deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-1589
Published: 2007-03-21
Description: TrueCrypt before 4.3, when set-euid mode is used on Linux, allows local users to cause a denial of service (filesystem unavailability) by dismounting a volume mounted by a different user.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/24627; http://www.securityfocus.com/bid/23128; http://www.truecrypt.org/docs/?s=version-history
CVE: CVE-2007-1590
Published: 2007-03-21
Description: The Grandstream BudgeTone 200 IP phone, with program 1.1.1.14 and bootloader 1.1.1.5, allows remote attackers to cause a denial of service (device crash) via SIP (1) INVITE, (2) CANCEL, or unspecified other messages with a WWW-Authenticate header containing a crafted Digest domain.
CVSS Score: 7.8 (HIGH)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/053099.html; http://osvdb.org/34347; http://secunia.com/advisories/24538
CVE: CVE-2007-0240
Published: 2007-03-22
Description: Cross-site scripting (XSS) vulnerability in Zope 2.10.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in a HTTP GET request.
CVSS Score: 4.3 (MEDIUM)
References: http://lists.suse.com/archive/suse-security-announce/2007-May/0005.html; http://secunia.com/advisories/24017; http://secunia.com/advisories/24713
CVE: CVE-2007-1591
Published: 2007-03-22
Description: VsapiNT.sys in the Scan Engine 8.0 for Trend Micro AntiVirus 14.10.1041, and other products, allows remote attackers to cause a denial of service (kernel fault and system crash) via a crafted UPX file with a certain field that triggers a divide-by-zero error.
CVSS Score: 7.8 (HIGH)
References: http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034587; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=488; http://www.securityfocus.com/archive/1/463007/100/100/threaded
CVE: CVE-2007-1592
Published: 2007-03-22
Description: net/ipv6/tcp_ipv6.c in Linux kernel 2.6.x up to 2.6.21-rc3 inadvertently copies the ipv6_fl_socklist from a listening TCP socket to child sockets, which allows local users to cause a denial of service (OOPS) or double free by opening a listening IPv6 socket, attaching a flow label, and connecting to that socket.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-119
References: http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=233478; http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=d35690beda1429544d46c8eb34b2e3a8c37ab299; http://lists.suse.com/archive/suse-security-announce/2007-May/0001.html
CVE: CVE-2007-1594
Published: 2007-03-22
Description: The handle_response function in chan_sip.c in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service (crash) via a SIP Response code 0 in a SIP packet.
CVSS Score: 7.8 (HIGH)
References: http://bugs.digium.com/view.php?id=9313; http://secunia.com/advisories/24579; http://secunia.com/advisories/24719
CVE: CVE-2007-1595
Published: 2007-03-22
Description: The Asterisk Extension Language (AEL) in pbx/pbx_ael.c in Asterisk does not properly generate extensions, which allows remote attackers to execute arbitrary extensions and have an unknown impact by specifying an invalid extension in a certain form.
CVSS Score: 7.5 (HIGH)
References: http://bugs.digium.com/view.php?id=9316; http://secunia.com/advisories/24694; http://secunia.com/advisories/25582
CVE: CVE-2007-1596
Published: 2007-03-22
Description: Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book (com_nfn_addressbook) 0.4 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) components/com_nfn_addressbook/nfnaddressbook.php or (2) administrator/components/com_nfn_addressbook/nfnaddressbook.php.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/43553; http://osvdb.org/43554; http://www.securityfocus.com/bid/23092
CVE: CVE-2007-1597
Published: 2007-03-22
Description: Unclassified NewsBoard 1.6.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain (1) the board log via a direct request for logs/board-YYYY-MM-DD.log, (2) the mail and private message (PM) log via a direct request for logs/email-YY-MM-DD-HH-MM-SS.log, (3) the SQL error message log via a direct request for logs/error-YY-MM.log, and (4) the IP log via a direct request for logs/ip.log.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/35201; http://www.securityfocus.com/archive/1/463186/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/33150
CVE: CVE-2007-1598
Published: 2007-03-22
Description: Stack-based buffer overflow in InterVations FileCOPA FTP Server 1.01 allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by filecopa.tar by Immunity.  NOTE: some of these details are obtained from third party information.  NOTE: As of 20070322, this disclosure has no actionable information. However, since it is from a reliable researcher, it is being assigned a CVE identifier for tracking purposes.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/43559; http://www.immunitysec.com/partners-index.shtml; http://www.securityfocus.com/bid/23056
CVE: CVE-2007-1599
Published: 2007-03-22
Description: wp-login.php in WordPress allows remote attackers to redirect authenticated users to other websites and potentially obtain sensitive information via the redirect_to parameter.
