CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  What's the CVSS score of your company?
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities (CVSS score between 9 and 10)

Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
16651 CVE-2007-2850 Bypass 2007-05-24 2017-07-29
10.0
None Remote Low Not required Complete Complete Complete
The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass network security policies and connect to arbitrary TCP ports via a modified address:port string.
16652 CVE-2007-2849 2007-05-24 2017-07-29
10.0
None Remote Low Not required Complete Complete Complete
KnowledgeTree Document Management (aka KnowledgeTree Open Source) before STABLE 3.3.7 does not require a password for an unregistered user, when the user exists in Active Directory, which allows remote attackers to log onto KTDMS without the intended authorization check.
16653 CVE-2007-2848 Exec Code Overflow 2007-05-24 2017-07-29
10.0
None Remote Low Not required Complete Complete Complete
Stack-based buffer overflow in the SetPath function in the shComboBox ActiveX control (shcmb80.ocx) in Sky Software Shell MegaPack ActiveX 8.0 allows remote attackers to execute arbitrary code via a long argument. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
16654 CVE-2007-2847 XSS 2007-05-24 2018-10-16
9.3
None Remote Medium Not required Complete Complete Complete
Multiple cross-site scripting (XSS) vulnerabilities in hlstats.php in HLstats 1.35, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the (1) authusername or (2) authpassword parameter, different vectors than CVE-2007-0840 and CVE-2007-2812.
16655 CVE-2007-2846 119 Exec Code Overflow 2007-05-24 2018-10-16
9.3
None Remote Medium Not required Complete Complete Complete
Heap-based buffer overflow in the SIS unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted SIS archive, resulting from an "integer cast around."
16656 CVE-2007-2845 Exec Code Overflow 2007-05-24 2018-10-16
9.3
None Remote Medium Not required Complete Complete Complete
Heap-based buffer overflow in the CAB unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted CAB archive, resulting from an "integer cast around".
16657 CVE-2007-2844 2007-05-24 2018-10-30
9.3
None Remote Medium Not required Complete Complete Complete
PHP 4.x and 5.x before 5.2.1, when running on multi-threaded systems, does not ensure thread safety for libc crypt function calls using protection schemes such as a mutex, which creates race conditions that allow remote attackers to overwrite internal program memory and gain system access.
16658 CVE-2007-2843 2007-05-24 2008-11-15
10.0
None Remote Low Not required Complete Complete Complete
Cross-domain vulnerability in Apple Safari 2.0.4 allows remote attackers to access restricted information from other domains via Javascript, as demonstrated by a js script that accesses the location information of cross-domain web pages, probably involving setTimeout and timed events.
16659 CVE-2007-2834 189 Exec Code Overflow 2007-09-18 2018-10-16
9.3
None Remote Medium Not required Complete Complete Complete
Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an incorrect amount of memory, resulting in a heap-based buffer overflow.
16660 CVE-2007-2831 119 DoS Exec Code Overflow 2007-05-24 2018-10-16
10.0
None Remote Low Not required Complete Complete Complete
Array index error in the (1) ieee80211_ioctl_getwmmparams and (2) ieee80211_ioctl_setwmmparams functions in net80211/ieee80211_wireless.c in MadWifi before 0.9.3.1 allows local users to cause a denial of service (system crash), possibly obtain kernel memory contents, and possibly execute arbitrary code via a large negative array index value.
16661 CVE-2007-2827 119 Exec Code Overflow 2007-05-22 2017-07-29
9.3
None Remote Medium Not required Complete Complete Complete
Heap-based buffer overflow in LEAD Technologies LEADTOOLS ISIS ActiveX Control (ltisi14E.ocx) 14.5.0.44 and earlier allows remote attackers to execute arbitrary code via a long DriverName property.
16662 CVE-2007-2824 Exec Code Sql 2007-05-22 2017-10-11
10.0
None Remote Low Not required Complete Complete Complete
SQL injection vulnerability in paypal.php in AlstraSoft E-Friends 4.21 and earlier allows remote attackers to execute arbitrary SQL commands via the pack parameter in a paypal action for index.php.
