Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2006-6977 State: PUBLISHED Published: 2007-02-08T17:00:00 Last Updated: 2024-08-07T20:50:06.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "Basic Toolbar Selection" in FreeTextBox allows remote attackers to execute arbitrary JavaScript via the javascript: URI in the (1) href or (2) onmouseover attribute of the A HTML tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.newffr.com/viewtopic.php?forum=26&topic=11683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26539 - http://www.securityfocus.com/archive/1/434006/30/4980/threaded
CVE ID: CVE-2006-6978 State: PUBLISHED Published: 2007-02-08T17:00:00 Last Updated: 2024-08-07T20:50:06.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "Basic Toolbar Selection" in FCKEditor allows remote attackers to execute arbitrary JavaScript via the javascript: URI in the (1) href or (2) onmouseover attribute of the A HTML tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.newffr.com/viewtopic.php?forum=26&topic=11683 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26539 - http://www.securityfocus.com/archive/1/434006/30/4980/threaded
CVE ID: CVE-2006-6979 State: PUBLISHED Published: 2007-02-08T18:00:00 Last Updated: 2024-08-07T20:50:04.608Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ruby handlers in the Magnatune component in Amarok do not properly quote text in certain contexts, probably including construction of an unzip command line, which allows attackers to execute arbitrary commands via shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23984 - http://www.vupen.com/english/advisories/2007/0613 - http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html - http://bugs.gentoo.org/show_bug.cgi?id=166901 - http://secunia.
.com/archive/suse-security-announce/2007-Jan/0015.html - http://bugs.gentoo.org/show_bug.cgi?id=166901 - http://secunia.com/advisories/24510 - http://www.securityfocus.com/bid/22568 - http://bugs.kde.org/show_bug.cgi?id=138499 - http://security.gentoo.org/glsa/glsa-200703-11.xml - http://secunia.com/advisories/24159
CVE ID: CVE-2006-6980 State: PUBLISHED Published: 2007-02-08T18:00:00 Last Updated: 2024-08-07T20:50:05.687Z Vendors: n/a Products: n/a Problem Types: n/a Description: The magnatune.com album browser in Amarok allows attackers to cause a denial of service (application crash) via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/23984 - http://lists.suse.com/archive/suse-security-announce/2007-Jan/0015.html - http://osvdb.org/35863
CVE ID: CVE-2006-6981 State: PUBLISHED Published: 2007-02-08T18:00:00 Last Updated: 2024-08-07T20:50:04.616Z Vendors: n/a Products: n/a Problem Types: n/a Description: 3proxy 0.5 to 0.5.2, when NT-encoded passwords are being used, allows remote attackers to cause a denial of service (blocked account) via unspecified vectors related to NTLM authentication, which causes a password hash to be overwritten. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/38201 - http://3proxy.ru/0.5.3g/Changelog.txt
CVE ID: CVE-2006-6982 State: PUBLISHED Published: 2007-02-08T18:00:00 Last Updated: 2024-08-07T20:50:05.710Z Vendors: n/a Products: n/a Problem Types: n/a Description: 3proxy 0.5 to 0.5.2 does not offer NTLM authentication before basic authentication, which might cause browsers with incomplete RFC2616/RFC2617 support to use basic cleartext authentication even if NTLM is available, which makes it easier for attackers to steal credentials. Additional Analyst Notes: - CVE Program Container: References: - http://3proxy.ru/0.5.3g/Changelog.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/38205
CVE ID: CVE-2006-6983 State: PUBLISHED Published: 2007-02-09T01:00:00 Last Updated: 2024-08-07T20:50:06.091Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in MYweb4net Browser 3.8.8.0 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/
to CVE-2006-3280. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/multiple-browsers-information.html
CVE ID: CVE-2006-6984 State: PUBLISHED Published: 2007-02-09T01:00:00 Last Updated: 2024-08-07T20:50:04.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in GreenBrowser 3.4.0622 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/mult
VE-2006-3280. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/multiple-browsers-information.html