CVSS Score: 6.5 (MEDIUM)
References: http://secunia.com/advisories/30960; http://www.debian.org/security/2008/dsa-1601; http://www.metaeye.org/advisories/40
CVE: CVE-2007-1600
Published: 2007-03-22
Description: PHP remote file inclusion vulnerability in module.php in Digital Eye Gallery 1.1 Beta (aka 0.1.1b) allows remote attackers to execute arbitrary PHP code via a URL in the menu parameter.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/37241; http://www.securityfocus.com/bid/23083; http://www.vupen.com/english/advisories/2007/1070
CVE: CVE-2007-1601
Published: 2007-03-22
Description: Directory traversal vulnerability in check_vote.php in Weekly Drawing Contest 0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the order parameter.  NOTE: another researcher disputes this vulnerability, noting that the order variable is not used in any context that allows opening files
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/35148; http://securityreason.com/securityalert/2453; http://www.securityfocus.com/archive/1/462663/100/100/threaded
CVE: CVE-2007-1602
Published: 2007-03-22
Description: SQL injection vulnerability in check_vote.php in Weekly Drawing Contest 0.0.1 allows remote attackers to execute arbitrary SQL commands via the order parameter.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/2453; http://www.securityfocus.com/archive/1/462702/100/100/threaded; http://securityreason.com/securityalert/2453
CVE: CVE-2007-1603
Published: 2007-03-22
Description: admin/contest.php in Weekly Drawing Contest 0.0.1 allows remote attackers to bypass authentication, and insert new contest information into a database, via a direct POST request.
CVSS Score: 7.5 (HIGH)
References: http://securityreason.com/securityalert/2453; http://www.securityfocus.com/archive/1/462702/100/100/threaded; http://securityreason.com/securityalert/2453
CVE: CVE-2007-1604
Published: 2007-03-22
Description: Multiple unrestricted file upload vulnerabilities in w-Agora (Web-Agora) allow remote attackers to upload and execute arbitrary PHP code (1) via a forum message with an attached file, which is stored under forums/hello/hello/notes/ or (2) by using browse_avatar.php to upload a file with a double extension, as demonstrated by .php.jpg.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34383; http://osvdb.org/34384; http://secunia.com/advisories/24605
CVE: CVE-2007-1605
Published: 2007-03-22
Description: w-Agora (Web-Agora) allows remote attackers to obtain sensitive information via a request to rss.php with an invalid (1) site or (2) bn parameter, (3) a certain value of the site[] parameter, or (4) an empty value of the bn[] parameter; a request to index.php with a certain value of the (5) site[] or (6) sort[] parameter; (7) a request to profile.php with an empty value of the site[] parameter; or a request to search.php with (8) an empty value of the bn[] parameter or a certain value of the (9) pattern[] or (10) search_date[] parameter, which reveal the path in various error messages, probably related to variable type inconsistencies.  NOTE: the bn[] parameter to index.php is already covered by CVE-2007-0606.1.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/34380; http://osvdb.org/34381; http://osvdb.org/34382
CVE: CVE-2007-1606
Published: 2007-03-22
Description: Multiple cross-site scripting (XSS) vulnerabilities in w-Agora (Web-Agora) allow remote attackers to inject arbitrary web script or HTML via (1) the showuser parameter to profile.php, the (2) search_forum or (3) search_user parameter to search.php, or (4) the userid parameter to change_password.php.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/34377; http://osvdb.org/34378; http://osvdb.org/34379
CVE: CVE-2007-1607
Published: 2007-03-22
Description: search.php in w-Agora (Web-Agora) allows remote attackers to obtain potentially sensitive information via a ' (quote) value followed by certain SQL sequences in the (1) search_forum or (2) search_user parameter, which force a SQL error.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/34376; http://secunia.com/advisories/24605; http://securityreason.com/securityalert/2462
CVE: CVE-2007-1608
Published: 2007-03-22
