deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-1027
Published: 2007-02-21
Description: Certain setuid DB2 binaries in IBM DB2 before 9 Fix Pack 2 for Linux and Unix allow local users to overwrite arbitrary files via a symlink attack on the DB2DIAG.LOG temporary file.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-59
References: http://osvdb.org/34024; http://secunia.com/advisories/24213; http://www-1.ibm.com/support/docview.wss?uid=swg1IY94817
CVE: CVE-2007-1028
Published: 2007-02-21
Description: Cross-site scripting (XSS) vulnerability in the Barry Jaspan Image Pager 4.7.x-1.x-dev and 5.x-1.x-dev before 2007-02-08 module for Drupal allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to HTML entities and the IMG element.
CVSS Score: 6.8 (MEDIUM)
References: http://drupal.org/node/119293; http://osvdb.org/35151; http://www.securityfocus.com/bid/22586
CVE: CVE-2007-1029
Published: 2007-02-21
Description: Stack-based buffer overflow in the Connect method in the IMAP4 component in Quiksoft EasyMail Objects before 6.5 allows remote attackers to execute arbitrary code via a long host name.
CVSS Score: 7.6 (HIGH)
References: http://secunia.com/advisories/24199; http://security-assessment.com/files/advisories/easymail_advisory.pdf; http://securityreason.com/securityalert/2277
CVE: CVE-2007-1030
Published: 2007-02-21
Description: Niels Provos libevent 1.2 and 1.2a allows remote attackers to cause a denial of service (infinite loop) via a DNS response containing a label pointer that references its own offset.
CVSS Score: 7.8 (HIGH)
References: http://monkey.org/~provos/libevent/; http://osvdb.org/33228; http://secunia.com/advisories/24181
CVE: CVE-2007-1031
Published: 2007-02-21
Description: Directory traversal vulnerability in include/db_conn.php in SpoonLabs Vivvo Article Management CMS 3.4 allows remote attackers to include and execute arbitrary local files via the root parameter.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/35159; http://www.securityfocus.com/bid/22600; https://exchange.xforce.ibmcloud.com/vulnerabilities/32553
CVE: CVE-2007-1032
Published: 2007-02-21
Description: Unspecified vulnerability in phpMyFAQ 1.6.9 and earlier, when register_globals is enabled, allows remote attackers to "gain the privilege for uploading files on the server."
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/32603; http://secunia.com/advisories/24230; http://www.phpmyfaq.de/advisory_2007-02-18.php
CVE: CVE-2007-1033
Published: 2007-02-21
Description: Unspecified vulnerability in the Secure site 4.7.x-1.x-dev and 5.x-1.x-dev module for Drupal allows remote attackers to bypass access restrictions via a crafted URL.
CVSS Score: 7.5 (HIGH)
References: http://drupal.org/node/119619; http://osvdb.org/35160; http://www.vupen.com/english/advisories/2007/0637
CVE: CVE-2007-1034
Published: 2007-02-21
Description: SQL injection vulnerability in the category file in modules.php in the Emporium 2.3.0 and earlier module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the category_id parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://osvdb.org/35981; http://www.securityfocus.com/bid/22612; http://www.vupen.com/english/advisories/2007/0661
CVE: CVE-2007-1035
Published: 2007-02-21
Description: Unspecified vulnerability in certain demonstration scripts in getID3 1.7.1, as used in the Mediafield and Audio modules for Drupal, allows remote attackers to read and delete arbitrary files, list arbitrary directories, and write to empty files or .mp3 files via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://blamcast.net/articles/highly-critical-security-flaws-in-drupal-audio-module; http://drupal.org/node/119385; http://osvdb.org/35161
CVE: CVE-2007-1036
Published: 2007-02-21
Description: The default configuration of JBoss does not restrict access to the (1) console and (2) web management interfaces, which allows remote attackers to bypass authentication and gain administrative access via direct requests.
