rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-2621 
SQL injection vulnerability in event_view.php in Thyme Calendar 1.3 allows remote attackers to execute arbitrary SQL commands via the eid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T16:00:00.000Z
CVE-2007-2622 
Multiple SQL injection vulnerabilities in TaskDriver 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the username parameter to login.php or (2) the taskid parameter to notes.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T16:00:00.000Z
CVE-2007-2623 
Multiple buffer overflows in RControl.dll in Remote Display Dev kit 1.2.1.0 allow remote attackers to cause a denial of service (Internet Explorer 7 crash) via (1) a long first argument to the connect function or (2) a long InternalServer property value, possibly involving ntdll.dll.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T16:00:00.000Z
CVE-2007-2624 
Dynamic variable evaluation vulnerability in shared/config/cp_config.php in All In One Control Panel (AIOCP) before 1.3.016 allows remote attackers to conduct cross-site scripting (XSS) and possibly other attacks via the SERVER superglobal array.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T17:00:00.000Z
CVE-2007-2625 
Cross-site scripting (XSS) vulnerability in shared/code/cp_authorization.php in All In One Control Panel (AIOCP) before 1.3.016 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T17:00:00.000Z
CVE-2007-2626 
SQL injection vulnerability in admin.php in SchoolBoard allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameters.  NOTE: CVE disputes this issue, because 'username' does not exist, and the password is not used in any queries
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T17:00:00.000Z
CVE-2007-2627 
Cross-site scripting (XSS) vulnerability in sidebar.php in WordPress, when custom 404 pages that call get_sidebar are used, allows remote attackers to inject arbitrary web script or HTML via the query string (PHP_SELF), a different vulnerability than CVE-2007-1622.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T17:00:00.000Z
CVE-2007-2628 
PHP remote file inclusion vulnerability in include/logout.php in Justin Koivisto SecurityAdmin for PHP (aka PHPSecurityAdmin, PSA) 4.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the PSA_PATH parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T17:00:00.000Z
CVE-2007-2629 
Bradford CampusManager Network Control Application Server 3.1(6) allows remote attackers to obtain sensitive information (backup, log, and configuration files) via direct request for certain files in (1) /runTime/ or (2) /remediationReports/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T17:00:00.000Z
CVE-2007-2630 
Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as used in ActiveCampaign 1-2-All (aka 12All) 4.50 through 4.53.13, and possibly other products, allows remote authenticated administrators to upload and possibly execute .php4 and .php5 files via unspecified vectors.  NOTE: this issue is reachable through filemanager/browser/default/browser.html.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T17:00:00.000Z
CVE-2007-2631 
Cross-site request forgery (CSRF) vulnerability in SquirrelMail 1.4.8-4.fc6 and earlier allows remote attackers to perform unspecified actions as arbitrary users via unspecified vectors.  NOTE: this issue might overlap CVE-2007-2589 or CVE-2002-1648.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-13T23:00:00.000Z
CVE-2007-2632 
Multiple cross-site scripting (XSS) vulnerabilities in PHP Multi User Randomizer (phpMUR) 2006.09.13 allow remote attackers to inject arbitrary web script or HTML via (1) the edit_plugin parameter to configure_plugin.tpl.php, or (2) certain array parameters to web/phpinfo.php, as demonstrated by 1[] or a[].
