149 matches found
Mac OS X Multiple Vulnerabilities (Security Update 2007-007)
The remote host is running a version of Mac OS X 10.4 or 10.3 which does not have the security update 2007-007 applied. This update contains several security fixes for the following programs : - bzip2 - CFNetwork - CoreAudio - cscope - gnuzip - iChat - Kerberos - mDNSResponder - PDFKit - PHP -...
CVE-2007-3174
CVE-2007-3174 is an XSS vulnerability in W2B Online Banking (auth.w2b) exploitable via the adtype parameter (vector distinct from CVE-2006-1980). Public metrics show a CVSS v2 base score of 4.3 (Medium) with Network attack vector, requiring no authentication, no confidentiality impact, but partia...
Fedora Core 5 : squirrelmail-1.4.7-2.fc5 (2006-788)
Many fixes here. Please report any regressions to Red Hat Bugzilla. - 1.4.7 with CVE-2006-3174 197369 - Move sqspellconfig.php to /etc and mark it %%confignoreplace 192236 - Reduce patch for body text 194457 - Better JP translation for 'Check mail' 196117 - Japanese zenkaku subject conversion...
CVE-2006-3174
Cross-site scripting XSS vulnerability in search.php in SquirrelMail 1.5.1 and earlier, when registerglobals is enabled, allows remote attackers to inject arbitrary HTML via the mailbox parameter...
CVE-2006-3174
Cross-site scripting XSS vulnerability in search.php in SquirrelMail 1.5.1 and earlier, when registerglobals is enabled, allows remote attackers to inject arbitrary HTML via the mailbox parameter...
CVE-2006-3174
CVE-2006-3174 is a cross-site scripting (XSS) vulnerability in SquirrelMail up to version 1.5.1, triggered in search.php when register_globals is enabled. An attacker could inject arbitrary HTML via the mailbox parameter, potentially affecting users who view the affected page. Connected documents...
CVE-2006-3174
Cross-site scripting XSS vulnerability in search.php in SquirrelMail 1.5.1 and earlier, when registerglobals is enabled, allows remote attackers to inject arbitrary HTML via the mailbox parameter...
CVE-2005-3174
CVE-2005-3174 affects Microsoft Windows 2000 prior to Update Rollup 1 for SP4. The vulnerability allows a user to log on to the domain when their password has expired if the fully qualified domain name (FQDN) is exactly 8 characters long. Connected sources confirm the affected OS and condition bu...