CVSS Score: 7.5 (HIGH)
CWE: CWE-264
References: http://osvdb.org/33744; http://wiki.jboss.org/wiki/Wiki.jsp?page=SecureJBoss; http://wiki.jboss.org/wiki/Wiki.jsp?page=SecureTheJmxConsole
CVE: CVE-2007-1070
Published: 2007-02-21
Description: Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62, allow remote attackers to execute arbitrary code via crafted RPC requests to TmRpcSrv.dll that trigger overflows when calling the (1) CMON_NetTestConnection, (2) CMON_ActiveUpdate, and (3) CMON_ActiveRollback functions in (a) StCommon.dll, and (4) ENG_SetRealTimeScanConfigInfo and (5) ENG_SendEMail functions in (b) eng50.dll.
CVSS Score: 10.0 (HIGH)
References: http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034290; http://osvdb.org/33042; http://secunia.com/advisories/24243
CVE: CVE-2007-1037
Published: 2007-02-21
Description: Stack-based buffer overflow in News File Grabber 4.1.0.1 and earlier allows remote attackers to execute arbitrary code via a .nzb file with a long subject field.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/33252; http://secunia.com/advisories/24237; http://www.securityfocus.com/bid/22617
CVE: CVE-2007-1038
Published: 2007-02-21
Description: Shemes.com Grabit 1.5.3, and possibly earlier, allows remote attackers to cause a denial of service (application crash) via a .nzb file with a subject field containing ';' (semicolon) characters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/38906; http://www.securityfocus.com/bid/22619; http://www.vupen.com/english/advisories/2007/0664
CVE: CVE-2007-1039
Published: 2007-02-21
Description: Unspecified vulnerability in Peanut Knowledge Base (PeanutKB) 0.0.3 and earlier has unknown impact and attack vectors.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/42001; http://sourceforge.net/project/shownotes.php?group_id=157653&release_id=483888; http://www.securityfocus.com/bid/22628
CVE: CVE-2007-1040
Published: 2007-02-21
Description: Directory traversal vulnerability in archives.php in Xpression News (X-News) 1.0.1 allows remote attackers to include arbitrary files or obtain sensitive information via a .. (dot dot) in the xnews-template parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33225; http://secunia.com/advisories/24177; http://www.securityfocus.com/bid/22609
CVE: CVE-2007-1041
Published: 2007-02-21
Description: Multiple stack-based buffer overflows in S&H Computer Systems News Rover 12.1 Rev 1 allow remote attackers to execute arbitrary code via a .nzb file with a long (1) group or (2) subject string.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://osvdb.org/33253; http://secunia.com/advisories/24216; http://www.securityfocus.com/bid/22618
CVE: CVE-2007-1042
Published: 2007-02-21
Description: Directory traversal vulnerability in news.php in Xpression News (X-News) 1.0.1, when magic_quotes_gpc is disabled, allows remote attackers to include arbitrary files or obtain sensitive information via a .. (dot dot) in the xnews-template parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-22
References: http://osvdb.org/33226; http://secunia.com/advisories/24177; https://exchange.xforce.ibmcloud.com/vulnerabilities/32560
CVE: CVE-2007-1043
Published: 2007-02-21
Description: Ezboo webstats, possibly 3.0.3, allows remote attackers to bypass authentication and gain access via a direct request to (1) update.php and (2) config.php.
CVSS Score: 7.5 (HIGH)
References: http://forums.avenir-geopolitique.net/viewtopic.php?t=2674; http://osvdb.org/34181; http://securityreason.com/securityalert/2275
CVE: CVE-2007-1044
Published: 2007-02-21
Description: Pearson Education PowerSchool 4.3.6 allows remote attackers to list the contents of the admin folder via a URI composed of the admin/ directory name and an arbitrary filename ending in ".js."  NOTE: it was later reported that this issue had been addressed by 5.1.2.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://osvdb.org/33741; http://securityreason.com/securityalert/2276; http://www.securityfocus.com/archive/1/460533/100/0/threaded
CVE: CVE-2007-1045
Published: 2007-02-21
Description: mAlbum 0.3 has default accounts (1) "login"/"pass" for its administrative account and (2) "dqsfg"/"sdfg", which allows remote attackers to gain privileges.