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-13T23:00:00.000Z
CVE-2007-2633 
Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files via a .. (dot dot) in the template parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-13T23:00:00.000Z
CVE-2007-2634 
PHP remote file inclusion vulnerability in common/errormsg.php in aForum 1.32 and possibly earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the header parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-13T23:00:00.000Z
CVE-2007-2635 
Unspecified vulnerability in Interchange before 5.4.2 allows remote attackers to cause an unspecified denial of service (possibly server hang) via crafted HTTP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-13T23:00:00.000Z
CVE-2007-2636 
Unspecified vulnerability in phpTodo before 0.8.1 allows remote attackers to have an unknown impact via newlines in regular expressions to (1) index.php, (2) feed.php, (3) prefs.php, and (4) todolist.php; and (5) classTodoItem.php and (6) phpTodoUser.php in libs/.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-13T23:00:00.000Z
CVE-2007-2637 
MoinMoin before 20070507 does not properly enforce ACLs for calendars and includes, which allows remote attackers to read certain pages via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-13T23:00:00.000Z
CVE-2007-2638 
eFileCabinet 3.3 allows remote attackers to bypass authentication and access restricted portions of the interface via an invalid filecabinetnumber, which can be leveraged to obtain sensitive information or create new data structures.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-13T23:00:00.000Z
CVE-2007-2639 
Directory traversal vulnerability in TFTPdWin 0.4.2 allows remote attackers to read or modify arbitrary files outside the TFTP root via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-13T23:00:00.000Z
CVE-2007-2640 
LibTMCG before 1.1.1 does not perform a range check to avoid "trivial group generators," which allows attackers to obtain sensitive information about private cards.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-13T23:00:00.000Z
CVE-2007-2641 
SQL injection vulnerability in W1L3D4_bolum.asp in W1L3D4 Philboard 0.2 allows remote attackers to execute arbitrary SQL commands via the forumid parameter, a different vector than CVE-2007-0920.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-13T23:00:00.000Z
CVE-2007-2642 
Directory traversal vulnerability in galeria.php in R2K Gallery 1.7 allows remote attackers to read arbitrary files via a .. (dot dot) in the lang2 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-13T23:00:00.000Z
CVE-2007-2643 
Directory traversal vulnerability in phpThumb.php in PinkCrow Designs Gallery or maGAZIn 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the src parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-13T23:00:00.000Z
CVE-2007-2644 
A certain ActiveX control in Morovia Barcode ActiveX Professional 3.3.1304 allows remote attackers to overwrite arbitrary files by calling the Save method with an arbitrary filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-13T23:00:00.000Z
CVE-2007-2645 
Integer overflow in the exif_data_load_data_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via crafted EXIF data, involving the (1) doff or (2) s variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T21:00:00.000Z
CVE-2007-2646 
Heap-based buffer overflow in yEnc32 1.0.7.207 allows user-assisted remote attackers to execute arbitrary code via a long filename in an NTX file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T21:00:00.000Z
CVE-2007-2647 
Static code injection vulnerability in admin/admin_configuration.php in Monalbum 0.8.7 allows remote authenticated users to inject arbitrary PHP code into the conf/config.inc.php file via the (1) gadm_pass, (2) gadm_user, (3) gcfgHote, (4) gcfgPass, (5) gcfgUser, (6) gclassement_rep, (7) gcontour, (8) gfond, (9) ggd_version, (10) ghome, (11) ghor, (12) gimg_copyright, (13) glangage, (14) gmenu_visible, (15) gmini_hasard, (16) gordre_rep, (17) gpage, (18) gracine, (19) grech_inactive, (20) grep_mini, (21) grepertoire, (22) gsite, (23) gslide, (24) gtitre, (25) guse_copyright, (26) gversion, (27) gvert, or (28) gcfgBase parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T21:00:00.000Z
CVE-2007-2648 
Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control (comparerax.ocx) allows remote attackers to execute arbitrary code via a long argument to the ConnectToDatabase function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T21:00:00.000Z
CVE-2007-2649 
Deutsche Telekom (T-com) Speedport W 700v uses JavaScript delays for invalid authentication attempts to the CGI script, which allows remote attackers to bypass the delays and conduct brute-force attacks via direct calls to the authentication CGI script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T21:00:00.000Z
CVE-2007-2650 
The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file with (1) a large property size or (2) a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T21:00:00.000Z
