| Max CVSS | 9.3 | Min CVSS | 2.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-1280 | 4.3 |
Cross-site scripting (XSS) vulnerability in Adobe RoboHelp X5, 6, and Server 6 allows remote attackers to inject arbitrary web script or HTML via a URL after a # (hash) in the URL path, as demonstrated using en/frameset-7.html, and possibly other uns
|
16-10-2018 - 16:37 | 10-05-2007 - 00:19 | |
| CVE-2007-0792 | 7.5 |
The mod_perl initialization script in Bugzilla 2.23.3 does not set the Bugzilla Apache configuration to allow .htaccess permissions to override file permissions, which allows remote attackers to obtain the database username and password via a direct
|
16-10-2018 - 16:34 | 06-02-2007 - 19:28 | |
| CVE-2007-3367 | 7.8 |
Simple CGI Wrapper (scgiwrap) in cPanel before 10.9.1, and 11.x before 11.4.19-R14378, allows remote attackers to obtain sensitive information via a direct request, which reveals the path in an error message. NOTE: the provenance of this information
|
29-07-2017 - 01:32 | 22-06-2007 - 18:30 | |
| CVE-2007-3366 | 4.3 |
Cross-site scripting (XSS) vulnerability in Simple CGI Wrapper (scgiwrap) in cPanel before 10.9.1, and 11.x before 11.4.19-R14378, allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: the provenance of this information i
|
29-07-2017 - 01:32 | 22-06-2007 - 18:30 | |
| CVE-2007-2682 | 7.5 |
The installer for Adobe Version Cue CS3 Server on Apple Mac OS X, as used in Adobe Creative Suite 3 (CS3), does not re-enable the personal firewall after completing the product installation, which allows remote attackers to bypass intended firewall r
|
29-07-2017 - 01:31 | 18-05-2007 - 18:30 | |
| CVE-2007-2585 | 9.3 |
Stack-based buffer overflow in the Verify function in the BarCodeWiz ActiveX control 2.0 and 2.52 (BarcodeWiz.dll) allows remote attackers to execute arbitrary code via a long argument. Successful exploitation allows execution of arbitrary code when
|
29-07-2017 - 01:31 | 10-05-2007 - 00:19 | |
| CVE-2003-1148 | 7.5 |
Multiple PHP remote file inclusion vulnerabilities in J-Pierre DEZELUS Les Visiteurs 2.0.1, as used in phpMyConferences (phpMyConference) 8.0.2 and possibly other products, allow remote attackers to execute arbitrary PHP code via a URL in the lvc_inc
|
11-07-2017 - 01:29 | 25-10-2003 - 04:00 | |
| CVE-2006-6980 | 2.6 |
The magnatune.com album browser in Amarok allows attackers to cause a denial of service (application crash) via unspecified vectors.
|
13-11-2008 - 06:29 | 08-02-2007 - 18:28 |