CVSS Score: 10.0 (HIGH)
CWE: CWE-264
References: http://forums.avenir-geopolitique.net/viewtopic.php?t=2677; http://osvdb.org/33740; http://securityreason.com/securityalert/2272
CVE: CVE-2007-1046
Published: 2007-02-21
Description: Dem_trac allows remote attackers to read log file contents via a direct request for /anc_sit.txt.
CVSS Score: 5.0 (MEDIUM)
References: http://forums.avenir-geopolitique.net/viewtopic.php?t=2673; http://osvdb.org/33735; http://securityreason.com/securityalert/2271
CVE: CVE-2007-1047
Published: 2007-02-21
Description: Unspecified vulnerability in Distributed Checksum Clearinghouse (DCC) before 1.3.51 allows remote attackers to delete or add hosts in /var/dcc/maps.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33251; http://secunia.com/advisories/24176; http://www.rhyolite.com/anti-spam/dcc/CHANGES
CVE: CVE-2007-1048
Published: 2007-02-21
Description: PHP remote file inclusion vulnerability in admin_rebuild_search.php in phpbb_wordsearch allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/34243; http://securityreason.com/securityalert/2280; http://www.securityfocus.com/archive/1/460338/100/0/threaded
CVE: CVE-2007-1049
Published: 2007-02-21
Description: Cross-site scripting (XSS) vulnerability in the wp_explain_nonce function in the nonce AYS functionality (wp-includes/functions.php) for WordPress 2.0 before 2.0.9 and 2.1 before 2.1.1 allows remote attackers to inject arbitrary web script or HTML via the file parameter to wp-admin/templates.php, and possibly other vectors involving the action variable.
CVSS Score: 4.3 (MEDIUM)
References: http://downloads.securityfocus.com/vulnerabilities/exploits/22534.html; http://osvdb.org/33766; http://secunia.com/advisories/24306
CVE: CVE-2007-1050
Published: 2007-02-21
Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in AbleDesign MyCalendar allow remote attackers to inject arbitrary web script or HTML via (1) the go parameter, (2) the keyword parameter in the search menu (go=search), or (3) the username or (4) the password in a go=Login action.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://forums.avenir-geopolitique.net/viewtopic.php?t=2686; http://osvdb.org/33317; http://osvdb.org/33318
CVE: CVE-2007-1051
Published: 2007-02-21
Description: Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.17.183 and earlier uses a weak cryptographic hashing function (CRC32) to identify trusted modules, which allows local users to bypass security protections by substituting modified modules that have the same CRC32 value.
CVSS Score: 4.6 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052461.html; http://osvdb.org/45243; http://securityreason.com/securityalert/2279
CVE: CVE-2007-1052
Published: 2007-02-21
Description: PHP remote file inclusion vulnerability in index.php in PBLang (PBL) 4.60 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the dbpath parameter, a different vector than CVE-2006-5062.  NOTE: this issue has been disputed by a reliable third party for 4.65, stating that the dbpath variable is initialized in an included file that is created upon installation
CVSS Score: 10.0 (HIGH)
References: http://attrition.org/pipermail/vim/2007-February/001356.html; http://osvdb.org/33737; http://securityreason.com/securityalert/2269
CVE: CVE-2007-1053
Published: 2007-02-21
Description: Multiple PHP remote file inclusion vulnerabilities in phpXmms 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the tcmdp parameter to (1) phpxmmsb.php or (2) phpxmmst.php.  NOTE: this issue has been disputed by a reliable third party, stating that the tcmdp variable is initialized by config.php
CVSS Score: 10.0 (HIGH)
References: http://attrition.org/pipermail/vim/2007-February/001365.html; http://osvdb.org/33749; http://securityreason.com/securityalert/2273
CVE: CVE-2007-1054
Published: 2007-02-21
Description: Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.6.x through 1.9.2, when $wgUseAjax is enabled, allows remote attackers to inject arbitrary web script or HTML via a UTF-7 encoded value of the rs parameter, which is processed by Internet Explorer.
