rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-5466 
Multiple buffer overflows in eXtremail 2.1.1 and earlier allow remote attackers to (1) have an unknown impact by sending multiple long strings to the IMAP port (143/tcp); (2) execute arbitrary code via a long string in an IMAP AUTHENTICATE PLAIN action, involving the ifParseAuthPlain function; (3) execute arbitrary code via a long LOGIN command to the admin interface port (4501/tcp); or (4) execute arbitrary code via a long string in an IMAP AUTHENTICATE LOGIN (aka CRAM-MD5 authentication) action, involving the ifProcImapAuth1 function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-15T23:00:00.000Z
CVE-2007-5467 
Integer overflow in eXtremail 2.1.1 and earlier allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long USER command containing "%s" sequences to the pop3 port (110/tcp), which are expanded to "%%s" before being used in the memmove function, possibly due to an incomplete fix for CVE-2001-1078.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-15T23:00:00.000Z
CVE-2007-5468 
Cisco CallManager 5.1.1.3000-5 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID (aka "toll fraud and authentication forward attack").
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-16T00:00:00.000Z
CVE-2007-5469 
OpenSER 1.2.2 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to use sniffed Digest authentication credentials to call arbitrary telephone numbers or spoof caller ID (aka "toll fraud and authentication forward attack").  NOTE: Debian disputes this issue, stating that "having the two URIs mismatch is allowed by the standard and happens in some setups for valid reasons.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-16T00:00:00.000Z
CVE-2007-5470 
Microsoft Expression Media stores the catalog password in cleartext in the catalog IVC file, which allows local users to obtain sensitive information and gain access to the catalog by reading the IVC file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-16T00:00:00.000Z
CVE-2007-5471 
libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization error, which allows remote attackers to cause a denial of service (daemon exit) via a GSS-TSIG request.  NOTE: this issue probably affects other daemons that attempt to initialize this library within a chroot configuration or other invalid configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-16T00:00:00.000Z
CVE-2007-5472 
Cross-site scripting (XSS) vulnerability in the Server component in CA Host-Based Intrusion Prevention System (HIPS) before 8.0.0.93 allows remote attackers to inject arbitrary web script or HTML via requests that are written to logs for later display in the log viewer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-22T19:00:00.000Z
CVE-2007-5473 
StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source code of sensitive files via a request containing a trailing (1) space or (2) dot, which is not properly handled by XSP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T18:00:00.000Z
CVE-2007-5474 
The driver for the Linksys WRT350N Wi-Fi access point with firmware 2.00.17 on the Atheros AR5416-AC1E chipset does not properly parse the Atheros vendor-specific information element in an association request, which allows remote authenticated users to cause a denial of service (device reboot or hang) or possibly execute arbitrary code via an Atheros information element with an invalid length, as demonstrated by an element that is too long.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-09-05T16:00:00.000Z
CVE-2007-5475 
Multiple buffer overflows in the Marvell wireless driver, as used in Linksys WAP4400N Wi-Fi access point with firmware 1.2.17 on the Marvell 88W8361P-BEM1 chipset, and other products, allow remote 802.11-authenticated users to cause a denial of service (wireless access point crash) and possibly execute arbitrary code via an association request with long (1) rates, (2) extended rates, and unspecified other information elements.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-11-12T23:00:00.000Z
CVE-2007-5476 
Unspecified vulnerability in Adobe Flash Player 9.0.47.0 and earlier, when running on Opera before 9.24 on Mac OS X, has unknown "Highly Severe" impact and unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T00:00:00.000Z
CVE-2007-5477 
Cross-site scripting (XSS) vulnerability in auth.w in djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin allows remote attackers to inject arbitrary web script or HTML via the redir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-16T23:00:00.000Z
CVE-2007-5478 
Cross-site scripting (XSS) vulnerability in projects in Nabh Stringbeans Portal (sbportal) 3.2 allows remote attackers to inject arbitrary web script or HTML via the project_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-16T23:00:00.000Z
CVE-2007-5479 
Cross-site scripting (XSS) vulnerability in Search.asp in Xcomputer allows remote attackers to inject arbitrary web script or HTML via the EXPS parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-16T23:00:00.000Z
CVE-2007-5480 
Multiple cross-site scripting (XSS) vulnerabilities in InnovaAge InnovaShop allow remote attackers to inject arbitrary web script or HTML via the (1) msg parameter to msg.jsp, and the (2) contentid parameter to tc/contents/home001.jsp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-16T23:00:00.000Z
CVE-2007-5481 
Distributed Checksum Clearinghouse (DCC) 1.3.65 allows remote attackers to cause a denial of service (crash) via a "SOCKS flood."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-16T23:00:00.000Z
CVE-2007-5482 
Unspecified vulnerability in the FTP service in Sun StorEdge/StorageTek 3510 FC Array with firmware before 4.21 allows remote attackers, with access to the Ethernet management interface, to cause a denial of service (I/O request timeout and device hang) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-16T23:00:00.000Z
CVE-2007-5483 
Unspecified vulnerability in the Administrative Scripting Tools (such as wsadmin or ANT) in IBM WebSphere Application Server 5.x and 6.0.x has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-16T23:00:00.000Z
