rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-6086 
Directory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the module parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-22T00:00:00.000Z
CVE-2007-6087 
Cross-site request forgery (CSRF) vulnerability in index.php in VigileCMS 1.4 allows remote attackers to change the admin password via certain parameters to the changepass module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-22T00:00:00.000Z
CVE-2007-6088 
PHP remote file inclusion vulnerability in includes/functions_mod_user.php in phpBBViet 02.03.07 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-22T00:00:00.000Z
CVE-2007-6089 
PHP remote file inclusion vulnerability in index.php in meBiblio 0.4.5 allows remote attackers to execute arbitrary PHP code via a URL in the action parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-22T00:00:00.000Z
CVE-2007-6090 
Cross-site scripting (XSS) vulnerability in index.php in Nuked-Klan 1.7.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-22T00:00:00.000Z
CVE-2007-6091 
Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and possibly JiRo's Upload Manager (aka JiRo's Upload System or JUS), allow remote attackers to execute arbitrary SQL commands via the (1) Username (aka Login or Email) or (2) Password field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-22T00:00:00.000Z
CVE-2007-6092 
Buffer overflow in libsrtp in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and attack vectors.  NOTE: it is not clear whether this issue crosses privilege boundaries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-22T00:00:00.000Z
CVE-2007-6093 
The SRTP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service (kernel crash) via an RTCP index that is "much more than expected."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-22T00:00:00.000Z
CVE-2007-6094 
The IPsec module in the VPN component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service (module crash) via an IPsec Phase 2 proposal that lacks Perfect Forward Secrecy (PFS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-22T00:00:00.000Z
CVE-2007-6095 
The SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0, when Remote NAT Traversal is employed, does not properly perform user registration and message distribution, which might allow remote authenticated users to receive messages intended for other users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-22T00:00:00.000Z
CVE-2007-6096 
Ingate Firewall before 4.6.0 and SIParator before 4.6.0 use cleartext storage for passwords of "administrators with less privileges," which might allow attackers to read these passwords via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-22T00:00:00.000Z
CVE-2007-6097 
Unspecified vulnerability in the ICMP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and remote attack vectors, related to ICMP packets that are "incorrectly accepted."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-22T00:00:00.000Z
CVE-2007-6098 
Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated (1) ICMP, (2) UDP, and (3) TCP packets, which has unknown impact and remote attack vectors; and do not log (4) serial-console login attempts with nonexistent usernames, which might make it easier for attackers with physical access to guess valid login credentials while avoiding detection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-22T00:00:00.000Z
CVE-2007-6099 
Unspecified vulnerability in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 might leave "media pinholes" open upon a restart of the SIP module, which might make it easier for remote attackers to conduct unauthorized activities.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-22T00:00:00.000Z
CVE-2007-6100 
Cross-site scripting (XSS) vulnerability in libraries/auth/cookie.auth.lib.php in phpMyAdmin before 2.11.2.2, when logins are authenticated with the cookie auth_type, allows remote attackers to inject arbitrary web script or HTML via the convcharset parameter to index.php, a different vulnerability than CVE-2005-0992.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-23T20:00:00.000Z
CVE-2007-6101 
Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service (daemon crash) via (1) malformed number list ranges in unspecified IMAP commands, and possibly (2) a blank string in unspecified messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-23T20:00:00.000Z
CVE-2007-6102 
Cross-site scripting (XSS) vulnerability in Feed to JavaScript (Feed2JS) 1.91 allows remote attackers to inject arbitrary web script or HTML via a URL in a feed.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-23T20:00:00.000Z
CVE-2007-6103 
I Hear U (IHU) 0.5.6 and earlier allows remote attackers to cause (1) a denial of service (infinite loop) via a packet that contains zero in the size field in its header, which is improperly handled by the Receiver::processPacket function; and (2) a denial of service (daemon crash) via an (a) IHU_INFO_INIT or a (b) IHU_INFO_RING packet that does not specify the mode, which is improperly handled by the Player::ring function in Player.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-23T20:00:00.000Z
CVE-2007-6104 
Cross-site scripting (XSS) vulnerability in the Instant Web Publishing feature in FileMaker Pro 7 and 8, Server 7 and 8, and Developer 7 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-23T20:00:00.000Z
CVE-2007-6105 
Multiple PHP remote file inclusion vulnerabilities in TalkBack 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the (1) language_file parameter to (a) comments-display-tpl.php and (b) addons/separate-comments-mod/my-comments-display-tpl.php and the (2) config[comments_form_tpl] parameter to comments-display-tpl.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-23T20:00:00.000Z
CVE-2007-6106 
SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL commands via the seid parameter in a viewevent action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-23T20:00:00.000Z
CVE-2007-6109 