CVE-2007-2651 
Multiple off-by-one errors in VooDoo cIRCle before 1.1.beta27 allow remote attackers to cause a denial of service (connection loss) or possibly execute arbitrary code via a (1) DNS name response of the exact length as a buffer; or a long (2) channel name, (3) partyline channel name, or unspecified vectors in crafted BOTNET packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T21:00:00.000Z
CVE-2007-2652 
Multiple unspecified vulnerabilities in Free-SA before 1.2.2 allow remote attackers to execute arbitrary code via unspecified vectors involving certain (1) sprintf and (2) vsprintf calls in (a) r_index.c, (b) r_reports.c, (c) r_topsites.c, (d) r_topuser.c, (e) r_typical.c, (f) r_userdatetime.c, and (g) r_users.c in reports/; and (h) w_fs.c, (i) w_internal.c, and (j) w_log_operations.c in work/, probably related to buffer overflows.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T21:00:00.000Z
CVE-2007-2654 
xfs_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary files on xfs filesystems.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T21:00:00.000Z
CVE-2007-2655 
Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vectors, possibly a format string vulnerability that allows remote code execution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T21:00:00.000Z
CVE-2007-2656 
Stack-based buffer overflow in the Hewlett-Packard (HP) Magview ActiveX control in hpqvwocx.dll 1.0.0.309 allows remote attackers to cause a denial of service (application crash) and possibly have other impact via a long argument to the DeleteProfile method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2657 
Unspecified vulnerability in the PrecisionID Barcode 1.3 ActiveX control in PrecisionID_DataMatrix.DLL allows remote attackers to cause a denial of service via a long argument to the SaveBarCode method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2658 
Unspecified vulnerability in the ID Automation Linear Barcode 1.6.0.5 ActiveX control in IDAutomationLinear6.dll allows remote attackers to cause a denial of service via a long argument to the SaveEnhWMF method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2659 
Directory traversal vulnerability in index.php in PHP Advanced Transfer Manager (phpATM) 1.30 allows remote attackers to read arbitrary files and obtain script source code via a .. (dot dot) in the directory parameter in a downloadfile action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2660 
PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, as used in CJG EXPLORER PRO 3.3 and earlier and probably other products, allows remote attackers to execute arbitrary PHP code via a URL in the g_pcltar_lib_dir parameter.  NOTE: CVE disputes this issue since there is no include statement in pcltrace.lib.php.  NOTE: the pcltar.lib.php vector is already covered by CVE-2007-2199
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2661 
SQL injection vulnerability in archshow.asp in BlogMe 3.0 allows remote attackers to execute arbitrary SQL commands via the var parameter, a different vector than CVE-2006-5976.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2662 
SQL injection vulnerability in EfesTECH Haber 5.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to the top-level URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2663 
PHP remote file inclusion vulnerability in language/1/splash.lang.php in Beacon 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the languagePath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2664 
PHP remote file inclusion vulnerability in includes/common.php in Yaap 1.5 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter, possibly related to the __autoload function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2665 
PHP remote file inclusion vulnerability in block.php in PhpFirstPost 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the Include parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2666 
Stack-based buffer overflow in LexRuby.cxx (SciLexer.dll) in Scintilla 1.73, as used by notepad++ 4.1.1 and earlier, allows user-assisted remote attackers to execute arbitrary code via certain Ruby (.rb) files with long lines.  NOTE: this was originally reported as a vulnerability in notepad++.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2667 
Buffer overflow in the DB Software Laboratory VImpX ActiveX control in VImpX.ocx 4.7.3 allows remote attackers to execute arbitrary code via a long LogFile parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2668 
Buffer overflow in webdesproxy 0.0.1 allows remote attackers to execute arbitrary code via a long URL, possibly involving the process_connection_request function in webdesproxy.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2669 
Multiple cross-site scripting (XSS) vulnerabilities in PHPChain 1.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the catid parameter to (1) settings.php or (2) cat.php.  NOTE: certain parameter values also trigger path disclosure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2670 