16663 CVE-2007-2822 Bypass 2007-05-22 2017-10-11
9.3
None Remote Medium Not required Complete Complete Complete
TutorialCMS 1.01 and earlier, when register_globals is enabled, allows remote attackers to bypass authentication via the (1) loggedIn and (2) activated parameters to (a) login.php, (b) headerLinks.php, (c) submit1.php, (d) myFav.php, and (e) userCP.php.
16664 CVE-2007-2815 264 Bypass 2007-05-22 2018-10-16
10.0
None Remote Low Not required Complete Complete Complete
The "hit-highlighting" functionality in webhits.dll in Microsoft Internet Information Services (IIS) Web Server 5.0 only uses Windows NT ACL configuration, which allows remote attackers to bypass NTLM and basic authentication mechanisms and access private web directories via the CiWebhitsfile parameter to null.htw.
16665 CVE-2007-2810 Exec Code Sql 2007-05-22 2017-07-29
10.0
None Remote Low Not required Complete Complete Complete
SQL injection vulnerability in down_indir.asp in Gazi Download Portal allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
16666 CVE-2007-2809 Exec Code Overflow 2007-05-22 2017-07-29
9.3
None Remote Medium Not required Complete Complete Complete
Buffer overflow in the transfer manager in Opera before 9.21 for Windows allows user-assisted remote attackers to execute arbitrary code via a crafted torrent file. NOTE: due to the lack of details, it is not clear if this is the same issue as CVE-2007-2274.
16667 CVE-2007-2798 787 Exec Code Overflow 2007-06-26 2021-02-02
9.0
None Remote Low ??? Complete Complete Complete
Stack-based buffer overflow in the rename_principal_2_svc function in kadmind for MIT Kerberos 1.5.3, 1.6.1, and other versions allows remote authenticated users to execute arbitrary code via a crafted request to rename a principal.
16668 CVE-2007-2795 119 Exec Code Overflow 2009-01-27 2009-01-28
9.0
None Remote Low ??? Complete Complete Complete
Multiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or authenticated users to execute arbitrary code via (1) the authentication feature in IMailsec.dll, which triggers heap corruption in the IMail Server, or (2) a long SUBSCRIBE IMAP command, which triggers a stack-based buffer overflow in the IMAP Daemon.
16669 CVE-2007-2791 2007-05-22 2017-07-29
10.0
None Remote Low Not required Complete Complete Complete
Unspecified vulnerability in the Secure Shell (SSH) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows remote attackers to identify valid users via unspecified vectors, probably related to timing attacks and AuthInteractiveFailureRandomTimeout.
16670 CVE-2007-2783 Exec Code Bypass 2007-05-21 2018-10-16
10.0
None Remote Low Not required Complete Complete Complete
Unspecified vulnerability in Rational Soft Hidden Administrator 1.7 and earlier allows remote attackers to bypass authentication and execute arbitrary code via unspecified vectors. NOTE: this issue has no actionable information, and perhaps should not be included in CVE.
16671 CVE-2007-2776 2007-05-21 2017-10-11
10.0
None Remote Low Not required Complete Complete Complete
AlstraSoft Template Seller Pro 3.25 and earlier sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to inject a credential variable setting and obtain administrative access via a direct request to admin/changeinfo.php.
16672 CVE-2007-2775 2007-05-21 2017-10-11
10.0
None Remote Low Not required Complete Complete Complete
AlstraSoft Live Support 1.21 sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to obtain administrative access via a direct request to admin/managesettings.php.
16673 CVE-2007-2771 Exec Code Overflow 2007-05-21 2017-07-29
9.3
None Remote Medium Not required Complete Complete Complete
Stack-based buffer overflow in the LEAD Technologies LeadTools JPEG 2000 LEADJ2K.LEADJ2K.140 ActiveX control (LTJ2K14.ocx) 14.5.0.35 allows remote attackers to execute arbitrary code via a long BitmapDataPath property.
