deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2007-0311
Published: 2007-01-18
Description: Texas Imperial Software WFTPD and WFTPD Pro Server 3.25 and earlier allow remote attackers to cause a denial of service (application crash) via a long SITE ADMIN command.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/22046; https://exchange.xforce.ibmcloud.com/vulnerabilities/31517; https://www.exploit-db.com/exploits/3126
CVE: CVE-2007-0312
Published: 2007-01-18
Description: wcSimple Poll stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain password hashes via a direct request for password.txt.
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/33539; http://securityreason.com/securityalert/2157; http://www.securityfocus.com/archive/1/456982/100/0/threaded
CVE: CVE-2007-0313
Published: 2007-01-18
Description: Unspecified vulnerability in GONICUS System Administration (GOsa) before 2.5.8 allows remote authenticated users to modify certain settings, including the admin password, via crafted POST requests.
CVSS Score: 9.0 (HIGH)
References: http://oss.gonicus.de/pipermail/gosa/2007-January/002650.html; http://osvdb.org/32821; http://secunia.com/advisories/23749
CVE: CVE-2007-0314
Published: 2007-01-18
Description: Multiple PHP remote file inclusion vulnerabilities in Article System 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the INCLUDE_DIR parameter to (1) forms.php, (2) issue_edit.php, (3) client.php, and (4) classes.php.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/22017; https://exchange.xforce.ibmcloud.com/vulnerabilities/31446; https://www.exploit-db.com/exploits/3114
CVE: CVE-2007-0315
Published: 2007-01-18
Description: Multiple buffer overflows in FileZilla before 2.2.30a allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors related to (1) Options.cpp when storing settings in the registry, and (2) the transfer queue (QueueCtrl.cpp).  NOTE: some of these details are obtained from third party information.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://sourceforge.net/project/shownotes.php?release_id=475423&group_id=21558; http://www.securityfocus.com/bid/22057; http://www.vupen.com/english/advisories/2007/0183
CVE: CVE-2007-0316
Published: 2007-01-18
Description: Multiple SQL injection vulnerabilities in All In One Control Panel (AIOCP) 1.3.010 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) xuser_name parameter to shared/code/cp_authorization.php, and the (2) did parameter to public/code/cp_downloads.php, different vectors than CVE-2007-0223.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/32809; http://osvdb.org/32810; http://secunia.com/advisories/23740
CVE: CVE-2007-0317
Published: 2007-01-18
Description: Format string vulnerability in the LogMessage function in FileZilla before 3.0.0-beta5 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted arguments.  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://sourceforge.net/project/shownotes.php?release_id=477793&group_id=21558; http://www.securityfocus.com/bid/22063; http://www.vupen.com/english/advisories/2007/0182
CVE: CVE-2007-0318
Published: 2007-01-18
Description: The do_hfs_truncate function in Mac OS X 10.4.8 allows context-dependent attackers to cause a denial of service (kernel panic) via a crafted HFS+ filesystem in a DMG image, which causes an access of an invalid vnode structure during file removal.