CVE ID: CVE-2006-6985 State: PUBLISHED Published: 2007-02-09T01:00:00 Last Updated: 2024-08-07T20:50:04.571Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in Maxthon 1.5.6 build 42 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/mul
CVE-2006-3280. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/multiple-browsers-information.html
CVE ID: CVE-2006-6986 State: PUBLISHED Published: 2007-02-09T01:00:00 Last Updated: 2024-08-07T20:50:06.017Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in PhaseOut 5.4.4 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/multiple-br
-3280. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/multiple-browsers-information.html
CVE ID: CVE-2006-6987 State: PUBLISHED Published: 2007-02-09T01:00:00 Last Updated: 2024-08-07T20:50:06.001Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in FineBrowser Freeware 3.2.2 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06
CVE ID: CVE-2006-6988 State: PUBLISHED Published: 2007-02-09T01:00:00 Last Updated: 2024-08-07T20:50:04.379Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in Slim Browser 4.07 build 100 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/0
y to CVE-2006-3280. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/multiple-browsers-information.html
CVE ID: CVE-2006-6989 State: PUBLISHED Published: 2007-02-09T01:00:00 Last Updated: 2024-08-07T20:50:06.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in NetCaptor 4.5.7 Personal Edition allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2
bility to CVE-2006-3280. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/multiple-browsers-information.html
CVE ID: CVE-2006-6990 State: PUBLISHED Published: 2007-02-09T01:00:00 Last Updated: 2024-08-07T20:50:05.946Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in Enigma Browser 3.8.8 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/multi
E-2006-3280. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/multiple-browsers-information.html
CVE ID: CVE-2006-6991 State: PUBLISHED Published: 2007-02-09T01:00:00 Last Updated: 2024-08-07T20:50:05.592Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in Fast Browser Pro 8.1 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/multi
CVE ID: CVE-2006-6992 State: PUBLISHED Published: 2007-02-09T01:00:00 Last Updated: 2024-08-07T20:50:05.927Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-domain vulnerability in GoSuRF Browser 2.62 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, a similar vulnerability to CVE-2006-3280. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/multip
-2006-3280. Additional Analyst Notes: - CVE Program Container: References: - http://pridels0.blogspot.com/2006/06/multiple-browsers-information.html
CVE ID: CVE-2006-6993 State: PUBLISHED Published: 2007-02-12T11:00:00 Last Updated: 2024-08-07T20:50:05.860Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in pages/addcomment2.php in Neuron Blog 1.1 allow remote attackers to inject arbitrary SQL commands via the (1) commentname, (2) commentmail, (3) commentwebsite, and (4) comment parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19703 - http://www.vupen.com/english/advisories/2006/1406
CVE ID: CVE-2006-6994 State: PUBLISHED Published: 2007-02-12T11:00:00 Last Updated: 2024-08-07T20:50:05.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unrestricted file upload vulnerability in add.asp in OzzyWork Gallery, possibly 2.0 and earlier, allows remote attackers to upload and execute arbitrary ASP files by removing the client-side security checks. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=bugtraq&m=114723238307299&w=2 - http://www.osvdb.org/25427 - http://www.vupen.com/english/advisories/2006/1768 - https://exchange.xforce.ibmcloud.com/vulnerabilities/26365 - http://secunia.com/advisories/20049 - http://www.securityfocus.co
//exchange.xforce.ibmcloud.com/vulnerabilities/26365 - http://secunia.com/advisories/20049 - http://www.securityfocus.com/bid/17946
CVE ID: CVE-2006-6995 State: PUBLISHED Published: 2007-02-12T11:00:00 Last Updated: 2024-08-07T20:50:05.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: mycontacts.php in V3 Chat allows remote authenticated users to gain privileges as other users via a modified membername parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/18543 - http://www.securityfocus.com/archive/1/437755/100/200/threaded - http://www.vupen.com/english/advisories/2006/2474