16674 CVE-2007-2770 Exec Code Overflow 2007-05-21 2017-10-19
9.3
None Remote Medium Not required Complete Complete Complete
Stack-based buffer overflow in Eudora 7.1 allows user-assisted, remote SMTP servers to execute arbitrary code via a long SMTP reply. NOTE: the user must click through a warning about a possible buffer overflow exploit to trigger this issue.
16675 CVE-2007-2763 Exec Code Overflow 2007-05-18 2017-07-29
10.0
None Remote Low Not required Complete Complete Complete
Buffer overflow in the UnlockSupport function in the LockModules subsystem in a certain ActiveX control in ltmm15.dll in Sienzo Digital Music Mentor (DMM) 2.6.0.4 allows remote attackers to execute arbitrary code via a long string in the second argument, a different issue than CVE-2007-2564.
16676 CVE-2007-2760 +Priv 2007-05-18 2017-07-29
9.0
None Remote Low ??? Complete Complete Complete
The canUpdate function in model/MRole.java in Adempiere before 3.1.6 does not properly validate user roles, which allows remote authenticated read-only users to gain read-write privileges. NOTE: some of these details are obtained from third party information.
16677 CVE-2007-2758 Exec Code Overflow Dir. Trav. 2007-05-18 2017-07-29
9.3
None Remote Medium Not required Complete Complete Complete
Multiple buffer overflows in WinImage 8.0.8000 allow user-assisted remote attackers to execute arbitrary code via a FAT image that contains long directory names in a deeply nested directory structure, which triggers (1) a stack-based buffer overflow during extraction, or (2) a heap-based buffer overflow during traversal.
16678 CVE-2007-2755 2007-05-17 2017-10-11
10.0
None Remote Low Not required Complete Complete Complete
The PrecisionID Barcode 1.9 ActiveX control in PrecisionID_Barcode.dll, when Internet Explorer 6 is used, allows remote attackers to overwrite arbitrary files via a full pathname to the SaveToFile function, a different vulnerability than CVE-2007-2744.
16679 CVE-2007-2741 119 DoS Exec Code Overflow 2007-05-17 2017-07-29
9.3
None Remote Medium Not required Complete Complete Complete
Stack-based buffer overflow in Little CMS (lcms) before 1.15 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted ICC profile in a JPG file.
16680 CVE-2007-2736 Exec Code File Inclusion 2007-05-17 2017-10-11
10.0
None Remote Low Not required Complete Complete Complete
PHP remote file inclusion vulnerability in index.php in Achievo 1.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the config_atkroot parameter.
16681 CVE-2007-2719 287 2007-05-16 2018-10-16
10.0
None Remote Low Not required Complete Complete Complete
Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie.
16682 CVE-2007-2715 2007-05-16 2017-10-11
10.0
None Remote Low Not required Complete Complete Complete
Admin/users.php in Snaps! Gallery 1.4.4 allows remote attackers to change arbitrary usernames and passwords via the (1) username, or the (2) password and password2 parameters in an edit action.
16683 CVE-2007-2714 2007-05-16 2017-07-29
10.0
None Remote Low Not required Complete Complete Complete
Unspecified vulnerability in akismet.php in Matt Mullenweg Akismet before 2.0.2, a WordPress plugin, has unknown impact and attack vectors.
16684 CVE-2007-2713 2007-05-16 2018-10-16
10.0
None Remote Low Not required Complete Complete Complete
ifdate 2.x sends a redirect to the web browser but does not exit when administrative credentials are missing, which allows remote attackers to obtain administrative access via a direct request for the admin/ URI.
16685 CVE-2007-2712 2007-05-16 2017-07-29
10.0
None Remote Low Not required Complete Complete Complete
Unspecified vulnerability in MH Software Connect Daily before 3.3.3 has unknown impact and attack vectors.
16686 CVE-2007-2711 Exec Code Overflow 2007-05-16 2017-10-11
10.0
None Remote Low Not required Complete Complete Complete
Stack-based buffer overflow in TinyIdentD 2.2 and earlier allows remote attackers to execute arbitrary code via a long string to TCP port 113.