Description: CRLF injection vulnerability in IBM WebSphere Application Server (WAS) before 6.0.2.19 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a single CRLF sequence in a context that is not a valid multi-line header.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34484; http://secunia.com/advisories/24552; http://www-1.ibm.com/support/docview.wss?uid=swg1PK39732
CVE: CVE-2007-1609
Published: 2007-03-22
Description: Cross-site scripting (XSS) vulnerability in servlet/Spy in Dynamic Monitoring Services (DMS) in Oracle Application Server (OAS) 10g 10.1.2.0.0 allows remote attackers to inject arbitrary web script or HTML via the table parameter.  NOTE: This may be related to CVE-2002-0563.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/24554; http://securityreason.com/securityalert/2474; http://www.osvdb.org/33521
CVE: CVE-2007-1610
Published: 2007-03-22
Description: Cross-site scripting (XSS) vulnerability in the RSS reader in Glue Software NewsGlue before 1.3.4 allows remote attackers to inject arbitrary web script or HTML via a feed.
CVSS Score: 4.3 (MEDIUM)
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://osvdb.org/34408; http://secunia.com/advisories/24603
CVE: CVE-2007-1611
Published: 2007-03-22
Description: Cross-site scripting (XSS) vulnerability in the RSS reader in a certain SOURCENEXT product, probably IKANARI JIJYOU 1.0.0 and 1.0.1, allows remote attackers to inject arbitrary web script or HTML via the title of an article in a feed.
CVSS Score: 4.3 (MEDIUM)
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://www.sourcenext.info/download/jijou.html; https://exchange.xforce.ibmcloud.com/vulnerabilities/33452
CVE: CVE-2007-1612
Published: 2007-03-23
Description: SQL injection vulnerability in index.php in Katalog Plyt Audio 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the kolumna parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34269; http://secunia.com/advisories/24539; http://www.securityfocus.com/bid/23024
CVE: CVE-2007-1613
Published: 2007-03-23
Description: Directory traversal vulnerability in view.php in MPM Chat 2.5 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the logi parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34278; http://secunia.com/advisories/24576; http://www.securityfocus.com/bid/23009
CVE: CVE-2007-1614
Published: 2007-03-23
Description: Stack-based buffer overflow in the zzip_open_shared_io function in zzip/file.c in ZZIPlib Library before 0.13.49 allows user-assisted remote attackers to cause a denial of service (application crash) or execute arbitrary code via a long filename.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/33838; http://secunia.com/advisories/24586; http://secunia.com/advisories/24708
CVE: CVE-2007-1615
Published: 2007-03-23
Description: SQL injection vulnerability in index.php in ScriptMagix Jokes 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/24595; http://www.securityfocus.com/bid/23015; http://www.vupen.com/english/advisories/2007/1012
CVE: CVE-2007-1616
Published: 2007-03-23
Description: SQL injection vulnerability in index.php in ScriptMagix Lyrics 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the recid parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34283; http://secunia.com/advisories/24563; http://www.securityfocus.com/bid/23019
CVE: CVE-2007-1617
Published: 2007-03-23
Description: SQL injection vulnerability in index.php in ScriptMagix Recipes 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34286; http://secunia.com/advisories/24594; http://www.vupen.com/english/advisories/2007/1013
CVE: CVE-2007-1618
Published: 2007-03-23
Description: SQL injection vulnerability in index.php in ScriptMagix FAQ Builder 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34619; http://secunia.com/advisories/24704; http://www.vupen.com/english/advisories/2007/1011
CVE: CVE-2007-1619
Published: 2007-03-23
Description: SQL injection vulnerability in viewcomments.php in ScriptMagix Photo Rating 2.0 and earlier allows remote attackers to execute arbitrary SQL commands via the phid parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34629; http://secunia.com/advisories/24698; http://www.securityfocus.com/bid/23018