CVSS Score: 6.8 (MEDIUM)
References: http://attrition.org/pipermail/vim/2007-February/001367.html; http://osvdb.org/32078; http://secunia.com/advisories/24211
CVE: CVE-2007-1055
Published: 2007-02-21
Description: Cross-site scripting (XSS) vulnerability in the AJAX features in index.php in MediaWiki 1.9.x before 1.9.0rc2, and 1.8.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the rs parameter.  NOTE: this issue might be a duplicate of CVE-2007-0177.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: http://osvdb.org/37343; http://securityreason.com/securityalert/2274; http://svn.wikimedia.org/svnroot/mediawiki/tags/REL1_9_0/phase3/RELEASE-NOTES
CVE: CVE-2007-1056
Published: 2007-02-21
Description: VMware Workstation 5.5.3 build 34685 does not provide per-user restrictions on certain privileged actions, which allows local users to perform restricted operations such as changing system time, accessing hardware components, and stopping the "VMware tools service" service. NOTE: exploitation is simplified via (1) weak file permissions (Users = Read & Execute) for %PROGRAMFILES%\VMware; and weak registry key permissions (access by Users) for (2) vmmouse, (3) vmscsi, (4) VMTools, (5) vmx_svga, and (6) vmxnet in HKLM\SYSTEM\CurrentControlSet\Services\; which allows local users to perform various privileged actions outside of the guest OS by executing certain files under %PROGRAMFILES%\VMware\VMware Tools, as demonstrated by (a) VMControlPanel.cpl and (b) vmwareservice.exe.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://osvdb.org/45244; http://securityreason.com/securityalert/2281; http://www.securityfocus.com/archive/1/460664/100/0/threaded
CVE: CVE-2007-1057
Published: 2007-02-21
Description: The Net Direct client for Linux before 6.0.5 in Nortel Application Switch 2424, VPN 3050 and 3070, and SSL VPN Module 1000 extracts and executes files with insecure permissions, which allows local users to exploit a race condition to replace a world-writable file in /tmp/NetClient and cause another user to execute arbitrary code when attempting to execute this client, as demonstrated by replacing /tmp/NetClient/client.
CVSS Score: 6.9 (MEDIUM)
References: http://osvdb.org/33304; http://secunia.com/advisories/24231; http://spoofed.org/blog/archive/2007/02/nortel_vpn_unix_client_local_root_compromise.html
CVE: CVE-2007-1058
Published: 2007-02-21
Description: SQL injection vulnerability in user_pages/page.asp in Online Web Building 2.0 allows remote attackers to execute arbitrary SQL commands via the art_id parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/32677; http://secunia.com/advisories/24208; http://www.vupen.com/english/advisories/2007/0674
CVE: CVE-2007-1059
Published: 2007-02-22
Description: PHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the gbpfad parameter.  NOTE: some sources mention "Ultimate Fun Board," but this appears to be an error.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/33305; http://secunia.com/advisories/24219; http://www.securityfocus.com/bid/22633
CVE: CVE-2007-1060
Published: 2007-02-22
Description: Multiple PHP remote file inclusion vulnerabilities in Interspire SendStudio 2004.14 and earlier, when register_globals and allow_fopenurl are enabled, allow remote attackers to execute arbitrary PHP code via a URL in the ROOTDIR parameter to (1) createemails.inc.php and (2) send_emails.inc.php in /admin/includes/.
CVSS Score: 6.8 (MEDIUM)
References: http://advisories.echo.or.id/adv/adv66-K-159-2007.txt; http://osvdb.org/33264; http://osvdb.org/33265
CVE: CVE-2007-1061
Published: 2007-02-22
Description: SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" block is enabled, allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header (HTTP_REFERER variable).
CVSS Score: 6.8 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052570.html; http://osvdb.org/33316; http://secunia.com/advisories/24224
CVE: CVE-2007-1062
Published: 2007-02-22
Description: The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrator HTTP sessions, which allows remote attackers to bypass authentication controls via a direct URL request to the administrative HTTP interface for a limited time
CVSS Score: 10.0 (HIGH)
CWE: CWE-287
References: http://osvdb.org/45245; http://secunia.com/advisories/24262; http://securitytracker.com/id?1017680
CVE: CVE-2007-1063
Published: 2007-02-22
Description: The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier, uses a hard-coded username and password, which allows remote attackers to access the device.