CVE-2007-5484 
Directory traversal vulnerability in wxis.exe in WWWISIS 7.1 allows local users to read arbitrary files via a .. (dot dot) in the IsisScript parameter to iah.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-16T23:00:00.000Z
CVE-2007-5485 
SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the album parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-16T23:00:00.000Z
CVE-2007-5486 
dotProject before 2.1 does not properly check privileges when invoking the Companies module, which allows remote attackers to access this module via a crafted URL.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-16T23:00:00.000Z
CVE-2007-5487 
Stack-based buffer overflow in COWON America jetAudio Basic 7.0.3 allows user-assisted remote attackers to execute arbitrary code via a long URL in an EXTM3U section of a .m3u file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-16T23:00:00.000Z
CVE-2007-5488 
Multiple SQL injection vulnerabilities in cdr_addon_mysql in Asterisk-Addons before 1.2.8, and 1.4.x before 1.4.4, allow remote attackers to execute arbitrary SQL commands via the (1) source and (2) destination numbers, and probably (3) SIP URI, when inserting a record.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5489 
Directory traversal vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T18:00:00.000Z
CVE-2007-5490 
SQL injection vulnerability in default.asp in Okul Otomasyon Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T18:00:00.000Z
CVE-2007-5491 
Directory traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to chmod arbitrary files to 0777 via ".." sequences in the lang parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T19:00:00.000Z
CVE-2007-5492 
Static code injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to execute arbitrary PHP code via the value parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T19:00:00.000Z
CVE-2007-5493 
The SMS handler for Windows Mobile 2005 Pocket PC Phone edition allows attackers to hide the sender field of an SMS message via a malformed WAP PUSH message that causes the PDU to be incorrectly decoded.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-18T00:00:00.000Z
CVE-2007-5494 
Memory leak in the Red Hat Content Accelerator kernel patch in Red Hat Enterprise Linux (RHEL) 4 and 5 allows local users to cause a denial of service (memory consumption) via a large number of open requests involving O_ATOMICLOOKUP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T02:00:00.000Z
CVE-2007-5495 
sealert in setroubleshoot 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the sealert.log temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-23T14:00:00.000Z
CVE-2007-5496 
Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or HTML via a crafted (1) file or (2) process name, which triggers an Access Vector Cache (AVC) log entry in a log file used during composition of HTML documents for sealert.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-23T14:00:00.000Z
CVE-2007-5497 
Multiple integer overflows in libext2fs in e2fsprogs before 1.40.3 allow user-assisted remote attackers to execute arbitrary code via a crafted filesystem image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-07T11:00:00.000Z
CVE-2007-5498 
The Xen hypervisor block backend driver for Linux kernel 2.6.18, when running on a 64-bit host with a 32-bit paravirtualized guest, allows local privileged users in the guest OS to cause a denial of service (host OS crash) via a request that specifies a large number of blocks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2008-05-08T00:00:00.000Z
CVE-2007-5500 
The wait_task_stopped function in the Linux kernel before 2.6.23.8 checks a TASK_TRACED bit instead of an exit_state value, which allows local users to cause a denial of service (machine crash) via unspecified vectors.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-20T02:00:00.000Z
CVE-2007-5501 
The tcp_sacktag_write_queue function in net/ipv4/tcp_input.c in Linux kernel 2.6.21 through 2.6.23.7, and 2.6.24-rc through 2.6.24-rc2, allows remote attackers to cause a denial of service (crash) via crafted ACK responses that trigger a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-15T20:00:00.000Z
CVE-2007-5502 
The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates random data that is more predictable than expected and makes it easier for attackers to bypass protection mechanisms that rely on the randomness.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-12-01T02:00:00.000Z
CVE-2007-5503 
Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PNG image with large width and height values, which is not properly handled by the read_png function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-30T01:00:00.000Z
CVE-2007-5504 
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+ and 10.1.0.5 unknown impact and remote attack vectors, related to (1) Import (DB01) and (2) Advanced Queuing (DB25).  NOTE: as of 20071108, Oracle has not disputed reliable researcher claims that DB25 is for a buffer overflow in the DBLINK_INFO procedure in the DBMS_AQADM_SYS package.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5505 
Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote attack vectors, related to (1) the Export component (DB02), (2) Oracle Text (DB04), (3) Oracle Text (DB05), (4) Spatial component (DB07), and (5) Advanced Security Option (DB19).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5506 
The Core RDBMS component in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote attackers to cause a denial of service (CPU consumption) via a crafted type 6 Data packet, aka DB20.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5507 
The GIOP service in TNS Listener in the Oracle Net Services component in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote attackers to cause a denial of service (crash) or read potentially sensitive memory via a connect GIOP packet with an invalid data size, which triggers a buffer over-read, aka DB22.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5508 