CVSS Score: 7.8 (HIGH)
References: http://docs.info.apple.com/article.html?artnum=305214; http://lists.apple.com/archives/security-announce/2007/Mar/msg00002.html; http://projects.info-pull.com/moab/MOAB-13-01-2007.html
CVE: CVE-2006-6491
Published: 2007-01-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2006.  Notes: none
CVE: CVE-2006-6492
Published: 2007-01-18
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was in a CNA pool that was not assigned to any issues during 2006.  Notes: none
CVE: CVE-2006-6489
Published: 2007-01-18
Description: The SISCO OSI stack, as used in SISCO MMS-EASE, ICCP Toolkit for MMS-EASE, AX-S4 MMS and AX-S4 ICCP, and possibly other control system applications, allows remote attackers to cause a denial of service (application termination and restart) via malformed packets.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/32924; http://secunia.com/advisories/23819; http://www.kb.cert.org/vuls/id/145825
CVE: CVE-2007-0329
Published: 2007-01-18
Description: download.php in Joonas Viljanen JV2 Folder Gallery allows remote attackers to read sensitive files via a relative pathname in the file parameter, as demonstrated by config/gallerysetup.php.  NOTE: this issue might be resultant from a directory traversal vulnerability.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/32811; http://secunia.com/advisories/23724; http://www.vupen.com/english/advisories/2007/0180
CVE: CVE-2007-0330
Published: 2007-01-18
Description: Buffer overflow in wsbho2k0.dll, as used by wsftpurl.exe, in Ipswitch WS_FTP 2007 Professional allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long ftp:// URL in an HTML document, and possibly other vectors.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33476; http://securityreason.com/securityalert/2160; http://www.securityfocus.com/archive/1/456755/100/0/threaded
CVE: CVE-2007-0331
Published: 2007-01-18
Description: Cross-site scripting (XSS) vulnerability in liens.php3 in liens_dynamiques 2.1 allows remote attackers to inject arbitrary web script or HTML by using the ajouter=1 query string and the add menu.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/33540; http://www.securityfocus.com/archive/1/456986/100/0/threaded; http://www.securityfocus.com/bid/22070
CVE: CVE-2007-0332
Published: 2007-01-18
Description: (1) admin/adminlien.php3 and (2) admin/modif.php3 in liens_dynamiques 2.1 do not require authentication, which allows remote attackers to perform unauthorized administrative actions using a direct request.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33541; http://osvdb.org/33542; http://www.securityfocus.com/archive/1/456986/100/0/threaded
CVE: CVE-2007-0333
Published: 2007-01-18
Description: Agnitum Outpost Firewall PRO 4.0 allows local users to bypass access restrictions and insert Trojan horse drivers into the product's installation directory by creating links using FileLinkInformation requests with the ZwSetInformationFile function, as demonstrated by modifying SandBox.sys.
CVSS Score: 7.2 (HIGH)
References: http://osvdb.org/33480; http://securityreason.com/securityalert/2163; http://www.matousec.com/info/advisories/Outpost-Bypassing-Self-Protection-using-file-links.php
CVE: CVE-2007-0334
Published: 2007-01-18
Description: Unspecified vulnerability in the SIP module in InGate Firewall and SIParator before 4.5.1 allows remote attackers to conduct replay attacks on the authentication mechanism via unknown vectors.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/32831; http://secunia.com/advisories/23737; http://www.ingate.com/relnote-451.php
CVE: CVE-2007-0335
Published: 2007-01-18
Description: Multiple directory traversal vulnerabilities in Jax Petition Book 1.0.3.06 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the languagepack parameter to (1) jax_petitionbook.php or (2) smileys.php.
CVSS Score: 6.8 (MEDIUM)
References: http://osvdb.org/32835; http://osvdb.org/32836; http://secunia.com/advisories/23784
CVE: CVE-2007-0336
Published: 2007-01-18
Description: Undercover.app/Contents/Resources/uc in Rixstep Undercover allows local users to overwrite arbitrary files, probably related to a race condition.
CVSS Score: 4.4 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051793.html; http://www.securityfocus.com/bid/22071; http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051793.html
CVE: CVE-2007-0337
Published: 2007-01-18
Description: Directory traversal vulnerability in sesskglogadmin.php in KGB 1.9 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the skinnn parameter, as demonstrated by invoking kg.php with a postek parameter containing PHP code, which is injected into a file in the kg directory, and then included by sesskglogadmin.php.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/31585; http://secunia.com/advisories/23768; http://www.securityfocus.com/bid/22065
CVE: CVE-2007-0338
Published: 2007-01-18
Description: Heap-based buffer overflow in Dream FTP Server allows remote attackers to execute arbitrary code via a USER command with a large number of format string specifiers, which triggers the overflow during processing of the Server Log.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/32816; http://secunia.com/advisories/23731; https://www.exploit-db.com/exploits/3128
CVE: CVE-2007-0339
Published: 2007-01-18
Description: SQL injection vulnerability in index.php (aka the login form) in Scriptme SMe FileMailer 1.21 allows remote attackers to execute arbitrary SQL commands via the Password field (ps parameter).  NOTE: some of these details are obtained from third party information.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/32832; http://secunia.com/advisories/23766; http://securityreason.com/securityalert/2154
CVE: CVE-2007-0340
Published: 2007-01-18
Description: SQL injection vulnerability in inc/header.inc.php in ThWboard 3.0b2.84-php5 and earlier allows remote attackers to execute arbitrary SQL commands via the board[styleid] parameter to index.php.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/32837; http://secunia.com/advisories/23735; https://www.exploit-db.com/exploits/3124
CVE: CVE-2007-0341
Published: 2007-01-18
Description: Cross-site scripting (XSS) vulnerability in phpMyAdmin 2.8.1 and earlier, when Microsoft Internet Explorer 6 is used, allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a CSS style in the convcharset parameter to the top-level URI, a different vulnerability than CVE-2005-0992.
