CVE-2007-4862

CVE-2007-4862 is a documented XSS vulnerability affecting SAXON 5.4 in admin/menu.php via config[news_url]. Exploitation requires register_globals On and magic_quotes_gpc Off; the NVD/NVD-derived reports list a Medium impact (I/P) and network access with no confidentiality or availability impact,...

CVE-2007-5725

CVE-2007-5725: Multiple cross-site scripting (XSS) vulnerabilities in Smart-Shop allow remote attackers to inject arbitrary web script or HTML via (1) the email parameter to index.php or (2) the command parameter to index.php in the default home page action, (3) a currencies action, or (4) a bask...

CVE-2007-5720

CVE-2007-5720 : Affected product: ProfileCMS 1.0. The vulnerability is an unrestricted file upload in the profiles script that allows remote attackers to upload and execute arbitrary PHP code via profile creation. The NVD entry lists a CVSS v2 base score of 6.8 (NETWORK, MEDIUM) with partial impa...

CVE-2007-1323

CVE-2007-1323 is rejected/not used per the initial description.

CVE-2007-5717

Technical details for CVE-2007-5717 are not publicly available in the provided documents. The materials mention an unspecified remote code execution in Sun Fire X2100/X2200 ELOM but do not specify affected versions, vectors, or fixes. Monitor for updates.

CVE-2007-4861

SAXON 5.4 is affected by multiple path disclosure flaws when display_errors is enabled. Exploitation vectors include direct requests to news.php, improper handling of newsid in admin/edit-item.php, and other scripts under admin/, rss/, and the installation root, which reveal server paths in error...

CVE-2007-5728

CVE-2007-5728 : The connected template for phpPgAdmin

CVE-2007-5717

Unspecified vulnerability in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager ELOM on x86 before firmware 2.70 allows remote attackers to execute arbitrary commands as root on the Service Processor SP via unspecified vectors, a different vulnerability than CVE-2007-5170...

CVE-2007-5723

CVE-2007-5723 describes a heap-based buffer overflow in the samp_send function of NuFW (nuauth/sasl.c) prior to version 2.2.7. An attacker could remotely trigger DoS by providing input on which base64 encoding is performed. The vulnerability is exploitable over the network (no authentication requ...

CVE-2007-5726

CVE-2007-5726 affects Sun Solaris 10 SCTP: when a LISTEN socket exists, remote denial of service (panic) can occur via INIT processing. Remediation is patch 127716-01 (SPARC) or 127717-01 (x86); see SunAlerts 1000936.1. No exploitation details are provided in the supplied documents.

CVE-2007-5718

CVE-2007-5718 affects vobcopy up to version 0.5.14. A local attacker can exploit insecure temporary file handling (creating/appending to /tmp/vobcopy.bla or /tmp/vobcopy_0.5.14.log) via a symlink attack to write to arbitrary files with the privileges of the running user. The vulnerability arises ...

CVE-2007-1323

...

CVE-2007-5710

Cross-site scripting XSS vulnerability in wp-admin/edit-post-rows.php in WordPress 2.3 allows remote attackers to inject arbitrary web script or HTML via the postscolumns array parameter...

CVE-2007-5710

Cross-site scripting XSS vulnerability in wp-admin/edit-post-rows.php in WordPress 2.3 allows remote attackers to inject arbitrary web script or HTML via the postscolumns array parameter...

CVE-2007-5714

Removed by vendor...

CVE-2007-5715

DenyHosts 2.6 is vulnerable due to an incorrect regular expression used to parse failed SSH login attempts, which may allow remote attackers to evade detection/block when attempting logins with a username not present in AllowUsers (the issue demonstrated using the root username). Affected impleme...

CVE-2007-5708

CVE-2007-5708 affects OpenLDAP’s slapd, specifically the slapo-pcache module (overlays/pcache.c). When OpenLDAP runs as a proxy‑caching server, it allocates memory with a malloc variant instead of calloc, which can prevent an array from being properly initialized and may lead to a denial of servi...

CVE-2007-5712

The CVE-2007-5712 issue affects Django’s i18n framework (versions 0.91, 0.95, 0.95.1, 0.96) and is also observed when used in PyLucid. The vulnerability allows remote attackers to induce memory consumption (DoS) by sending many HTTP requests with large Accept-Language headers. Public docs record ...

CVE-2007-5709

CVE-2007-5709 affects Sony SonicStage CP (CONNECT Player) 4.3. A stack-based buffer overflow is triggered by a long file name in an M3U file, which can allow a remote attacker to execute arbitrary code. The vulnerability is a remote, unauthenticated condition over the network and is linked to buf...

CVE-2007-5713

AMX Mod X 1.76d GeoIP module (Half-Life Server) is affected by an off-by-one error in geoip_code2/geoip_code3 that leads to a buffer overflow, potentially allowing arbitrary code execution or DoS. This CVE-2007-5713 entry documents the impact; no explicit exploit details or remediation versions a...