Multiple SQL injection vulnerabilities in the CTXSYS Intermedia application for the Oracle Text component (CTX_DOC) in Oracle Database 10.1.0.5 and 10.2.0.3 allow remote authenticated users to execute arbitrary SQL commands via the (1) THEMES, (2) GIST, (3) TOKENS, (4) FILTER, (5) HIGHLIGHT, and (6) MARKUP procedures, aka DB03.  NOTE: remote unauthenticated attack vectors exist when CTXSYS is used with oracle Application Server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5509 
Unspecified vulnerability in the Spatial component in Oracle Database 9.2.0.8 and 9.2.0.8DV has unknown impact and remote attack vectors, aka DB06.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5510 
Multiple unspecified vulnerabilities in the Workspace Manager component in Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.0.8.0 have unknown impact and remote attack vectors, aka (1) DB08, (2) DB09, (3) DB10, (4) DB11, (5) DB12, (6) DB13, (7) DB14, (8) DB15, (9) DB16, (10) DB17, and (11) DB18.  NOTE: one of these issues is probably CVE-2007-5511, but there are insufficient details to be certain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5511 
SQL injection vulnerability in Workspace Manager for Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.0.8.0 allows attackers to execute arbitrary SQL commands via the FINDRICSET procedure in the LT package.  NOTE: this is probably covered by CVE-2007-5510, but there are insufficient details to be certain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5512 
Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV and 10.2.0.3 has unknown impact and remote attack vectors, aka DB21.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5513 
The XML DB (XMLDB) component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 generates incorrect audit entries in the USERID column in which (1) long usernames are trimmed to 5 characters, or (2) short entries contain any extra characters from usernames in previous entries, aka DB23.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5514 
Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 have unknown impact and attack vectors related to (1) Database Vault component (DB24) and (2) SQL Execution component (DB26).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5515 
Unspecified vulnerability in the Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.2, and 10.2.0.3 has unknown impact and remote attack vectors, aka DB27.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5516 
Unspecified vulnerability in the Oracle Process Mgmt & Notification component in Oracle Application Server 10.1.3.3 has unknown impact and remote attack vectors, aka AS01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5517 
Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.0.2 and 10.1.4.1, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5518 
Unspecified vulnerability in the Oracle HTTP Server component in Oracle Application Server 10.1.3.2 has unknown impact and remote attack vectors, aka AS03.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5519 
Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS04.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5520 
Unspecified vulnerability in the Oracle Internet Directory component in Oracle Database 9.2.0.8 and 9.2.0.8DV, and Oracle Application Server 9.0.4.3, 10.1.3.0.0 up to 10.1.3.3.0, and 10.1.2.0.1 up to 10.1.2.2.0, has unknown impact and remote attack vectors, aka AS05.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5521 
Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.3.3, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS06.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5522 
Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.4.1 has unknown impact and remote attack vectors, aka AS07.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5523 
Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.4.0, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS08.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5524 
Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS09 or AS9.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5525 
Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.4.0.1; Collaboration Suite 10.1.2; and Enterprise Manager 10.1.2 has unknown impact and remote attack vectors, aka AS10.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5526 
Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.0.2, 10.1.2.2, and 10.1.4.1, and Collaboration Suite 10.1.2, has unknown impact and remote attack vectors, aka AS11.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5527 
Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 have unknown impact and remote attack vectors, related to (1) Application Object Library component (APP01), (2) Contracts Integration (APP02), (3) Applications Manager (APP04), (4) Marketing component (APP05), and (5) Exchange component (APP07).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5528 
Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.2 have unknown impact and attack vectors related to (1) Public Sector Human Resources (APP03) and (2) Quoting component (APP06).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5529 
Unspecified vulnerability in the Oracle Self-Service Web Applications component in client-only installations of Oracle E-Business Suite 11.5.10.2 has unknown impact and remote attack vectors, aka APP08.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5530 
Unspecified vulnerability in the Database Control component in Oracle Database 10.1.0.5 and 10.2.0.3, and Enterprise Manager, has unknown impact and remote attack vectors, aka EM01.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z
CVE-2007-5531 
Unspecified vulnerability in Oracle Help for Web, as used in Oracle Application Server, Oracle Database 10.2.0.3, and Enterprise Manager 10.1.0.6, has unknown impact and remote attack vectors, aka EM02.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-17T23:00:00.000Z