| Max CVSS | 9.3 | Min CVSS | 4.3 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2007-5960 | 4.3 |
Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window or frame in which script is running, instead of the address of the content that initiated the script, which allows remote attackers to spoof HTTP Referer
|
13-02-2023 - 02:18 | 26-11-2007 - 23:46 | |
| CVE-2008-0591 | 4.3 |
Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirmation dialogs, which might allow remote attackers to trick users into confirming an unsafe action, such as remote file execution, by
|
15-10-2018 - 22:01 | 09-02-2008 - 00:00 | |
| CVE-2008-0419 | 9.3 |
Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of service (crash) via images in a page that uses designMode frames, which triggers memory corruption related to resize
|
15-10-2018 - 22:00 | 08-02-2008 - 22:00 | |
| CVE-2008-0418 | 4.3 |
Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8, when using "flat" addons, allows remote attackers to read arbitrary Javascript, image, and stylesheet files via the chrome:
|
15-10-2018 - 22:00 | 08-02-2008 - 22:00 | |
| CVE-2008-0412 | 9.3 |
The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to the (1) nsTableF
|
15-10-2018 - 21:59 | 08-02-2008 - 22:00 | |
| CVE-2008-0413 | 9.3 |
The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via (1) a large switch statement, (2
|
15-10-2018 - 21:59 | 08-02-2008 - 22:00 | |
| CVE-2008-0415 | 4.3 |
Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.lo
|
15-10-2018 - 21:59 | 08-02-2008 - 22:00 | |
| CVE-2007-5959 | 9.3 |
Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors that trigger memory corruption.
|
15-10-2018 - 21:47 | 26-11-2007 - 23:46 | |
| CVE-2007-5947 | 4.3 |
The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inner URL, which allows remot
|
15-10-2018 - 21:47 | 14-11-2007 - 01:46 |