CVE ID: CVE-2006-6996 State: PUBLISHED Published: 2007-02-12T11:00:00 Last Updated: 2024-08-07T20:50:05.823Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in warforge.NEWS 1.0 allow remote attackers to inject arbitrary HTML and web script via the (1) title and (2) newspost parameters to (a) newsadd.php, and the (3) name, title, and (4) comment parameters to (b) news.php, a different set of vectors than CVE-2006-1818. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/1969
d party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/19697 - https://exchange.xforce.ibmcloud.com/vulnerabilities/25901
CVE ID: CVE-2006-6997 State: PUBLISHED Published: 2007-02-12T11:00:00Z Last Updated: 2024-09-17T02:33:03.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in a cryptographic feature in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 leads to "weakened authentication security" with unknown impact and attack vectors. NOTE: due to lack of details, it is not clear whether this is the same as CVE-2006-1792. Additional Analyst Notes: - CVE Program Container: References: - http://www.mailenable.com/professionalhistory.asp - http://www.mailenable.com/enterprisehistory.asp - http://archives.neohapsis
www.mailenable.com/professionalhistory.asp - http://www.mailenable.com/enterprisehistory.asp - http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1359.html - http://www.mailenable.com/standardhistory.asp
CVE ID: CVE-2006-6998 State: PUBLISHED Published: 2007-02-12T17:00:00Z Last Updated: 2024-09-16T16:53:30.640Z Vendors: n/a Products: n/a Problem Types: n/a Description: install/loader_help.php in Headstart Solutions DeskPRO allows remote attackers to obtain configuration information via a q=phpinfo QUERY_STRING, which calls the phpinfo function. Additional Analyst Notes: - CVE Program Container: References: - http://www.zion-security.com/text/Mul_Vulnerability_DeskPro.txt
CVE ID: CVE-2006-6999 State: PUBLISHED Published: 2007-02-12T17:00:00Z Last Updated: 2024-09-16T21:07:30.432Z Vendors: n/a Products: n/a Problem Types: n/a Description: attachment.php in Headstart Solutions DeskPRO allows remote attackers to read all uploaded files by providing the file number in a modified id parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.zion-security.com/text/Mul_Vulnerability_DeskPro.txt
CVE ID: CVE-2006-7000 State: PUBLISHED Published: 2007-02-12T17:00:00Z Last Updated: 2024-09-17T00:56:28.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: Headstart Solutions DeskPRO allows remote attackers to obtain the full path via direct requests to (1) email/mail.php, (2) includes/init.php, (3) certain files in includes/cron/, and (4) jpgraph.php, (5) jpgraph_bar.php, (6) jpgraph_pie.php, and (7) jpgraph_pie3d.php in includes/graph/, which leaks the path in error messages. Additional Analyst Notes: - CVE Program Container: References: - http://www.zion-security.com/text/Mul_Vulnerability_DeskPro.txt
CVE ID: CVE-2006-7001 State: PUBLISHED Published: 2007-02-12T19:00:00Z Last Updated: 2024-09-16T22:36:22.236Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in avatar.php in PhpMyChat Plus 1.9 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the L parameter, a different issue than CVE-2006-5897. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/22782
CVE ID: CVE-2006-7002 State: PUBLISHED Published: 2007-02-12T19:00:00 Last Updated: 2024-08-07T20:50:04.570Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in add_comment.php in Wheatblog (wB) 1.1 allows remote attackers to inject arbitrary web script or HTML via the Email field. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue may overlap CVE-2006-5195. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/38097 - http://secunia.com/advisories/22783
CVE ID: CVE-2006-7003 State: PUBLISHED Published: 2007-02-12T23:00:00Z Last Updated: 2024-09-16T19:40:42.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in admin/index.php in Fusion Polls allows remote attackers to execute arbitrary PHP code via a URL in the xtrphome parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/437127/30/4380/threaded - http://www.securityfocus.com/archive/1/441493/30/4380/threaded