PHPChain 1.0 and earlier allows remote attackers to obtain the installation path via invalid values of the catid parameter to (1) settings.php or (2) cat.php, as demonstrated by XSS manipulations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2671 
Mozilla Firefox 2.0.0.3 allows remote attackers to cause a denial of service (application crash) via a long hostname in an HREF attribute in an A element, which triggers an out-of-bounds memory access.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2672 
SQL injection vulnerability in index.php in PHP Coupon Script 3.0 allows remote attackers to execute arbitrary SQL commands via the bus parameter in a viewbus page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2673 
SQL injection vulnerability in includes/funcs_vendors.php in Censura 1.15.04, and other versions before 1.16.04, allows remote attackers to execute arbitrary SQL commands via the vendorid parameter in a vendor_info cmd action to censura.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2674 
SQL injection vulnerability in detail.php in Pre Shopping Mall 1.0 allows remote attackers to execute arbitrary SQL commands via the prodid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2675 
SQL injection vulnerability in search.php in Pre Classifieds Listings 1.0 allows remote attackers to execute arbitrary SQL commands via the category parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2676 
PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine (OTE) 0.7.8 allows remote attackers to execute arbitrary PHP code via a URL in the ote_home parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2677 
Multiple PHP remote file inclusion vulnerabilities in phpChess Community Edition 2.0 allow remote attackers to execute arbitrary PHP code via a URL in (1) the config parameter to includes/language.php, or the Root_Path parameter to (2) layout_admin_cfg.php, (3) layout_cfg.php, or (4) layout_t_top.php in skins/phpchess/.  NOTE: vector 1 has been disputed by CVE, since the code is defined within a function that is not called from within includes/language.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-14T23:00:00.000Z
CVE-2007-2678 
Buffer overflow in the isChecked function in toolbar.dll in Netsprint Toolbar 1.1 might allow remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-15T00:00:00.000Z
CVE-2007-2679 
PHP file inclusion vulnerability in index.php in Ivan Peevski gallery 0.3 in Simple PHP Scripts (sphp) allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the gallery parameter, which is accessed by the file_exists function.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-15T00:00:00.000Z
CVE-2007-2680 
Cross-site scripting (XSS) vulnerability in the management interface in Canon Network Camera Server VB100 and VB101 with firmware 3.0 R69 and earlier, and VB150 with firmware 1.1 R39 and earlier, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-15T00:00:00.000Z
CVE-2007-2681 
Directory traversal vulnerability in blogs/index.php in b2evolution 1.6 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the core_subdir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-15T00:00:00.000Z
CVE-2007-2682 
The installer for Adobe Version Cue CS3 Server on Apple Mac OS X, as used in Adobe Creative Suite 3 (CS3), does not re-enable the personal firewall after completing the product installation, which allows remote attackers to bypass intended firewall rules.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-18T18:00:00.000Z
CVE-2007-2683 
Buffer overflow in Mutt 1.4.2 might allow local users to execute arbitrary code via "&" characters in the GECOS field, which triggers the overflow during alias expansion.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-15T21:00:00.000Z
CVE-2007-2684 
Jetbox CMS 2.1 allows remote attackers to obtain sensitive information via (1) a direct request to (a) main_page.php, (b) open_tree.php, and (c) outputs.php; (2) a malformed view parameter to index.php, as demonstrated with an SQL injection manipulation; or (3) the id[] parameter to admin/cms/opentree.php, which reveals the installation path in the resulting error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T20:00:00.000Z
CVE-2007-2685 
Multiple SQL injection vulnerabilities in index.php in Jetbox CMS 2.1 allow remote attackers to execute arbitrary SQL commands via the (1) view or (2) login parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-21T20:00:00.000Z
CVE-2007-2686 
Cross-site scripting (XSS) vulnerability in index.php in Jetbox CMS 2.1 allows remote attackers to inject arbitrary web script or HTML via the login parameter in a sendpwd task.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-22T19:00:00.000Z
CVE-2007-2687 
Stack-based buffer overflow in the MicroWorld Agent service (MWAGENT.EXE) in MicroWorld Technologies eScan before 9.0.718.1 allows remote attackers to execute arbitrary code via a long command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-24T01:29:00.000Z