Stack-based buffer overflow in emacs allows user-assisted attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a large precision value in an integer format string specifier to the format function, as demonstrated via a certain "emacs -batch -eval" command line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-07T11:00:00.000Z
CVE-2007-6110 
Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to inject arbitrary web script or HTML via the sort parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-23T20:00:00.000Z
CVE-2007-6111 
Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of service (crash) via (1) a crafted MP3 file or (2) unspecified vectors to the NCP dissector.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-23T20:00:00.000Z
CVE-2007-6112 
Buffer overflow in the PPP dissector Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-23T20:00:00.000Z
CVE-2007-6113 
Integer signedness error in the DNP3 dissector in Wireshark (formerly Ethereal) 0.10.12 to 0.99.6 allows remote attackers to cause a denial of service (long loop) via a malformed DNP3 packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-23T20:00:00.000Z
CVE-2007-6114 
Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (1) the SSL dissector or (2) the iSeries (OS/400) Communication trace file parser.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-23T20:00:00.000Z
CVE-2007-6115 
Buffer overflow in the ANSI MAP dissector for Wireshark (formerly Ethereal) 0.99.5 to 0.99.6, when running on unspecified platforms, allows remote attackers to cause a denial of service and possibly execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-23T20:00:00.000Z
CVE-2007-6116 
The Firebird/Interbase dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite loop or crash) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-23T20:00:00.000Z
CVE-2007-6117 
Unspecified vulnerability in the HTTP dissector for Wireshark (formerly Ethereal) 0.10.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted chunked messages.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-23T20:00:00.000Z
CVE-2007-6118 
The MEGACO dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-23T20:00:00.000Z
CVE-2007-6119 
The DCP ETSI dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (long loop and resource consumption) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-23T20:00:00.000Z
CVE-2007-6120 
The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-23T20:00:00.000Z
CVE-2007-6121 
Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) via a malformed RPC Portmap packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-23T20:00:00.000Z
CVE-2007-6122 
The default_encrypt function in encrypt.c in IRC Services before 5.0.63, and 5.1.x before 5.1.7, allows remote attackers to cause a denial of service (daemon crash) via a long password.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-26T22:00:00.000Z
CVE-2007-6123 
Unspecified vulnerability in IRC Services 5.1.8 has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-26T22:00:00.000Z
CVE-2007-6124 
Cross-site scripting (XSS) vulnerability in signin.php in Softbiz Freelancers Script 1 allows remote attackers to inject arbitrary web script or HTML via the errmsg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-26T22:00:00.000Z
CVE-2007-6125 
SQL injection vulnerability in search_form.php in Softbiz Freelancers Script 1 allows remote attackers to execute arbitrary SQL commands via the sb_protype parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-26T22:00:00.000Z
CVE-2007-6126 
Multiple cross-site scripting (XSS) vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the year parameter to (1) xml/index.php; or (2) the year parameter to view.page.inc.php, which is reachable through a view action to the top-level index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-26T22:00:00.000Z
CVE-2007-6127 
Multiple SQL injection vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the year parameter to (1) view.page.inc.php, which is reachable through a view action to index.php; or (2) the year parameter to news.page.inc.php, which is reachable through a news action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-26T22:00:00.000Z
CVE-2007-6128 
SQL injection vulnerability in events.php in WorkingOnWeb 2.0.1400 allows remote attackers to execute arbitrary SQL commands via the idevent parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-26T22:00:00.000Z
CVE-2007-6129 
Directory traversal vulnerability in scripts/include/show_content.php in Amber Script 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the id parameter.  NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-26T22:00:00.000Z
CVE-2007-6130 
gnump3d 2.9final does not apply password protection to its plugins, which might allow remote attackers to bypass intended access restrictions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-26T22:00:00.000Z
CVE-2007-6131 
buttonpressed.sh in scanbuttond 0.2.3 allows local users to overwrite arbitrary files via a symlink attack on the (1) scan.pnm and (2) scan.jpg temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-26T22:00:00.000Z
CVE-2007-6133 
PHP remote file inclusion vulnerability in admin/kfm/initialise.php in DevMass Shopping Cart 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the kfm_base_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-27T19:00:00.000Z
CVE-2007-6134 
SQL injection vulnerability in pkinc/public/article.php in PHPKIT 1.6.4pl1 allows remote attackers to execute arbitrary SQL commands via the contentid parameter in an article action to include.php, a different vector than CVE-2006-1773.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-27T19:00:00.000Z
CVE-2007-6135 
Cross-site scripting (XSS) vulnerability in phpslideshow.php in PHPSlideShow 0.9.9.2, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the directory parameter. NOTE: this issue was originally reported for toonchapter8.php, but this is probably a site-specific name, since the PHPSlideShow distribution does not contain that file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-27T19:00:00.000Z