CVSS Score: 6.8 (MEDIUM)
References: http://www.securityfocus.com/archive/1/456698/100/0/threaded; http://www.securityfocus.com/archive/1/456726/100/0/threaded; http://www.virtuax.be/advisories/Advisory1-12012007.txt
CVE: CVE-2007-0342
Published: 2007-01-18
Description: WebCore in Apple WebKit build 18794 allows remote attackers to cause a denial of service (null dereference and application crash) via a TD element with a large number in the ROWSPAN attribute, as demonstrated by a crash of OmniWeb 5.5.3 on Mac OS X 10.4.8, a different vulnerability than CVE-2006-2019.
CVSS Score: 7.5 (HIGH)
CWE: CWE-399, CWE-476
References: http://security-protocols.com/sp-x41-advisory.php; http://www.securityfocus.com/bid/22059; http://security-protocols.com/sp-x41-advisory.php
CVE: CVE-2007-0343
Published: 2007-01-18
Description: OpenBSD before 20070116 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via certain IPv6 ICMP (aka ICMP6) echo request packets.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/23830; http://securitytracker.com/id?1017518; http://www.openbsd.org/errata.html#icmp6
CVE: CVE-2007-0344
Published: 2007-01-18
Description: Multiple format string vulnerabilities in (1) _invitedToRoom: and (2) _invitedToDirectChat: in Colloquy 2.1 and earlier allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in the channel name of an INVITE request, related to the implementation of AlertSheet and AlertPanel in Apple AppKit.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: http://projects.info-pull.com/moab/MOAB-16-01-2007.html; http://secunia.com/advisories/23801; http://www.osvdb.org/32688
CVE: CVE-2007-0345
Published: 2007-01-18
Description: The (1) Activity Monitor.app/Contents/Resources/pmTool, (2) Keychain Access.app/Contents/Resources/kcproxy, and (3) ODBC Administrator.app/Contents/Resources/iodbcadmintool programs in /Applications/Utilities/ in Mac OS X 10.4.8 have weak permissions (writable by admin group), which allows local admin users to gain root privileges by modifying a program and then performing permissions repair via diskutil.
CVSS Score: 6.8 (MEDIUM)
References: http://projects.info-pull.com/moab/MOAB-15-01-2007.html; http://www.osvdb.org/32700; http://www.osvdb.org/32701
CVE: CVE-2007-0346
Published: 2007-01-18
Description: SQL injection vulnerability in index.php in SmE FileMailer 1.21 allows remote attackers to execute arbitrary SQL commands via the us parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/32832; http://www.attrition.org/pipermail/vim/2007-January/001244.html; http://www.vupen.com/english/advisories/2007/0221
CVE: CVE-2006-6941
Published: 2007-01-19
Description: index.php in FreeWebshop 2.2.2 and earlier allows remote attackers to obtain sensitive information via an invalid action parameter in an info operation, which discloses the path in an error message.
CVSS Score: 5.0 (MEDIUM)
References: http://www.freewebshop.org/?id=27; https://www.exploit-db.com/exploits/2704; http://www.freewebshop.org/?id=27
CVE: CVE-2007-0349
Published: 2007-01-19
Description: Directory traversal vulnerability in upgrade.php in nicecoder.com INDEXU 5.x allows remote attackers to include arbitrary local files via a .. (dot dot) in the gateway parameter.
CVSS Score: 5.0 (MEDIUM)
References: http://osvdb.org/45533; http://www.securityfocus.com/archive/1/457079/100/0/threaded; https://exchange.xforce.ibmcloud.com/vulnerabilities/31539
CVE: CVE-2006-5963
Published: 2007-01-19
Description: Directory traversal vulnerability in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows user-assisted remote attackers to extract files to arbitrary pathnames via a ../ (dot dot slash) in a filename.
