CVE-2007-5704

CVE-2007-5704 concerns the CodeWidgets.com Online Event Registration Template, where the (1) Email Address and (2) Password fields in login.asp and admin_login.asp are vulnerable to SQL injection. The underlying issue permits remote attackers to craft input that may result in arbitrary SQL execut...

CVE-2007-4222

CVE-2007-4222 describes a stack-based buffer overflow in IBM Lotus Notes’ nnotes.dll TagAttributeListCopy function. The flaw occurs when processing HTML emails that are converted to a temporary format (affecting how the recipient handles replies, forwards, or clipboard copies); a fixed-size stack...

CVE-2007-5702

CVE-2007-5702 covers a Cross-site Scripting (XSS) vulnerability in the Novell OpenSUSE SWAMP Workflow Administration and Management Platform 1.x, specifically in the login component swamp/action/LoginActions (the login box). The vulnerability arises from improper handling of the username paramete...

CVE-2007-5699

Stack-based buffer overflow in eIQNetworks Enterprise Security Analyzer ESA 2.5 allows remote attackers to execute arbitrary code via certain data on TCP port 10616 that results in a long argument to the SEARCHREPORT command, a different vector than CVE-2007-2059...

Stack overflow

Stack-based buffer overflow in eIQNetworks Enterprise Security Analyzer ESA 2.5 allows remote attackers to execute arbitrary code via certain data on TCP port 10616 that results in a long argument to the SEARCHREPORT command, a different vector than CVE-2007-2059...

Sql injection

GNOME screensaver 2.20 in Ubuntu 7.10, when used with Compiz, does not properly reserve input focus, which allows attackers with physical access to take control of the session after entering an Alt-Tab sequence, a related issue to CVE-2007-3069...

CVE-2007-5700

The vulnerability (CVE-2007-5700) affects IBM Lotus Domino prior to 7.0.3. The Evaluate LotusScript method uses an incorrect security context for @ formula commands in some circumstances, which might allow remote authenticated users to gain privileges and obtain sensitive information. Affected co...

CVE-2007-5544

CVE-2007-5544 affects IBM Lotus Notes and Domino where memory-mapped files used for IPC are created with an ACL of Everyone:Full Control , allowing local attackers in shared environments to read sessions or inject content. Affected: Lotus Notes clients prior to 6.5.6, 7.x prior to 7.0.3; Domino s...

CVE-2007-5701

The CVE-2007-5701 entry concerns IBM Lotus Domino’s Certificate Authority (CA) before 7.0.3, with an incomplete blacklist vulnerability that allows local users or those with physical access to obtain passwords. When an administrator runs ca activate or ca unlock with any uppercase character, the ...

CVE-2007-3510

IBM Lotus Domino IMAP Server is affected by a buffer overflow in the IMAP service prior to 6.5.6 FP2 and prior to 7.0.3 for 7.x. A remote authenticated user can exploit this via a long mailbox name to execute arbitrary code in the server context. Exploitation often requires valid IMAP credentials...

CVE-2007-5699

Affected software: eIQnetworks Enterprise Security Analyzer (ESA) 2.5 and ESA License Manager

CVE-2007-3920

CVE-2007-3920 concerns GNOME Screensaver 2.20 on Ubuntu 7.10 when used with Compiz, where input focus is not properly reserved. The result is that an attacker with physical access can gain session control after an Alt-Tab sequence, as described in the related CVE-2007-3069 context. Connected advi...

CVE-2007-5698

CVE-2007-5698 concerns a Cross-site scripting (XSS) vulnerability in default.asp of CREApark GOLD KOY PORTALI. The issue enables remote attackers to inject arbitrary web script or HTML via the aranan parameter. The vulnerability is documented across multiple sources (NVD entry and related records...

CVE-2007-5622

3proxy (versions 0.5 up to 0.5.3i) contains a double-free vulnerability in the ftpprchild() function. The flaw occurs when handling OPEN commands to the FTP proxy, where param->hostname is freed twice (once before parsehostname(), which frees it again). This can allow a remote attacker to caus...

CVE-2007-5697

CVE-2007-5697: Affects PHP Image 1.2. Multiple remote file inclusion vulnerabilities allow an attacker to cause arbitrary PHP code execution by supplying a URL in the xarg parameter to one of three files: xarg_corner.php, xarg_corner_bottom.php, or xarg_corner_top.php. The underlying issue is tha...

CVE-2007-5696

PHP remote file inclusion vulnerability in includes.php in phpBasic allows remote attackers to execute arbitrary PHP code via a URL in the root parameter, possibly related to the Music module...

CVE-2007-5696

PHP remote file inclusion vulnerability in includes.php in phpBasic allows remote attackers to execute arbitrary PHP code via a URL in the root parameter, possibly related to the Music module...

CVE-2007-5694

The CVE-2007-5694 issue affects SiteBar 3.3.8 and earlier, originating from the translation module (translator.php) where an absolute path in dir enables remote authenticated users to read arbitrary files via the dir parameter (path traversal). Debian/DSA-1423-1 indicates fixes in sitebar 3.3.8-7...

CVE-2007-5695

CVE-2007-5695 is a real issue in SiteBar 3.3.x where an error in command.php allows remote attackers to redirect users to arbitrary websites via the forward parameter in a Log In action. Public sources (Debian, Gentoo GLSA, and OpenVAS) corroborate a family of related sitebar vulnerabilities, wit...

CVE-2007-5693

Eval injection vulnerability in the translation module translator.php in SiteBar 3.3.8 allows remote authenticated users to execute arbitrary PHP code via the edit parameter in an upd cmd action, a different vulnerability than CVE-2007-5492...