CVE-2007-6029

Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e-mail message. NOTE: this information is based upon a vague advisory by a vulnerability information sales organization that does not coordinate with vendors or release actionable...

CVE-2007-6029

CVE-2007-6029 affects ClamAV 0.91.1 and 0.91.2. The vulnerability allows remote attackers to execute arbitrary code by sending a crafted e-mail message. The description in multiple sources notes that the advisory originated from a vulnerability information seller and that the CVE has been assigne...

Unfixed XSS vulnerability at www.vista.ma

Security researcher meloulisi, has submitted on 15/11/2007 a cross-site-scripting XSS vulnerability affecting www.vista.ma, which at the time of submission ranked 752757 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/11/2007. It is currentl...

Unfixed XSS vulnerability at www.nls-babysvom.no

Security researcher SeeD, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting www.nls-babysvom.no, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2007. It is currently...

Unfixed XSS vulnerability at eqdkp.lod-cs-clan.de

Security researcher SeeD, has submitted on 11/12/2007 a cross-site-scripting XSS vulnerability affecting eqdkp.lod-cs-clan.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2007. It is currently...

Unfixed XSS vulnerability at www.sussexunibooks.co.uk

Security researcher By Encore, has submitted on 11/04/2007 a cross-site-scripting XSS vulnerability affecting www.sussexunibooks.co.uk, which at the time of submission ranked 1138086 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/04/2007. I...

CVE-2007-4345

Buffer overflow in IMail Client 9.22, as shipped with IPSwitch IMail Server 2006.22, allows remote attackers to execute arbitrary code via a long boundary parameter in a multipart MIME e-mail message...

CVE-2007-4345

Buffer overflow in IMail Client 9.22, as shipped with IPSwitch IMail Server 2006.22, allows remote attackers to execute arbitrary code via a long boundary parameter in a multipart MIME e-mail message...

Unfixed XSS vulnerability at wiki.mhfrontier.info

Security researcher kusomiso.com, has submitted on 26/10/2007 a cross-site-scripting XSS vulnerability affecting wiki.mhfrontier.info, which at the time of submission ranked 892178 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/10/2007. It ...

FreeBSD : opera -- multiple vulnerabilities (44224e08-8306-11dc-9283-0016179b2dd5)

An advisory from Opera reports : If a user has configured Opera to use an external newsgroup client or e-mail application, specially crafted Web pages can cause Opera to run that application incorrectly. In some cases this can lead to execution of arbitrary code. When accessing frames from...

CVE-2003-1505

Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service crash by creating a web page or HTML e-mail with a textarea in a div element whose scrollbar-base-color is modified by a CSS style, which is then moved...

CVE-2003-1505

Vulnerability summary (CVE-2003-1505): Microsoft Internet Explorer 6.0 is vulnerable to a remote denial of service (crash) by crafted HTML/CSS. Specifically, a page or HTML email containing a textarea inside a div whose scrollbar-base-color is modified via CSS and then moved can trigger the crash...

CVE-2003-1481

CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer...

Unfixed XSS vulnerability at www.flash-games.net

Security researcher S0m.Ph, has submitted on 24/10/2007 a cross-site-scripting XSS vulnerability affecting www.flash-games.net, which at the time of submission ranked 32136 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/10/2007. It is...

CVE-2003-1440

SpamProbe 0.8a is affected: remote DoS via HTML e-mail containing newline characters inside an href tag, due to how certain regular expressions are not handling this input. The root cause is the incorrect handling of newlines in href attributes. Impact is described as a crash/partial availability...

CVE-2003-1423

Petitforum stores the liste.txt data file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information such as e-mail addresses and encrypted passwords...

CVE-2000-1244

Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP header is missing the "From" field, which allows remote attackers to bypass virus protection...

Balsa e-mail client buffer overflow

Buffer overflow on oversized IMAP server response...

External news readers and e-mail clients can be used to execute arbitrary code

If a user has configured Opera to use an external newsgroup client or e-mail application, specially crafted Web pages can cause Opera to run that application incorrectly. In some cases this can lead to execution of arbitrary code...

Unfixed XSS vulnerability at gabrieldedavid.com

Security researcher Norehem, has submitted on 10/08/2007 a cross-site-scripting XSS vulnerability affecting gabrieldedavid.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is currently...