CVSS Score: 4.3 (MEDIUM)
References: http://osvdb.org/32864; http://secunia.com/advisories/21458; http://secunia.com/secunia_research/2006-72/advisory/
CVE: CVE-2006-5964
Published: 2007-01-19
Description: choShilA.bpl in PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 allows local users, and user-assisted remote attackers to cause a denial of service (system crash) by right clicking on a file with a long filename.
CVSS Score: 7.1 (HIGH)
References: http://osvdb.org/32865; http://secunia.com/advisories/21458; http://secunia.com/secunia_research/2006-72/advisory/
CVE: CVE-2007-0350
Published: 2007-01-19
Description: Multiple SQL injection vulnerabilities in (a) index.php and (b) dl.php in SmE FileMailer 1.21 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) ps, (2) us, (3) f, or (4) code parameter.  NOTE: the us vector in index.php is already covered by CVE-2007-0346.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89
References: http://archives.neohapsis.com/archives/bugtraq/2007-01/0395.html; http://attrition.org/pipermail/vim/2007-January/001244.html; http://osvdb.org/32833
CVE: CVE-2007-0351
Published: 2007-01-19
Description: Microsoft Windows XP and Windows Server 2003 do not properly handle user logoff, which might allow local users to gain the privileges of a previous system user, possibly related to user profile unload failure. NOTE: it is not clear whether this is an issue in Windows itself, or an interaction with another product.  The issue might involve ZoneAlarm not being able to terminate processes when it cannot prompt the user.
CVSS Score: 6.2 (MEDIUM)
References: http://www.securityfocus.com/archive/1/457167/100/0/threaded; http://www.securityfocus.com/archive/1/457217/100/0/threaded; http://www.securityfocus.com/archive/1/457340/100/0/threaded
CVE: CVE-2007-0352
Published: 2007-01-19
Description: Stack-based buffer overflow in Microsoft Help Workshop 4.03.0002 allows user-assisted remote attackers to execute arbitrary code via a crafted .cnt file composed of lines that begin with an integer followed by a space and a long string.
CVSS Score: 9.3 (HIGH)
References: http://osvdb.org/31898; http://secunia.com/advisories/23862; http://securityreason.com/securityalert/2156
CVE: CVE-2007-0353
Published: 2007-01-19
Description: Cross-site scripting (XSS) vulnerability in (1) index.php and (2) login.php in myBloggie 2.1.5 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO string.
CVSS Score: 6.8 (MEDIUM)
References: http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0338.html; http://mywebland.com/forums/showtopic.php?t=1224; http://osvdb.org/32929
CVE: CVE-2007-0354
Published: 2007-01-19
Description: SQL injection vulnerability in email.php in MGB OpenSource Guestbook 0.5.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/31612; http://secunia.com/advisories/23825; http://www.attrition.org/pipermail/vim/2007-January/001246.html
CVE: CVE-2007-0355
Published: 2007-01-19
Description: Buffer overflow in the Apple Minimal SLP v2 Service Agent (slpd) in Mac OS X 10.4.11 and earlier, including 10.4.8, allows local users, and possibly remote attackers, to gain privileges and possibly execute arbitrary code via a registration request with an invalid attr-list field.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://docs.info.apple.com/article.html?artnum=307430; http://lists.apple.com/archives/security-announce/2008/Feb/msg00002.html; http://projects.info-pull.com/moab/MOAB-17-01-2007.html
CVE: CVE-2007-0356
Published: 2007-01-19
Description: The Common Controls Replacement Project (CCRP) FolderTreeview (FTV) ActiveX control (ccrpftv6.ocx) allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long CCRP.RootFolder property value.
CVSS Score: 5.0 (MEDIUM)
References: http://www.securityfocus.com/bid/22092; https://exchange.xforce.ibmcloud.com/vulnerabilities/31549; https://www.exploit-db.com/exploits/3142
CVE: CVE-2007-0357
Published: 2007-01-19
Description: Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbitrary files via ..%5C (URL-encoded dot dot backslash) sequences in a URI requested from the AR7 webserver.
