deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-4077
Published: 2007-07-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to inject arbitrary web script or HTML via the (1) msg, (2) page, (3) viewkey, or (4) viewtype parameter to (a) view_video.php; the (5) next parameter to (b) signup.php; the (6) search_id parameter to (c) search_result.php; the (7) category or (8) page parameter to (d) video.php; the (9) receiver parameter to (e) compose.php; the (10) catgy parameter to (f) groups.php; the (11) channelname parameter to (g) siteadmin/channels.php; or the (12) uname parameter to (h) siteadmin/muser.php.
CVSS Score: 4.3 (MEDIUM)
References: http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html; http://osvdb.org/37277; http://osvdb.org/37278
CVE: CVE-2007-4078
Published: 2007-07-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Text Ads Enterprise allow remote attackers to inject arbitrary web script or HTML via the (1) r parameter to (a) forgot_uid.php, the (2) query or (3) sk parameter to (b) search_results.php, or (4) the pageId parameter to (c) website_page.php.
CVSS Score: 4.3 (MEDIUM)
References: http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html; http://osvdb.org/37447; http://osvdb.org/37448
CVE: CVE-2007-4079
Published: 2007-07-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft SMS Text Messaging Enterprise allow remote attackers to inject arbitrary web script or HTML via the (1) domain or (2) q parameter to (a) admin/membersearch.php, or (3) the userid parameter to (b) admin/edituser.php.
CVSS Score: 4.3 (MEDIUM)
References: http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html; http://osvdb.org/37867; http://osvdb.org/37868
CVE: CVE-2007-4080
Published: 2007-07-30
Description: Cross-site scripting (XSS) vulnerability in index.php AlstraSoft E-Friends allows remote attackers to inject arbitrary web script or HTML via the p_id parameter in a people_card action.  NOTE: this might overlap CVE-2006-2564.
CVSS Score: 6.4 (MEDIUM)
References: http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html; http://osvdb.org/37266; http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html
CVE: CVE-2007-4081
Published: 2007-07-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to inject arbitrary web script or HTML via vectors in (a) merchants/index.php, including the (1) id or (2) msg parameter in a programedit action; the (3) pgmid parameter in an uploadProducts action; the (4) d, (5) m, or (6) y parameter in a daily action; the (7) err parameter in a ProgramReport action; the (8) i, (9) txtto, (10) txtfrom, or (11) programs parameter in a LinkReport action; or the (12) msg parameter in an add_money action; and one vector in (b) merchants/temp.php using (13) the rowid parameter.  NOTE: vector 7 might overlap CVE-2005-3795.1.
CVSS Score: 4.3 (MEDIUM)
References: http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html; http://osvdb.org/46953; http://osvdb.org/46954
CVE: CVE-2007-4082
Published: 2007-07-30
Description: Cross-site scripting (XSS) vulnerability in contact_author.php AlstraSoft Article Manager Pro allows remote attackers to inject arbitrary web script or HTML via the userid parameter.
CVSS Score: 4.3 (MEDIUM)
References: http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html; http://osvdb.org/37088; http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html
CVE: CVE-2007-4083
Published: 2007-07-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to inject arbitrary web script or HTML via (1) the cat_id parameter to search.php or the (2) typ parameter to register.php.
CVSS Score: 4.3 (MEDIUM)
References: http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html; http://osvdb.org/37092; http://osvdb.org/37093
CVE: CVE-2007-4084
Published: 2007-07-30
Description: Multiple SQL injection vulnerabilities in AlstraSoft Affiliate Network Pro allow remote attackers to execute arbitrary SQL commands via (1) the pgmid parameter in an uploadProducts action to merchants/index.php and possibly (2) the rowid parameter to merchants/temp.php.
CVSS Score: 7.5 (HIGH)
References: http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html; http://osvdb.org/37869; http://osvdb.org/37870
CVE: CVE-2007-4085
Published: 2007-07-30
Description: Multiple SQL injection vulnerabilities in AlstraSoft AskMe Pro allow remote attackers to execute arbitrary SQL commands via the (1) que_id parameter to forum_answer.php or (2) the cat_id parameter to search.php.
CVSS Score: 6.8 (MEDIUM)
References: http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html; http://osvdb.org/37095; http://osvdb.org/37096
CVE: CVE-2007-4086
Published: 2007-07-30
Description: Multiple SQL injection vulnerabilities in AlstraSoft Video Share Enterprise allow remote attackers to execute arbitrary SQL commands via (1) the gid parameter to gmembers.php, or (2) the UID parameter to (a) uvideos.php, (b) ugroups.php, (c) uprofile.php, (d) ufavour.php, (e) ufriends.php, or (f) uplaylist.php.