CVE: CVE-2007-1620
Published: 2007-03-23
Description: Multiple PHP remote file inclusion vulnerabilities in PHP DB Designer 1.02 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) _SESSION[SITE_PATH] parameter to (a) wind/help.php or (b) wind/about.php, or the (2) _SESSION[DRIVER] parameter to (c) db/session.php.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/37210; http://osvdb.org/37211; http://osvdb.org/37212
CVE: CVE-2007-1621
Published: 2007-03-23
Description: PHP remote file inclusion vulnerability in templates/head.php in Active PHP Bookmark Notes (APB) 0.2.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the APB_SETTINGS[template_path] parameter.  NOTE: this issue might be related to CVE-2003-1254.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/37226; http://www.securityfocus.com/bid/23010; http://www.vupen.com/english/advisories/2007/1009
CVE: CVE-2007-1622
Published: 2007-03-23
Description: Cross-site scripting (XSS) vulnerability in wp-admin/vars.php in WordPress before 2.0.10 RC2, and before 2.1.3 RC2 in the 2.1 series, allows remote authenticated users with theme privileges to inject arbitrary web script or HTML via the PATH_INFO in the administration interface, related to loose regular expression processing of PHP_SELF.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/24567; http://secunia.com/advisories/25108; http://sla.ckers.org/forum/read.php?2%2C7935#msg-8006
CVE: CVE-2007-1623
Published: 2007-03-23
Description: Multiple cross-site scripting (XSS) vulnerabilities in realGuestbook 5.01, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via the (1) bg_color_1, (2) fs_menu, (3) fc_menu, (4) ff_menu, (5) bg_color_2, (6) fs_normal, (7) fc_normal, and (8) ff_normal parameters to welcome_admin.php; and possibly unspecified other parameters and files.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/24602; http://www.osvdb.org/34341; http://secunia.com/advisories/24602
CVE: CVE-2007-1624
Published: 2007-03-23
Description: Multiple SQL injection vulnerabilities in realGuestbook 5.01 allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) homepage, and (4) text parameters to save_entry.php, as reachable through add_entry.php; and possibly other unspecified parameters and files.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/24602; http://www.osvdb.org/34342; http://www.securityfocus.com/bid/23072
CVE: CVE-2007-1625
Published: 2007-03-23
Description: Cross-site scripting (XSS) vulnerability in save_entry.php in realGuestbook 5.01 allows remote attackers to inject arbitrary web script or HTML via the homepage parameter, as reachable through add_entry.php.  NOTE: the original report stated that the vulnerability was in add_entry.php, which does not receive the input data.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/24602; http://trew.icenetx.net/toolz/advisory-realGuestbook_V5-en.txt; http://www.osvdb.org/34343
CVE: CVE-2007-1626
Published: 2007-03-23
Description: PHP remote file inclusion vulnerability in iframe.php in the iFrame Module for PHP-NUKE allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/37222; http://www.securityfocus.com/bid/23038; https://exchange.xforce.ibmcloud.com/vulnerabilities/33060
CVE: CVE-2007-1627
Published: 2007-03-23
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2006-4606.  Reason: This candidate is a duplicate of CVE-2006-4606.  Notes: All CVE users should reference CVE-2006-4606 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2007-1628
Published: 2007-03-23
Description: Multiple PHP remote file inclusion vulnerabilities in Study planner (Studiewijzer) 0.15 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the SPL_CFG[dirroot] parameter to (1) service.alert.inc.php or (2) settings.ses.php in inc/; (3) db/mysql/db.inc.php; (4) integration/shortstat/configuration.php; (5) ali.class.php or (6) cat.class.php in methodology/traditional/class/; (7) cat_browse.inc.php, (8) chr_browse.inc.php, (9) chr_display.inc.php, or (10) dash_browse.inc.php in methodology/traditional/ui/inc/; (11) spl.webservice.php or (12) konfabulator/gateway_admin.php in ws/; or other unspecified files.