CVE-2007-6136 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in M2Scripts MySpace Scripts Poll Creator allow remote attackers to inject arbitrary web script or HTML via the (1) title, (2) intro, and (3) question parameters, and (4) unspecified answer parameters, in a create_new action. NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-27T19:00:00.000Z
CVE-2007-6137 
SQL injection vulnerability in news.php in Content Injector 1.52 allows remote attackers to execute arbitrary SQL commands via the cat parameter to index.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-27T19:00:00.000Z
CVE-2007-6138 
SQL injection vulnerability in redir.asp in VU Mass Mailer allows remote attackers to execute arbitrary SQL commands via the password parameter to Default.asp (aka the Login Page).  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-27T19:00:00.000Z
CVE-2007-6139 
PHP remote file inclusion vulnerability in index.php in Mp3 ToolBox 1.0 beta 5 allows remote attackers to execute arbitrary PHP code via a URL in the skin_file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-27T19:00:00.000Z
CVE-2007-6140 
Multiple SQL injection vulnerabilities in Dora Emlak 2.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (a) emlak_detay.asp and (b) haber_detay.asp, the (2) kategori parameter to (c) kategorisirala.asp, and the (3) tip parameter to (d) tipsirala.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-27T19:00:00.000Z
CVE-2007-6141 
Cross-site scripting (XSS) vulnerability in vBTube.php in vBTube 1.1 Beta allows remote attackers to inject arbitrary web script or HTML via the search parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-27T19:00:00.000Z
CVE-2007-6142 
Multiple cross-site scripting (XSS) vulnerabilities in ph03y3nk just another flat file (JAF) CMS 4.0 RC2 allow remote attackers to inject arbitrary web script or HTML via the (1) show parameter to index.php and the (2) print parameter to print.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-27T19:00:00.000Z
CVE-2007-6143 
SQL injection vulnerability in default.asp (aka the Login Page) in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the password parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-27T19:00:00.000Z
CVE-2007-6144 
Heap-based buffer overflow in the PPlayer.XPPlayer.1 ActiveX control in pplayer.dll_1_work in Xunlei Thunder 5.7.4.401 allows remote attackers to execute arbitrary code via a long string in a FlvPlayerUrl property value.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-27T19:00:00.000Z
CVE-2007-6145 
Unspecified vulnerability in Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-01 allows remote attackers to bypass authentication and "view files" via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-27T19:00:00.000Z
CVE-2007-6146 
Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-02 on Windows might allow remote attackers to cause a denial of service (service stop) via a "specific file" argument to an FTP command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-27T19:00:00.000Z
CVE-2007-6147 
Multiple PHP remote file inclusion vulnerabilities in IAPR COMMENCE 1.3 allow remote attackers to execute arbitrary PHP code via a URL in the (a) php_root_path and sometimes the (b) privilege_root_path parameter to various PHP scripts under (1) admin/includes/, (2) admin/phase/, (3) includes/, (4) includes/page_includes/, (5) reviewer/includes/, (6) reviewer/phase/, and (7) user/phase/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-27T19:00:00.000Z
CVE-2007-6148 
Use-after-free vulnerability in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allows remote attackers to execute arbitrary code via an unspecified sequence of Real Time Message Protocol (RTMP) requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-13T20:00:00.000Z
CVE-2007-6149 
Multiple integer overflows in the Edge server in Adobe Flash Media Server 2 before 2.0.5, and Connect Enterprise Server 6 before SP3, allow remote attackers to execute arbitrary code via a Real Time Message Protocol (RTMP) message with a crafted integer field that is used for allocation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-02-13T20:00:00.000Z
CVE-2007-6150 
The "internal state tracking" code for the random and urandom devices in FreeBSD 5.5, 6.1 through 6.3, and 7.0 beta 4 allows local users to obtain portions of previously-accessed random values, which could be leveraged to bypass protection mechanisms that rely on secrecy of those values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T01:00:00.000Z
CVE-2007-6151 
The isdn_ioctl function in isdn_common.c in Linux kernel 2.6.23 allows local users to cause a denial of service via a crafted ioctl struct in which iocts is not null terminated, which triggers a buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-15T01:00:00.000Z
CVE-2007-6156 
Multiple cross-site scripting (XSS) vulnerabilities in base_qry_main.php in Base Analysis and Security Engine (BASE) before 1.3.9 allow remote attackers to inject arbitrary web script or HTML via the (1) sig[0] and (2) sig[1] parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-29T01:00:00.000Z
CVE-2007-6157 
Cross-site scripting (XSS) vulnerability in index.php in SimpleGallery 0.1.3 allows remote attackers to inject arbitrary web script or HTML via the album parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-29T01:00:00.000Z
CVE-2007-6158 
Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) loginname (aka Username) and (2) loginpass (aka Password) parameters to caladmin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-29T01:00:00.000Z
CVE-2007-6159 
SQL injection vulnerability in index.php in Tilde CMS 4.x and earlier allows remote attackers to execute arbitrary SQL commands via the aarstal parameter in a yeardetail action, a different vector than CVE-2006-1500.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-29T01:00:00.000Z