CVE-2007-2153

CVE-2007-2153 is a cross-site scripting (XSS) vulnerability in the atmail.php component of @Mail 5.0. The issue allows remote attackers to inject arbitrary web script or HTML via the username parameter. The CVSS v2 base score is 6.8 (Medium) with network attack vector, no authentication, and part...

CVE-2007-2153

Cross-site scripting XSS vulnerability in atmail.php in @Mail 5.0 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

Solaris 9 (sparc) : 116264-09

NetBackup 5.0 UNIX server and client fix. Date this patch was last updated by Sun : Jan/23/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 7 (sparc) : 116264-09

NetBackup 5.0 UNIX server and client fix. Date this patch was last updated by Sun : Jan/23/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 116264-09

NetBackup 5.0 UNIX server and client fix. Date this patch was last updated by Sun : Jan/23/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

CVE-2007-1834

CVE-2007-1834 affects Cisco Unified CallManager (CUCM) 5.0 prior to 5.0(4a)SU1 and Cisco Unified Presence Server (CUPS) 1.0 prior to 1.0(3). The vulnerability allows unauthenticated, remote attackers to cause a denial of service (loss of voice services) by sending a flood of ICMP echo requests. R...

MySpeach 3.0.7 - Local/Remote File Inclusion

/=======================================\ | Advisory :: MySpeach = 5.0.0, registerglobals = On, allowurlfopen = On | | Vuln 2 : registerglobals = On | | Risk level : High | | | +-------------------------------------------------------------------------------------------------------+ | | | Program...

Authentication flaw

The processorrequest function in the debugger server for DataRescue IDA Pro 5.0 and 5.1 does not verify that authentication has taken place before invoking the performrequest function, which allows remote attackers to perform unauthorized actions...

Buffer overflow

Multiple buffer overflows in LIBFtp 5.0 allow user-assisted remote attackers to execute arbitrary code via certain long arguments to the 1 FtpArchie, 2 FtpDebugDebug, 3 FtpOpenDir, 4 FtpSize, or 5 FtpChmod function...

CVE-2007-1470

The CVE concerns LIBFtp 5.0, where multiple buffer overflow flaws allow user-assisted remote attackers to execute arbitrary code via long arguments to five functions: FtpArchie, FtpDebugDebug, FtpOpenDir, FtpSize, and FtpChmod. The issue is characterized as buffer overflows in LIBFtp 5.0 with a C...

Apache Tomcat 5.x6.0.x - Directory Traversal

Apache Tomcat 5.x6.0.x - Directory Traversal source: https://www.securityfocus.com/bid/22960/info Apache HTTP servers running with the Tomcat servlet container are prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting this issu...

MySQL 5.0.x - Single Row SubSelect Remote Denial of Service

source: https://www.securityfocus.com/bid/22900/info MySQL is prone to a remote denial-of-service vulnerability because it fails to handle certain select statements to database metadata. An attacker can exploit this issue to crash the application, denying access to legitimate users. The attacker...

Buffer overflow

Buffer overflow in Symantec Mail Security for SMTP 5.0 before Patch 175 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted headers in an e-mail message. NOTE: some information was obtained from third party sources...

VERITAS NetBackup bpcd daemon command chaining vulnerability

Added: 02/16/2007 CVE: CVE-2006-4902 BID: 21565 OSVDB: 31334 Background VERITAS NetBackup is a backup and recovery solution for multiple platforms. Problem The NetBackup bpcd daemon fails to properly validate chained commands. A remote attacker could execute arbitrary commands by appending the...

CVE-2007-0878

Unspecified vulnerability in Microsoft Internet Explorer on Windows Mobile 5.0 allows remote attackers to cause a denial of service loss of browser and other device functionality via a malformed WML page, related to an "overflow state." NOTE: it is possible that this issue is related to...

CVE-2007-0878

The CVE-2007-0878 entry describes an unspecified DoS in Microsoft Internet Explorer on Windows Mobile 5.0 triggered by a malformed WML page, related to an “overflow state.” The connected documents confirm the vulnerability affects Internet Explorer on Windows Mobile 5.0 and may be related to CVE-...

CVE-2007-0878: Undefined Security Weakness

Unspecified vulnerability in Microsoft Internet Explorer on Windows Mobile 5.0 allows remote attackers to cause a denial of service loss of browser and other device functionality via a malformed WML page, related to an "overflow state." NOTE: it is possible that this issue is related to...

Denial Of Service in Internet Explorer for MS Windows Mobile 5.0

Denial Of Service in Internet Explorer for MS Windows Mobile 5.0 ----------------------------------------------------------------- Date of Release: 09/02/2007 Description: A vulnerability exists in Internet Explorer for Microsoft Windows Mobile 5.0 for smart phone and pocket PC that impacts upon...

CVE-2007-0685: Undefined Security Weakness

Internet Explorer on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows attackers to cause a denial of service application crash and device instability via unspecified vectors, possibly related to a buffer overflow...

CVE-2007-0674: Undefined Security Weakness

Pictures and Videos on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows user-assisted remote attackers to cause a denial of service device hang via a malformed JPEG file...