CVSS Score: 9.3 (HIGH)
References: http://advisories.echo.or.id/adv/adv77-K-159-2007.txt; http://www.securityfocus.com/archive/1/463491/100/0/threaded; http://www.securityfocus.com/bid/23076
CVE: CVE-2007-1629
Published: 2007-03-23
Description: SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Photo Gallery allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/24568; http://www.securityfocus.com/bid/23077; http://www.vupen.com/english/advisories/2007/1072
CVE: CVE-2007-1630
Published: 2007-03-23
Description: SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Link Engine allows remote attackers to execute arbitrary SQL commands via the catid parameter.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/24574; http://www.osvdb.org/34364; http://www.securityfocus.com/bid/23080
CVE: CVE-2007-1631
Published: 2007-03-23
Description: PHP remote file inclusion vulnerability in signup.php in CLBOX 1.01 allows remote attackers to execute arbitrary PHP code via a URL in the header parameter.  NOTE: this issue has been disputed by a reliable third party, stating that header is defined through an include file before use
CVSS Score: 10.0 (HIGH)
References: http://securityreason.com/securityalert/2469; http://www.attrition.org/pipermail/vim/2007-March/001443.html; http://www.osvdb.org/33503
CVE: CVE-2007-1632
Published: 2007-03-23
Description: Unspecified vulnerability in TYPOlight webCMS before 2.2 Build 5 has unknown impact and attack vectors related to a "major security hole."
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/24546; http://www.osvdb.org/33303; http://www.typolight.org/changelog.html
CVE: CVE-2007-1633
Published: 2007-03-23
Description: Directory traversal vulnerability in bbcode_ref.php in the Giorgio Ciranni Splatt Forum 4.0 RC1 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the name parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by bbcode_ref.php.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38599; http://www.securityfocus.com/bid/23035; http://www.vupen.com/english/advisories/2007/1027
CVE: CVE-2007-1634
Published: 2007-03-23
Description: Variable extraction vulnerability in grab_globals.php in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote attackers to conduct SQL injection attacks via the _FILES[DB][tmp_name] parameter to print.php, which overwrites the $DB variable with dynamic variable evaluation.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/24571; http://securityreason.com/securityalert/2473; http://www.attrition.org/pipermail/vim/2007-March/001460.html
CVE: CVE-2007-1635
Published: 2007-03-23
Description: Static code injection vulnerability in admin/settings.php in Net Portal Dynamic System (NPDS) 5.10 and earlier allows remote authenticated users to inject arbitrary PHP code via the xtop parameter in a "ConfigSave" op to admin.php, which can later be accessed via a "Configure" op to admin.php.
CVSS Score: 9.0 (HIGH)
References: http://osvdb.org/34303; http://secunia.com/advisories/24571; http://securityreason.com/securityalert/2473
CVE: CVE-2007-1636
Published: 2007-03-23
Description: Directory traversal vulnerability in index.php in RoseOnlineCMS 3 B1 allows remote attackers to include arbitrary files via a .. (dot dot) sequence in the op parameter, as demonstrated by injecting PHP code into Apache log files via the URL and User-Agent HTTP header.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/38601; http://www.securityfocus.com/bid/23108; http://www.vupen.com/english/advisories/2007/1094
CVE: CVE-2007-1637
Published: 2007-03-23
Description: Multiple buffer overflows in the IMAILAPILib ActiveX control (IMailAPI.dll) in Ipswitch IMail Server before 2006.2 allow remote attackers to execute arbitrary code via the (1) WebConnect and (2) Connect members in the (a) IMailServer control; (3) Sync3 and (4) Init3 members in the (b) IMailLDAPService control; and the (5) SetReplyTo member in the (c) IMailUserCollection control.
CVSS Score: 9.3 (HIGH)
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=487; http://secunia.com/advisories/24422; http://support.ipswitch.com/kb/IM-20070305-JH01.htm
CVE: CVE-2007-1638
Published: 2007-03-23
Description: Multiple cross-site request forgery (CSRF) vulnerabilities in the check_csrftoken function in lib/lib.inc.php in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allow remote attackers to perform unauthorized actions as an arbitrary user via the (1) Projects, (2) Contacts, (3) Helpdesk, (4) Notes, (5) Search, (6) Mail, or (7) Filemanager module; the (9) summary page; or unspecified other files.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/35162; http://secunia.com/advisories/24509; http://secunia.com/advisories/25748