CVE-2007-5751

Liferea before 1.4.6 uses weak permissions 0644 for the feedlist.opml backup file, which allows local users to obtain credentials...

SquirrelMail 1.2.x - From Email Header HTML Injection

SquirrelMail 1.2.x - From Email Header HTML Injection source: https://www.securityfocus.com/bid/10450/info SquirrelMail is reported to be prone to a 'from' field email header HTML injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied email...

Multiple security vulnerabilities in Apache 2

Background The Apache HTTP Server Project is an effort to develop and maintain an open-source HTTP server for modern operating systems. The goal of this project is to provide a secure, efficient and extensible server that provides services in tune with the current HTTP standards. Description Thre...

Trillian Instant Messaging 0.x - Credential Encryption

Trillian Instant Messaging 0.x - Credential Encryption // source: https://www.securityfocus.com/bid/5677/info The Trillian instant messaging client uses weak encryption to store saved authentication credentials for instant messaging services. The credentials are encrypted by using XOR with a stat...

PassWD2000 v2.x Weak Encryption Vulnerability

== PassWD2000 v2.x Weak Encryption Vulnerability =============== "Success does not consist in never making mistakes but in never making the same one a second time" --- George Bernard Shaw Vulnerable: PassWD2000 2.0 PassWD2000 2.1 PassWD2000 2.2 PassWD2000 2.3 PassWD2000 2.4 PassWD2000 2.5...