CVE-2007-4006

The CVE-2007-4006 issue is a buffer overflow in the Windows RSH daemon (rshd). Connected sources confirm a remote overflow in rshd (versions around 1.7–1.8) that can allow an attacker to execute commands on Windows hosts running the vulnerable service. Root cause: inadequate bounds checking on in...

Design/Logic Flaw

Unspecified vulnerability in the attachment filter in Kerio MailServer before 6.4.1 has unknown impact and remote attack vectors...

CVE-2007-3993

Unspecified vulnerability in the attachment filter in Kerio MailServer before 6.4.1 has unknown impact and remote attack vectors...

CVE-2007-3993

Unspecified vulnerability in the attachment filter in Kerio MailServer before 6.4.1 has unknown impact and remote attack vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10.1.2 have unknown impact and remote attack vectors via 1 Instant Messaging/Presence OCS01 and 2 Oracle Single Sign On AS02...

CVE-2007-3865

Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 12.0.1 has unknown impact and remote attack vectors, aka APPS01...

Design/Logic Flaw

Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 12.0.1 has unknown impact and remote attack vectors, aka APPS01...

CVE-2007-3864

Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10.1.2 have unknown impact and remote attack vectors via 1 Instant Messaging/Presence OCS01 and 2 Oracle Single Sign On AS02...

CVE-2007-3865

Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 12.0.1 has unknown impact and remote attack vectors, aka APPS01...

CVE-2007-3859

Unspecified vulnerability in the Oracle Internet Directory component for Oracle Database 9.2.0.8 and 9.2.0.8DV; Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2; and Collaboration Suite 10.1.2 has unknown impact and remote attack vectors, aka OID01...

CVE-2007-3864

CVE-2007-3864 relates to multiple unspecified vulnerabilities in Oracle Collaboration Suite 10.1.2 with remote attack vectors via Instant Messaging/Presence (OCS01) and Oracle Single Sign On (AS02). The connected sources consistently identify the affected product as Oracle Collaboration Suite 10....

CVE-2007-3864

Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10.1.2 have unknown impact and remote attack vectors via 1 Instant Messaging/Presence OCS01 and 2 Oracle Single Sign On AS02...

CVE-2007-3718

Multiple unspecified vulnerabilities in the SVG parsing engine in Apple Safari 3 Beta for Windows have unspecified remote attack vectors and impact. NOTE: this issue contains no actionable information, but it was released by a reliable researcher...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the SVG parsing engine in Apple Safari 3 Beta for Windows have unspecified remote attack vectors and impact. NOTE: this issue contains no actionable information, but it was released by a reliable researcher...

CVE-2007-3718

Multiple unspecified vulnerabilities in the SVG parsing engine in Apple Safari 3 Beta for Windows have unspecified remote attack vectors and impact. NOTE: this issue contains no actionable information, but it was released by a reliable researcher...

CVE-2007-3671

Unspecified vulnerability in the kernel in Microsoft Windows Vista has unspecified remote attack vectors and impact, as shown in the "0day IPO" presentation at SyScan'07...

Cross site scripting

inc/vulcheck.inc in phpVideoPro before 0.8.8 permits non-alphanumeric characters in the sessid parameter, which has unknown impact and remote attack vectors, probably cross-site scripting XSS...

CVE-2007-3474

Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library libgd before 2.0.35 have unspecified impact and user-assisted remote attack vectors...

CVE-2007-3474

Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library libgd before 2.0.35 have unspecified impact and user-assisted remote attack vectors...

Default credentials

The Random Cookie Password functionality in the loaduser function in cgi-bin/cgi-lib/subs.pl in web-app.org WebAPP before 0.9.9.7 does not clear the 1 username, 2 password, 3 usertheme, and 4 userlang cookies for unauthorized users, which has unknown impact and remote attack vectors...