65 matches found
CVE-2007-4615
The CVE-2007-4615 entry concerns BEA WebLogic Server’s SSL client implementation. Affected versions include BEA WebLogic Server 7.0 SP7, 8.1 SP2–SP6, 9.0, 9.1, 9.2 Gold through MP2, and 10.0. The vulnerability arises when the SSL client sometimes selects the null cipher if other ciphers are avail...
CVE-2006-4615
The CVE documents a vulnerability in Shape Services IM+ Mobile Instant Messenger for Pocket PC, version 3.10, where usernames and passwords are stored in plaintext in %PROGRAMFILES%\IMPlus\implus.cfg. This local-access issue allows a user with file-read privileges to obtain credentials. Affected ...
CVE-2005-4615
CVE-2005-4615 affects DapperDesk 3.0.1 and earlier. The vulnerability is an SQL injection in news.php via the page parameter , allowing remote attackers to execute arbitrary SQL commands. The NVD entry lists a base score of 7.5 (HIGH) with network access and no authentication required, and Partia...