CVE-2007-6706

Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH or 7.0.3, and possibly 8.0 allows remote attackers to execute arbitrary code via crafted text in an e-mail message sent over SMTP...

CVE-2008-1217

Unspecified vulnerability in nlnotes.dll in the client in IBM Lotus Notes 6.5, 7.0.x before 7.0.2 CCH, and 8.0.x before 8.0.1 allows remote attackers to execute arbitrary code via a crafted attachment in an e-mail message sent over SMTP, a variant of CVE-2007-6706...

Evolution: Format string vulnerability

Background Evolution is a GNOME groupware application. Description Ulf Harnhammar from Secunia Research discovered a format string error in the emfmultipartencrypted function in the file mail/em-format.c when reading certain data e.g. the "Version:" field from an encrypted e-mail. Impact A remote...

Unfixed XSS vulnerability at income.com.sg

Security researcher cyber, has submitted on 03/03/2008 a cross-site-scripting XSS vulnerability affecting income.com.sg, which at the time of submission ranked 35662 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/03/2008. It is currently...

CVE-2008-0304

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview...

Heap overflow

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview...

CVE-2008-0304

Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code via a crafted external-body MIME type in an e-mail message, related to an incorrect memory allocation during message preview...

Cross site scripting

Cross-site scripting XSS vulnerability in SmarterTools SmarterMail Enterprise 4.3 allows remote attackers to inject arbitrary web script or HTML via a STYLE attribute of an element in the Subject field of an e-mail message...

CVE-2008-0872

Cross-site scripting XSS vulnerability in SmarterTools SmarterMail Enterprise 4.3 allows remote attackers to inject arbitrary web script or HTML via a STYLE attribute of an element in the Subject field of an e-mail message...

CVE-2008-0872

CVE-2008-0872 affects SmarterTools SmarterMail Enterprise 4.3. The issue is a cross-site scripting (XSS) vulnerability in the webmail Subject field where the STYLE attribute can carry arbitrary HTML/Script reflected in the user’s browser. Root cause: inadequate sanitization of the Subject field b...

ClamAV: Multiple vulnerabilities

Background Clam AntiVirus is a free anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. Description An integer overflow has been reported in the "cliscanpe" function in file libclamav/pe.c CVE-2008-0318. Another unspecified vulnerability has been reported in fil...

Unfixed XSS vulnerability at skelbimai.chebra.lt

Security researcher F3nix, has submitted on 17/02/2008 a cross-site-scripting XSS vulnerability affecting skelbimai.chebra.lt, which at the time of submission ranked 19385 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is...

Unfixed XSS vulnerability at www.konyaspor.org.tr

Security researcher b3r4t, has submitted on 02/10/2008 a cross-site-scripting XSS vulnerability affecting www.konyaspor.org.tr, which at the time of submission ranked 370647 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2008. It is...

Unfixed XSS vulnerability at www.izmirsj.k12.tr

Security researcher JoCk3r, has submitted on 02/10/2008 a cross-site-scripting XSS vulnerability affecting www.izmirsj.k12.tr, which at the time of submission ranked 923392 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/10/2008. It is...

CVE-2008-0563

CVE-2008-0563 describes a cross-site request forgery in Liferay Portal 4.3.6, where the application uses the User-Agent header when composing Forgot Password HTML emails. This allows remote attackers to perform unspecified actions as unspecified authenticated users. The available documents consis...

Unfixed XSS vulnerability at sivu.byterapers.com

Security researcher BackDoor, has submitted on 02/03/2008 a cross-site-scripting XSS vulnerability affecting sivu.byterapers.com, which at the time of submission ranked 3047428 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2008. It is...

phpMyClub 0.0.1 (page_courante) Local File Inclusion Vulnerability

No description provided by source. phpMyClub Local File Inclusion Vulnerability Download script : http://ovh.dl.sourceforge.net/sourceforge/phpmyclub/phpMyClub-0.0.1.zip Author : S.W.A.T. E-Mail : [email protected] - [email protected] Home : http://svvat.ir For Execute Exploit Does Not Write Extenti...

Unfixed XSS vulnerability at www.fashion18.com

Security researcher Uber0n, has submitted on 27/01/2008 a cross-site-scripting XSS vulnerability affecting www.fashion18.com, which at the time of submission ranked 327578 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is...

SAP Netviewer 7.0 — XSS Security Vulnerability

Application: SAP Web Application Server, Web Dynpro ABAP and for BSP Versions Affected: Version 7.0 Vendor URL: Bugs: XSS Exploits: YES Reported: 25.01.2008 Vendor response: 25.01.2008 Date of Public Advisory: 21.05.2008 CVE number: 2008-2421 Description: XSS IN BPELCONSOLE/DEFAULT/ACTIVITIES.JSP...

Unfixed XSS vulnerability at poisk.ru

Security researcher Uber0n, has submitted on 24/12/2007 a cross-site-scripting XSS vulnerability affecting poisk.ru, which at the time of submission ranked 56977 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It is currently unfixe...