CVSS Score: 10.0 (HIGH)
CWE: CWE-798
References: http://osvdb.org/45246; http://secunia.com/advisories/24262; http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml
CVE: CVE-2007-1064
Published: 2007-02-22
Description: Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not drop privileges when the help facility in the supplicant GUI is invoked, which allows local users to gain privileges, aka CSCsf14120.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/33049; http://secunia.com/advisories/24258; http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml
CVE: CVE-2007-1065
Published: 2007-02-22
Description: Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client allows local users to gain SYSTEM privileges via unspecified vectors in the supplicant, aka CSCsf15836.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/33048; http://secunia.com/advisories/24258; http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml
CVE: CVE-2007-1066
Published: 2007-02-22
Description: Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client use an insecure default Discretionary Access Control Lists (DACL) for the connection client GUI, which allows local users to gain privileges by injecting "a thread under ConnectionClient.exe," aka CSCsg20558.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/33047; http://secunia.com/advisories/24258; http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml
CVE: CVE-2007-1067
Published: 2007-02-22
Description: Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client do not properly parse commands, which allows local users to gain privileges via unspecified vectors, aka CSCsh30624.
CVSS Score: 7.2 (HIGH)
References: http://osvdb.org/33045; http://secunia.com/advisories/24258; http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml
CVE: CVE-2007-1068
Published: 2007-02-22
Description: The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) FAST authentication methods in Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse AEGIS SecureConnect Client store transmitted authentication credentials in plaintext log files, which allows local users to obtain sensitive information by reading these files, aka CSCsg34423.
CVSS Score: 7.2 (HIGH)
CWE: CWE-255
References: http://osvdb.org/33046; http://secunia.com/advisories/24258; http://www.cisco.com/warp/public/707/cisco-sa-20070221-supplicant.shtml
CVE: CVE-2006-6490
Published: 2007-02-22
Description: Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Symantec Automated Support Assistant and Norton AntiVirus, Internet Security, and System Works 2006, allows remote attackers to execute arbitrary code via a crafted HTML message.
CVSS Score: 10.0 (HIGH)
References: http://archives.neohapsis.com/archives/bugtraq/2007-02/0454.html; http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=478; http://osvdb.org/33481
CVE: CVE-2007-1071
Published: 2007-02-22
Description: Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a crafted GIF image that triggers the overflow during decompression.  NOTE: this is a different issue than CVE-2006-3502 and CVE-2006-3503.
CVSS Score: 7.8 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=305214; http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html; http://secunia.com/advisories/24479
CVE: CVE-2007-1072
Published: 2007-02-22
Description: The command line interface (CLI) in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier allows local users to obtain privileges or cause a denial of service via unspecified vectors.  NOTE: this issue can be leveraged remotely via CVE-2007-1063.
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://osvdb.org/33064; http://secunia.com/advisories/24262; http://www.cisco.com/warp/public/707/cisco-air-20070221-phone.shtml
CVE: CVE-2007-1073
Published: 2007-02-22
Description: Static code injection vulnerability in install.php in mcRefer allows remote attackers to execute arbitrary PHP code via the bgcolor parameter, which is inserted into mcrconf.inc.php.
CVSS Score: 10.0 (HIGH)
References: http://osvdb.org/42619; http://securityreason.com/securityalert/2283; http://www.securityfocus.com/archive/1/459796/100/200/threaded
CVE: CVE-2007-1074
Published: 2007-02-22
Description: Multiple buffer overflows in NewsBin Pro 5.33 and NewsBin Pro 4.x allow user-assisted remote attackers to execute arbitrary code via a long (1) DataPath or (2) DownloadPath attributed in a (a) NBI file, or (3) a long group field in a (b) NZB file.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/33377; http://osvdb.org/33378; http://secunia.com/advisories/24261
CVE: CVE-2007-1075
Published: 2007-02-22
Description: TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service (CPU consumption) via a response with a large number of newline characters.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/33751; http://www.securityfocus.com/bid/22634; https://www.exploit-db.com/exploits/3341