CVSS Score: 6.8 (MEDIUM)
References: http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html; http://osvdb.org/37872; http://osvdb.org/37873
CVE: CVE-2007-4087
Published: 2007-07-30
Description: AlstraSoft Video Share Enterprise allows remote attackers to obtain sensitive information (the full path) via (1) a ' (quote) character in the category parameter to view_video.php, or (2) an XSS sequence in the UID parameter to (a) uprofile.php, (b) channel_detail.php, (c) uvideos.php, (d) groups_home.php, or (e) ufriends.php.
CVSS Score: 4.3 (MEDIUM)
References: http://lostmon.blogspot.com/2007/07/alstrasoft-multiple-products-multiple.html; http://osvdb.org/46947; http://osvdb.org/46948
CVE: CVE-2007-4088
Published: 2007-07-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via the (1) id, (2) f, (3) quote, and (4) act parameters to cp.php; the (5) u parameter to user.php; the (6) f parameter to post.php; the (7) s parameter to topic.php; the (8) quote, (9) t, (10) poll, and (11) p parameters to post.php; the (12) Message Title field of a private message (PM) in mode 6 of cp.php; the (13) title field of a private message (PM) in mode 7 of cp.php; and (14) allow user-assisted remote attackers to inject arbitrary web script or HTML via a dosearch action to search.php, which reflects the first lines of all posts by a user.  NOTE: the act parameter to help.php and the p parameter to report.php are already covered by CVE-2006-4708.  NOTE: vectors 12 and 13 might overlap CVE-2006-6283.1.  NOTE: vector 14 might overlap CVE-2006-4708.b.
CVSS Score: 4.3 (MEDIUM)
References: http://lostmon.blogspot.com/2007/07/vikingboard-multiple-cross-site.html; http://osvdb.org/37352; http://osvdb.org/37354
CVE: CVE-2007-4089
Published: 2007-07-30
Description: Vikingboard 0.1.2 allows remote attackers to obtain sensitive information via the debug parameter to (1) forum.php, (2) cp.php, and possibly other unspecified components.
CVSS Score: 4.3 (MEDIUM)
References: http://lostmon.blogspot.com/2007/07/vikingboard-debug-information.html; http://lostmon.blogspot.com/2007/07/vikingboard-multiple-cross-site.html; http://osvdb.org/36902
CVE: CVE-2007-4090
Published: 2007-07-30
Description: Multiple cross-site scripting (XSS) vulnerabilities in Vikingboard 0.1.2 allow remote attackers to inject arbitrary web script or HTML via (1) the URI to inc/lib/screen.php or (2) the title parameter to post.php.  NOTE: vector 2 might overlap CVE-2006-6283.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/36904; http://osvdb.org/36905; http://secunia.com/advisories/26196
CVE: CVE-2007-4092
Published: 2007-07-30
Description: Directory traversal vulnerability in index.php in iFoto 1.0.1 and earlier allows remote attackers to list arbitrary directories, and possibly download arbitrary photos, via a .. (dot dot) in the dir parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://lostmon.blogspot.com/2007/07/ifoto-traversal-folder-enumeration.html; http://secunia.com/advisories/26186; http://www.securityfocus.com/archive/1/497027/100/0/threaded
CVE: CVE-2007-4093
Published: 2007-07-30
Description: Minb Is Not a Blog (minb) stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database containing usernames and encrypted passwords via a direct request for db/users.db.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/38997; http://securityreason.com/securityalert/2931; http://www.securityfocus.com/archive/1/474421/100/0/threaded
CVE: CVE-2007-4094
Published: 2007-07-30
Description: PHP remote file inclusion vulnerability in library/authorize.php in IDevSpot PhpHostBot allows remote attackers to execute arbitrary PHP code via a URL in the login_form parameter, a different vector than CVE-2006-3776.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/2932; http://www.m3ks.org/adv/m3ks-adv-24.7.07.txt; http://www.securityfocus.com/archive/1/474682/100/0/threaded
CVE: CVE-2007-4095
Published: 2007-07-30
Description: SQL injection vulnerability in BSM Store Dependent Forums 1.02 allows remote attackers to execute arbitrary SQL commands via a Username field in an unspecified component, probably the FrmUserName parameter in login.asp.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://secunia.com/advisories/26212; http://securityreason.com/securityalert/2935; http://www.securityfocus.com/archive/1/474687/100/0/threaded
CVE: CVE-2007-4096
Published: 2007-07-30
Description: Buffer overflow in Tor before 0.1.2.15, when using BSD natd support, allows remote attackers to cause a denial of service via unspecified vectors.
