTML emails that are converted to a temporary format (affecting how the recipient handles replies, forwards, or clipboard copies); a fixed-size stack...

CVE-2007-5705

Technical details about CVE-2007-5705 are not publicly available in the provided connected documents; the entry notes remote code execution via settings.inc.php in Jeebles Directory 2.9.60. Monitor for updates.

CVE-2007-5699

Stack-based buffer overflow in eIQNetworks Enterprise Security Analyzer ESA 2.5 allows remote attackers to execute arbitrary code via certain data on TCP port 10616 that results in a long argument to the SEARCHREPORT command, a different vector than CVE-2007-2059...

Stack overflow

Stack-based buffer overflow in eIQNetworks Enterprise Security Analyzer ESA 2.5 allows remote attackers to execute arbitrary code via certain data on TCP port 10616 that results in a long argument to the SEARCHREPORT command, a different vector than CVE-2007-2059...

Sql injection

GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069...

CVE-2007-3510

IBM Lotus Domino IMAP Server is affected by a buffer overflow in the IMAP service prior to 6.5.6 FP2 and prior to 7.0.3 for 7.x. A remote authenticated user can exploit this via a long mailbox name to execute arbitrary code in the server context. Exploitation often requires valid IMAP credentials...

CVE-2007-5622

3proxy (versions 0.5 up to 0.5.3i) contains a double-free vulnerability in the ftpprchild() function. The flaw occurs when handling OPEN commands to the FTP proxy, where param->hostname is freed twice (once before parsehostname(), which frees it again). This can allow a remote attacker to caus...

CVE-2007-5697

CVE-2007-5697: Affects PHP Image 1.2. Multiple remote file inclusion vulnerabilities allow an attacker to cause arbitrary PHP code execution by supplying a URL in the xarg parameter to one of three files: xarg_corner.php, xarg_corner_bottom.php, or xarg_corner_top.php. The underlying issue is tha...

CVE-2007-5700

The vulnerability (CVE-2007-5700) affects IBM Lotus Domino prior to 7.0.3. The Evaluate LotusScript method uses an incorrect security context for @ formula commands in some circumstances, which might allow remote authenticated users to gain privileges and obtain sensitive information. Affected co...

CVE-2007-5698

CVE-2007-5698 concerns a Cross-site scripting (XSS) vulnerability in default.asp of CREApark GOLD KOY PORTALI. The issue enables remote attackers to inject arbitrary web script or HTML via the aranan parameter. The vulnerability is documented across multiple sources (NVD entry and related records...

CVE-2007-5544

CVE-2007-5544 affects IBM Lotus Notes and Domino where memory-mapped files used for IPC are created with an ACL of Everyone:Full Control , allowing local attackers in shared environments to read sessions or inject content. Affected: Lotus Notes clients prior to 6.5.6, 7.x prior to 7.0.3; Domino s...

CVE-2007-5699

Affected software: eIQnetworks Enterprise Security Analyzer (ESA) 2.5 and ESA License Manager

CVE-2007-5701

The CVE-2007-5701 entry concerns IBM Lotus Domino’s Certificate Authority (CA) before 7.0.3, with an incomplete blacklist vulnerability that allows local users or those with physical access to obtain passwords. When an administrator runs ca activate or ca unlock with any uppercase character, the ...

CVE-2007-3920

CVE-2007-3920 concerns GNOME Screensaver 2.20 on Ubuntu 7.10 when used with Compiz, where input focus is not properly reserved. The result is that an attacker with physical access can gain session control after an Alt-Tab sequence, as described in the related CVE-2007-3069 context. Connected advi...