Unfixed XSS vulnerability at isabella.sef.mlxchange.com

Security researcher Norehem, has submitted on 09/08/2007 a cross-site-scripting XSS vulnerability affecting isabella.sef.mlxchange.com, which at the time of submission ranked 3242 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/08/2007. It i...

ClamAV milter popen command injection

Added: 09/06/2007 CVE: CVE-2007-4560 BID: 25439 OSVDB: 36909 Background ClamAV is an open-source anti-virus toolkit. clamav-milter is a derivative of ClamAV for e-mail servers running Sendmail. Problem An insecure call to the popen function in clamav-milter, when running in black hole mode, allow...

Unfixed XSS vulnerability at chu.in

Security researcher zuppergazi, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting chu.in, which at the time of submission ranked 179645 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. It is currently...

Unfixed XSS vulnerability at oman3d.com

Security researcher zuppergazi, has submitted on 09/03/2007 a cross-site-scripting XSS vulnerability affecting oman3d.com, which at the time of submission ranked 82816 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/03/2007. It is currently...

xGB 2.0 - xGB.php Remote Security Bypass

xGB 2.0 - xGB.php Remote Security Bypass / xGB 2.0 xGB.php Remote Permission Bypass Vulnerability Bug discovered by DarkFuneral http://www.darkfuneral89.altervista.org/ Affected Software: xGB CMS Site: "i don't know! :P" Severity: Critical Description: An attacker can edit all message in xGB Goog...

CVE-2007-4521

Asterisk Open Source 1.4.5 through 1.4.11, when configured to use an IMAP voicemail storage backend, allows remote attackers to cause a denial of service via an e-mail with an "invalid/corrupted" MIME body, which triggers a crash when the recipient listens to voicemail...

Unfixed XSS vulnerability at mailing.zataz.com

Security researcher cachaca, has submitted on 21/08/2007 a cross-site-scripting XSS vulnerability affecting mailing.zataz.com, which at the time of submission ranked 45984 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/08/2007. It is...

GLSA-200708-08 : SquirrelMail G/PGP plugin: Arbitrary code execution

The remote host is affected by the vulnerability described in GLSA-200708-08 SquirrelMail G/PGP plugin: Arbitrary code execution The functions deletekey, gpgchecksignpgpmime and gpgrecvkey used in the SquirrelMail G/PGP encryption plugin do not properly escape user-supplied data. Impact : An...

SquirrelMail G/PGP plugin: Arbitrary code execution

Background SquirrelMail is a webmail package written in PHP. It supports IMAP and SMTP protocols. Description The functions deletekey, gpgchecksignpgpmime and gpgrecvkey used in the SquirrelMail G/PGP encryption plugin do not properly escape user-supplied data. Impact An authenticated user could...

Unfixed XSS vulnerability at www.salentonline.it

Security researcher Langy, has submitted on 08/09/2007 a cross-site-scripting XSS vulnerability affecting www.salentonline.it, which at the time of submission ranked 922839 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/09/2007. It is...

Unfixed XSS vulnerability at www.cesar.org.uk

Security researcher Narcoticxs, has submitted on 08/08/2007 a cross-site-scripting XSS vulnerability affecting www.cesar.org.uk, which at the time of submission ranked 1175341 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/08/2007. It is...

Unfixed XSS vulnerability at www.stage.fm

Security researcher Norehem, has submitted on 08/08/2007 a cross-site-scripting XSS vulnerability affecting www.stage.fm, which at the time of submission ranked 230165 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/08/2007. It is currently...

Unfixed XSS vulnerability at www.newzbot.com

Security researcher Norehem, has submitted on 08/08/2007 a cross-site-scripting XSS vulnerability affecting www.newzbot.com, which at the time of submission ranked 278209 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/08/2007. It is current...

Unfixed XSS vulnerability at www.sinning.org

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.sinning.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is currently...

Unfixed XSS vulnerability at www.mijnwebserver.nl

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting www.mijnwebserver.nl, which at the time of submission ranked 1836382 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It i...

Unfixed XSS vulnerability at rentloscabos.com

Security researcher zuppergazi, has submitted on 08/03/2007 a cross-site-scripting XSS vulnerability affecting rentloscabos.com, which at the time of submission ranked 3371040 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/03/2007. It is...

CVE-2007-3928

Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users to execute arbitrary code via a long e-mail address in an address book entry. NOTE: this might overlap CVE-2007-3638...

Unfixed XSS vulnerability at academy.anadolu.edu.tr

Security researcher frosTMaturidi, has submitted on 16/07/2007 a cross-site-scripting XSS vulnerability affecting academy.anadolu.edu.tr, which at the time of submission ranked 9821 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/08/2007. It...

Stack overflow

Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition before 10.1, and Client Security before 3.1, allows local users to cause a denial of service service crash via a long 1 To, 2 From, or 3 Subject header in an outbound SMTP e-mail messag...

CVE-2007-3771

Stack-based buffer overflow in the Internet E-mail Auto-Protect feature in Symantec AntiVirus Corporate Edition before 10.1, and Client Security before 3.1, allows local users to cause a denial of service service crash via a long 1 To, 2 From, or 3 Subject header in an outbound SMTP e-mail messag...