CVSS Score: 5.8 (MEDIUM)
References: http://archives.seul.org/or/announce/Jul-2007/msg00000.html; http://osvdb.org/46968; http://secunia.com/advisories/26140
CVE: CVE-2007-4097
Published: 2007-07-30
Description: Tor before 0.1.2.15 sends "destroy cells" containing the reason for tearing down a circuit, which allows remote attackers to obtain sensitive information, contrary to specifications.
CVSS Score: 6.4 (MEDIUM)
References: http://archives.seul.org/or/announce/Jul-2007/msg00000.html; http://osvdb.org/46969; http://secunia.com/advisories/26140
CVE: CVE-2007-4098
Published: 2007-07-30
Description: Tor before 0.1.2.15 does not properly distinguish "streamids from different exits," which might allow remote attackers with control over Tor routers to inject cells into arbitrary streams.
CVSS Score: 5.8 (MEDIUM)
References: http://archives.seul.org/or/announce/Jul-2007/msg00000.html; http://osvdb.org/46970; http://secunia.com/advisories/26140
CVE: CVE-2007-4099
Published: 2007-07-30
Description: Tor before 0.1.2.15 can select a guard node beyond the first listed never-before-connected-to guard node, which allows remote attackers with control of certain guard nodes to obtain sensitive information and possibly leverage further attacks.
CVSS Score: 5.8 (MEDIUM)
References: http://archives.seul.org/or/announce/Jul-2007/msg00000.html; http://osvdb.org/46971; http://secunia.com/advisories/26140
CVE: CVE-2007-3387
Published: 2007-07-30
Description: Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-190
References: ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl1.patch; ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc; http://bugs.gentoo.org/show_bug.cgi?id=187139
CVE: CVE-2007-2953
Published: 2007-07-31
Description: Format string vulnerability in the helptags_one function in src/ex_cmds.c in Vim 6.4 and earlier, and 7.x up to 7.1, allows user-assisted remote attackers to execute arbitrary code via format string specifiers in a help-tags tag in a help file, related to the helptags command.
CVSS Score: 6.8 (MEDIUM)
References: ftp://ftp.vim.org/pub/vim/patches/7.1/7.1.039; http://secunia.com/advisories/25941; http://secunia.com/advisories/26285
CVE: CVE-2007-4100
Published: 2007-07-31
Description: MLDonkey before 2.9.0 does not load certain code from $MLDONKEY/web_infos/ before the network modules become active, which allows remote attackers to bypass the IP blocklist.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/38626; http://secunia.com/advisories/26230; http://sourceforge.net/project/shownotes.php?release_id=527976
CVE: CVE-2007-4101
Published: 2007-07-31
Description: Multiple PHP remote file inclusion vulnerabilities in Madoa Poll 1.1 allow remote attackers to execute arbitrary PHP code via the Madoa parameter to (1) index.php, (2) vote.php, and (3) admin.php.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/37262; http://osvdb.org/37263; http://osvdb.org/37264
CVE: CVE-2007-4102
Published: 2007-07-31
Description: Cross-site scripting (XSS) vulnerability in search.php for sBlog 0.7.3 Beta allows remote attackers to inject arbitrary HTML and web script via a leading '"/></> sequence in the search string.
CVSS Score: 4.3 (MEDIUM)
References: http://securityreason.com/securityalert/2942; http://www.securityfocus.com/archive/1/474822/100/0/threaded; http://www.securityfocus.com/bid/25098
CVE: CVE-2007-4103
Published: 2007-07-31
Description: The IAX2 channel driver (chan_iax2) in Asterisk Open 1.2.x before 1.2.23, 1.4.x before 1.4.9, and Asterisk Appliance Developer Kit before 0.6.0, when configured to allow unauthenticated calls, allows remote attackers to cause a denial of service (resource exhaustion) via a flood of calls that do not complete a 3-way handshake, which causes an ast_channel to be allocated but not released.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: http://bugs.gentoo.org/show_bug.cgi?id=185713; http://ftp.digium.com/pub/asa/ASA-2007-018.pdf; http://osvdb.org/38197
CVE: CVE-2007-4104
Published: 2007-07-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in the WP-FeedStats before 2.4 plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, one of which involves an rss2 feed with an invalid or missing blog with an XSS sequence in the query string.