CVE ID: CVE-2006-7004 State: PUBLISHED Published: 2007-02-12T23:00:00 Last Updated: 2024-08-07T20:50:05.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in email_request.php in PSY Auction allows remote attackers to inject arbitrary web script or HTML via the user_id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/36360 - http://www.securityfocus.com/bid/17974 - http://www.securityfocus.com/data/vulnerabilities/exploits/PSYAuction-0515-sql-html.txt
CVE ID: CVE-2006-7005 State: PUBLISHED Published: 2007-02-12T23:00:00Z Last Updated: 2024-09-16T23:46:27.344Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in item.php in PSY Auction allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/17974 - http://www.securityfocus.com/data/vulnerabilities/exploits/PSYAuction-0515-sql-html.txt
CVE ID: CVE-2006-7006 State: PUBLISHED Published: 2007-02-12T23:00:00Z Last Updated: 2024-09-16T17:43:14.840Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in upload/admin/team.php in Robin de Graff Somery 0.4.4 allows remote attackers to execute arbitrary PHP code via a URL in the checkauth parameter. NOTE: CVE disputes this vulnerability because the checkauth parameter is only used in conditionals Additional Analyst Notes: - CVE Program Container: References: - http://www.root-security.org/danger/Somery.txt - http://archives.neohapsis.com/archives/bugtraq/2006-06/0242.html - http://packetstorm.linuxsecurity.com/0606-exploits/Somery.txt -
hives.neohapsis.com/archives/bugtraq/2006-06/0242.html - http://packetstorm.linuxsecurity.com/0606-exploits/Somery.txt - http://www.attrition.org/pipermail/vim/2007-February/001305.html - http://www.osvdb.org/27662 - http://www.securityfocus.com/bid/18412
CVE ID: CVE-2006-7007 State: PUBLISHED Published: 2007-02-12T23:00:00 Last Updated: 2024-08-07T20:50:05.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Tiny FTPd 1.4 and earlier allows remote attackers to cause a denial of service (daemon crash) via a long USER command, a different vector than CVE-2000-0133. Additional Analyst Notes: - CVE Program Container: References: - http://www.ph4nt0m.org/bbs/showthread.php?threadid=30080&goto=nextnewest - http://www.securiteam.com/exploits/5LP032KIKC.html - https://www.exploit-db.com/exploits/1758 - http://www.osvdb.org/25767
CVE ID: CVE-2006-7008 State: PUBLISHED Published: 2007-02-12T23:00:00Z Last Updated: 2024-09-17T00:00:34.386Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Joomla! before 1.0.10 has unknown impact and attack vectors, related to "securing mosmsg from misuse." NOTE: it is possible that this issue overlaps CVE-2006-1029. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/26915 - http://www.joomla.org/content/view/1510/74/ - http://secunia.com/advisories/20874
CVE ID: CVE-2006-7009 State: PUBLISHED Published: 2007-02-12T23:00:00Z Last Updated: 2024-09-17T01:00:35.593Z Vendors: n/a Products: n/a Problem Types: n/a Description: Joomla! before 1.0.10 allows remote attackers to spoof the frontend submission forms, which has unknown impact and attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.joomla.org/content/view/1510/74/ - http://secunia.com/advisories/20874
CVE ID: CVE-2006-7010 State: PUBLISHED Published: 2007-02-12T23:00:00 Last Updated: 2024-08-07T20:50:05.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mosgetparam implementation in Joomla! before 1.0.10, does not set a variable's data type to integer when the variable's default value is numeric, which has unspecified impact and attack vectors, which may permit SQL injection attacks. Additional Analyst Notes: - CVE Program Container: References: - http://www.joomla.org/content/view/1510/74/ - http://www.osvdb.org/26916 - http://secunia.com/advisories/20874
CVE ID: CVE-2006-7011 State: PUBLISHED Published: 2007-02-15T02:00:00 Last Updated: 2024-08-07T20:50:05.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHP remote file inclusion vulnerability in adminips.php in Develooping Flash Chat allows remote attackers to execute arbitrary PHP code via a URL in the banned_file parameter. NOTE: CVE disputes this vulnerability because banned_file is set to a constant value Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/437411/30/4320/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/27233 - http://www.attrition.org/pipermail/vim/2007-February/001321.html - http://www.se