16687 CVE-2007-2687 Exec Code Overflow 2007-05-24 2018-10-16
10.0
None Remote Low Not required Complete Complete Complete
Stack-based buffer overflow in the MicroWorld Agent service (MWAGENT.EXE) in MicroWorld Technologies eScan before 9.0.718.1 allows remote attackers to execute arbitrary code via a long command.
16688 CVE-2007-2667 Exec Code Overflow 2007-05-14 2017-10-11
9.3
None Remote Medium Not required Complete Complete Complete
Buffer overflow in the DB Software Laboratory VImpX ActiveX control in VImpX.ocx 4.7.3 allows remote attackers to execute arbitrary code via a long LogFile parameter.
16689 CVE-2007-2648 Exec Code Overflow 2007-05-14 2017-07-29
9.3
None Remote Medium Not required Complete Complete Complete
Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control (comparerax.ocx) allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function.
16690 CVE-2007-2645 DoS Exec Code Overflow 2007-05-14 2018-10-16
9.3
None Remote Medium Not required Complete Complete Complete
Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted EXIF data, involving the (1) doff or (2) s variable.
16691 CVE-2007-2644 2007-05-13 2017-10-11
9.4
None Remote Low Not required None Complete Complete
A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename.
16692 CVE-2007-2639 Dir. Trav. 2007-05-13 2018-10-16
10.0
None Remote Low Not required Complete Complete Complete
Directory traversal vulnerability in TFTPdWin 0.4.2 allows remote attackers to read or modify arbitrary files outside the TFTP root via unspecified vectors.
16693 CVE-2007-2638 Bypass +Info 2007-05-13 2018-10-16
10.0
None Remote Low Not required Complete Complete Complete
eFileCabinet 3.3 allows remote attackers to bypass authentication and access restricted portions of the interface via an invalid filecabinetnumber, which can be leveraged to obtain sensitive information or create new data structures.
16694 CVE-2007-2633 Dir. Trav. 2007-05-13 2017-07-29
10.0
None Remote Low Not required Complete Complete Complete
Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files via a .. (dot dot) in the template parameter.
16695 CVE-2007-2616 Exec Code Overflow 2007-05-11 2017-07-29
10.0
None Remote Low Not required Complete Complete Complete
Stack-based buffer overflow in the SSL version of the NMDMC.EXE service in Novell NetMail 3.52e FTF2 and probably earlier allows remote attackers to execute arbitrary code via a crafted request.
16696 CVE-2007-2601 Exec Code Overflow 2007-05-11 2017-10-11
9.3
None Remote Medium Not required Complete Complete Complete
Buffer overflow in a certain ActiveX control in the GDivX Zenith Player AviFixer class in fix.dll 1.0.0.1 allows remote attackers to execute arbitrary code via a long SetInputFile property value.
16697 CVE-2007-2598 Exec Code Sql 2007-05-11 2017-10-11
10.0
None Remote Low Not required Complete Complete Complete
SQL injection vulnerability in print.php in SimpleNews 1.0.0 FINAL allows remote attackers to execute arbitrary SQL commands via the news_id parameter.
16698 CVE-2007-2588 DoS Exec Code Overflow 2007-05-10 2017-07-29
9.3
None Remote Medium Not required Complete Complete Complete
Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) HttpDownloadFile, (2) Open, (3) OpenWebFile, (4) DoOleCommand, (5) FTPDownloadFile, (6) FTPUploadFile, (7) HttpUploadFile, (8) Save, or (9) SaveWebFile function.
16699 CVE-2007-2586 863 1 Exec Code Overflow 2007-05-10 2020-05-22
9.3
None Remote Medium Not required Complete Complete Complete
The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which allows remote attackers to execute arbitrary code, and have other impact including reading startup-config, as demonstrated by a crafted MKD command that involves access to a VTY device and overflows a buffer, aka bug ID CSCek55259.
16700 CVE-2007-2585 Exec Code Overflow 2007-05-10 2017-07-29
9.3
None Remote Medium Not required Complete Complete Complete
Stack-based buffer overflow in the Verify function in the BarCodeWiz ActiveX control 2.0 and 2.52 (BarcodeWiz.dll) allows remote attackers to execute arbitrary code via a long argument.
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.