CVSS Score: 4.3 (MEDIUM)
References: http://blogsecurity.net/news/news-130707/; http://blogsecurity.net/wordpress/news-260707/; http://bueltge.de/plugin-wp-feedstats-in-neuer-version/481/
CVE: CVE-2007-4105
Published: 2007-07-31
Description: A certain ActiveX control in BaiduBar.dll in Baidu Soba Search Bar 5.4 allows remote attackers to execute arbitrary code via a request containing "a link to download and a file to execute," possibly involving remote file inclusion.
CVSS Score: 9.3 (HIGH)
References: http://secunia.com/advisories/26256; http://www.fortiguardcenter.com/advisory/FGA-2007-10.html; http://www.securityfocus.com/archive/1/475320/100/0/threaded
CVE: CVE-2007-4106
Published: 2007-07-31
Description: SQL injection vulnerability in login.asp in CodeWidgets Pay Roll - Time Sheet and Punch Card Application With Web Interface allows remote attackers to execute arbitrary SQL commands via the Password parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://outlaw.aria-security.info/?p=10; http://secunia.com/advisories/26275; http://securityreason.com/securityalert/2950
CVE: CVE-2007-4107
Published: 2007-07-31
Description: SQL injection vulnerability in editpost.php in phpMyForum before 4.1.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/36276; http://secunia.com/advisories/26156; http://support.phpmyforum.de/topic.php?id=4665
CVE: CVE-2007-4108
Published: 2007-07-31
Description: SQL injection vulnerability in sign_in.aspx in WebEvents (Online Event Registration Template) allows remote attackers to execute arbitrary SQL commands via the Password parameter.
CVSS Score: 7.5 (HIGH)
References: http://outlaw.aria-security.info/?p=10; http://secunia.com/advisories/26252; http://securityreason.com/securityalert/2948
CVE: CVE-2007-4109
Published: 2007-07-31
Description: SQL injection vulnerability in sign_in.aspx in WebStore (Online Store Application Template) allows remote attackers to execute arbitrary SQL commands via the Password parameter.
CVSS Score: 7.5 (HIGH)
References: http://outlaw.aria-security.info/?p=10; http://secunia.com/advisories/26237; http://securityreason.com/securityalert/2947
CVE: CVE-2007-4110
Published: 2007-07-31
Description: SQL injection vulnerability in sign_in.aspx in Message Board / Threaded Discussion Forum Application Template allows remote attackers to execute arbitrary SQL commands via the Password parameter.
CVSS Score: 7.5 (HIGH)
References: http://outlaw.aria-security.info/?p=10; http://secunia.com/advisories/26245; http://securityreason.com/securityalert/2936
CVE: CVE-2007-4111
Published: 2007-07-31
Description: SQL injection vulnerability in the login script in Real Estate listing website application template, when logging in as user or manager, allows remote attackers to execute arbitrary SQL commands via the Password parameter.
CVSS Score: 6.8 (MEDIUM)
References: http://outlaw.aria-security.info/?p=10; http://secunia.com/advisories/26268; http://securityreason.com/securityalert/2949
CVE: CVE-2007-4112
Published: 2007-07-31
Description: Multiple SQL injection vulnerabilities in Advanced Webhost Billing System (AWBS) before 2.6.0, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via unspecified vectors.  NOTE: this can be leveraged for XSS attacks that "bypass AWBS's anti-XSS input validation."
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/37257; http://secunia.com/advisories/26214; http://www.justinsamuel.com/2007/06/10/awbs-magic_quotes_gpc-off-sql-injection-and-xss-vulnerabilities/
CVE: CVE-2007-4113
Published: 2007-07-31
Description: Unspecified vulnerability in Advanced Webhost Billing System (AWBS) before 2.6.0 allows remote authenticated users to obtain configuration data about other dedicated servers via unspecified vectors.