CVSS Score: 5.0 (MEDIUM)
References: http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051844.html; http://osvdb.org/32866; http://secunia.com/advisories/23774
CVE: CVE-2007-0358
Published: 2007-01-19
Description: Unspecified vulnerability in the FTP server implementation in HP Jetdirect firmware x.20.nn through x.24.nn allows remote attackers to cause a denial of service via unknown vectors.
CVSS Score: 7.8 (HIGH)
References: http://itrc.hp.com/service/cki/docDisplay.do?docId=c00838612; http://osvdb.org/32867; http://secunia.com/advisories/23802
CVE: CVE-2007-0359
Published: 2007-01-19
Description: PHP remote file inclusion vulnerability in frontpage.php in Uberghey CMS 0.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the setup_folder parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.attrition.org/pipermail/vim/2007-January/001247.html; http://www.securityfocus.com/bid/22098; http://www.vupen.com/english/advisories/2007/0230
CVE: CVE-2007-0360
Published: 2007-01-19
Description: PHP remote file inclusion vulnerability in lang/index.php in Oreon 1.2.3 RC4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.
CVSS Score: 7.5 (HIGH)
References: http://osvdb.org/33711; http://www.securityfocus.com/archive/1/459811/100/0/threaded; http://www.securityfocus.com/bid/22107
CVE: CVE-2007-0361
Published: 2007-01-19
Description: PHP remote file inclusion vulnerability in mep/frame.php in PHPMyphorum 1.5a allows remote attackers to execute arbitrary PHP code via a URL in the chem parameter.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/22099; http://www.vupen.com/english/advisories/2007/0231; https://exchange.xforce.ibmcloud.com/vulnerabilities/31552
CVE: CVE-2007-0362
Published: 2007-01-19
Description: Cross-site scripting (XSS) vulnerability in the RSS feed component in FreshReader before 1.0.07010600 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, possibly related to tag attributes.
CVSS Score: 6.8 (MEDIUM)
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://manual.freshreader.com/archives/2007/01/20070118_javasc.html; http://osvdb.org/32923
CVE: CVE-2007-0363
Published: 2007-01-19
Description: Cross-site scripting (XSS) vulnerability in admin-search.php in (1) Openads for PostgreSQL (aka phpPgAds) before 2.0.10 and (2) Openads (aka phpAdsNew) before 2.0.10 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
CVSS Score: 6.8 (MEDIUM)
References: http://secunia.com/advisories/23720; http://sourceforge.net/project/shownotes.php?group_id=11386&release_id=479424; http://sourceforge.net/project/shownotes.php?group_id=36679&release_id=479426
CVE: CVE-2006-6942
Published: 2007-01-19
Description: Multiple cross-site scripting (XSS) vulnerabilities in PhpMyAdmin before 2.9.1.1 allow remote attackers to inject arbitrary HTML or web script via (1) a comment for a table name, as exploited through (a) db_operations.php, (2) the db parameter to (b) db_create.php, (3) the newname parameter to db_operations.php, the (4) query_history_latest, (5) query_history_latest_db, and (6) querydisplay_tab parameters to (c) querywindow.php, and (7) the pos parameter to (d) sql.php.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9444&w=2; http://secunia.com/advisories/26733; http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-7
CVE: CVE-2006-6943
Published: 2007-01-19
Description: PhpMyAdmin before 2.9.1.1 allows remote attackers to obtain the full server path via direct requests to (a) scripts/check_lang.php and (b) themes/darkblue_orange/layout.inc.php; and via the (1) lang[], (2) target[], (3) db[], (4) goto[], (5) table[], and (6) tbl_group[] array arguments to (c) index.php, and the (7) back[] argument to (d) sql.php; and an invalid (8) sort_by parameter to (e) server_databases.php and (9) db parameter to (f) db_printview.php.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]9444&w=2; http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-8; http://www.securityfocus.com/bid/21137
CVE: CVE-2006-6944
Published: 2007-01-19
Description: phpMyAdmin before 2.9.1.1 allows remote attackers to bypass Allow/Deny access rules that use IP addresses via false headers.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/26733; http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2006-9; http://www.us.debian.org/security/2007/dsa-1370