CVSS Score: 3.5 (LOW)
References: http://osvdb.org/38690; http://secunia.com/advisories/26214; http://www.justinsamuel.com/2007/06/10/awbs-dedicated-server-info-visible-to-all-users-vulnerability/
CVE: CVE-2007-4114
Published: 2007-07-31
Description: Multiple SQL injection vulnerabilities in unuttum.asp in SuskunDuygular Uyelik Sistemi 1.2 allow remote attackers to execute arbitrary SQL commands via the (1) kadi or (2) email parameter.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/26260; http://securityreason.com/securityalert/2945; http://www.securityfocus.com/archive/1/474929/100/0/threaded
CVE: CVE-2007-4115
Published: 2007-07-31
Description: Multiple cross-site scripting (XSS) vulnerabilities in IT!CMS (itcms) 0.2 allow remote attackers to inject arbitrary web script or HTML via the wndtitle parameter to (1) lang-en.php, (2) menu-ed.php, or (3) titletext-ed.php.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/37254; http://osvdb.org/37255; http://osvdb.org/37256
CVE: CVE-2007-4116
Published: 2007-07-31
Description: SQL injection vulnerability in philboard_forum.asp in Metyus Forum Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the forumid parameter.  NOTE: this might be related to CVE-2007-0920 or CVE-2007-3884.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/26253; http://securityreason.com/securityalert/2951; http://www.securityfocus.com/archive/1/474815/100/0/threaded
CVE: CVE-2007-4117
Published: 2007-08-01
Description: PHP remote file inclusion vulnerability in index.php in phpWebFileManager 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the PN_PathPrefix parameter.  NOTE: this issue is disputed by a reliable third party, who demonstrates that PN_PathPrefix is defined before use
CVSS Score: 6.8 (MEDIUM)
References: http://securityreason.com/securityalert/2940; http://www.attrition.org/pipermail/vim/2007-July/001744.html; http://www.securityfocus.com/archive/1/475095/100/0/threaded
CVE: CVE-2007-4118
Published: 2007-08-01
Description: PHP remote file inclusion vulnerability in includes/functions.inc.php in phpVoter 0.6 allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/39030; http://securityreason.com/securityalert/2939; http://www.securityfocus.com/archive/1/475100/100/0/threaded
CVE: CVE-2007-4119
Published: 2007-08-01
Description: Multiple SQL injection vulnerabilities in yonetici.asp in Berthanas Ziyaretci Defteri 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) user and (2) Pass fields.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/26371; http://securityreason.com/securityalert/2943; http://www.securityfocus.com/archive/1/474930/100/0/threaded
CVE: CVE-2007-4120
Published: 2007-08-01
Description: Multiple PHP remote file inclusion vulnerabilities in Jelsoft vBulletin 3.6.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) classfile parameter to includes/functions.php, the (2) nextitem parameter to includes/functions_cron.php, and the (3) specialtemplates parameter to includes/functions_forumdisplay.php. NOTE: this issue is disputed by a reliable third party who states "further investigation has revealed that the application is not vulnerable to this issue."  The original researcher also has a history of erroneous claims
CVSS Score: 9.3 (HIGH)
References: http://securityreason.com/securityalert/2941; http://www.securityfocus.com/archive/1/475105/100/0/threaded; http://www.securityfocus.com/archive/1/475151/100/0/threaded
CVE: CVE-2007-4121
Published: 2007-08-01
Description: Multiple SQL injection vulnerabilities in admin.aspx in E-Commerce Scripts Shopping Cart Script, Multi-Vendor E-Shop Script, and Auction Script allow remote attackers to execute arbitrary SQL commands via the (1) EmailAdd (Username) and (2) Pass (password) parameters.  NOTE: some of these details are obtained from third party information.
CVSS Score: 10.0 (HIGH)
References: http://outlaw.aria-security.info/?p=11; http://secunia.com/advisories/26277; http://securityreason.com/securityalert/2944
CVE: CVE-2007-4122
Published: 2007-08-01
Description: Unspecified vulnerability in Hitachi JP1/Cm2/Hierarchical Viewer (HV) 06-00 through 06-71-/B allows remote attackers to cause a denial of service (application stop and web interface outage) via certain "unexpected data."
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/37853; http://secunia.com/advisories/26242; http://www.hitachi-support.com/security_e/vuls_e/HS07-021_e/index-e.html
CVE: CVE-2007-4123
Published: 2007-08-01
Description: The Groupmax Scheduler_Facilities management tool in Hitachi Groupmax Groupware Server 07-00-/F through 07-32-/A before 20070731 does not properly manage schedule server configuration data, which might allow attackers to obtain sensitive information via unspecified vectors.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/46972; http://www.hitachi-support.com/security_e/vuls_e/HS07-023_e/index-e.html; http://www.vupen.com/english/advisories/2007/2724