rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-2558 
PHP remote file inclusion vulnerability in index.php in phpFullAnnu CMS (pfa CMS) 6.0 allows remote attackers to execute arbitrary PHP code via a URL in the repinc parameter.  NOTE: CVE disputes this issue since $repinc is set to a constant value before use
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T18:00:00.000Z
CVE-2007-2559 
Multiple PHP remote file inclusion vulnerabilities in american cart 3.5 allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) index.php, (2) checkout.php, and (3) libsecure.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T18:00:00.000Z
CVE-2007-2560 
Directory traversal vulnerability in theme/acgv.php in ACGVannu 1.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the rubrik parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T18:00:00.000Z
CVE-2007-2561 
SQL injection vulnerability in index.asp in fipsCMS 2.1 allows remote attackers to execute arbitrary SQL commands via the pid parameter, a different vector than CVE-2006-6115.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T18:00:00.000Z
CVE-2007-2562 
Cross-site scripting (XSS) vulnerability in index.php in Kayako eSupport 3.00.90 allows remote attackers to inject arbitrary web script or HTML via the _m parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T18:00:00.000Z
CVE-2007-2563 
Buffer overflow in the AddFile function in VersalSoft HTTP File Upload ActiveX control (UFileUploaderD.dll) allows remote attackers to execute arbitrary code via a long argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T18:00:00.000Z
CVE-2007-2564 
Multiple stack-based buffer overflows in the Sienzo Digital Music Mentor (DMM) 2.6.0.4 ActiveX control (DSKernel2.dll) allow remote attackers to execute arbitrary code via a long argument to the (1) LockModules or (2) UnlockModule function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T18:00:00.000Z
CVE-2007-2565 
Cdelia Software ImageProcessing allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted BMP file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T18:00:00.000Z
CVE-2007-2566 
The SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to cause a denial of service (disk consumption) by uploading multiple bar codes, as demonstrated by a WSF package.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T18:00:00.000Z
CVE-2007-2567 
Buffer overflow in the SaveBarCode function in the Taltech Tal Bar Code ActiveX control allows remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T18:00:00.000Z
CVE-2007-2568 
Multiple stack-based buffer overflows in VCDGear 3.55 allow user-assisted remote attackers to execute arbitrary code via a long (1) tag or (2) track type in a CUE file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-16T22:00:00.000Z
CVE-2007-2569 
Multiple PHP remote file inclusion vulnerabilities in Friendly 1.0d1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the friendly_path parameter to (1) core/data/yaml.inc.php, or _load.php in (2) core/data/, (3) core/display/, or (4) core/support/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T21:00:00.000Z
CVE-2007-2570 
PHP remote file inclusion vulnerability in handlers/page/show.php in Wikivi5 allows remote attackers to execute arbitrary PHP code via a URL in the sous_rep parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T21:00:00.000Z
CVE-2007-2571 
SQL injection vulnerability in index.php in the wfquotes 1.0 0 module for XOOPS allows remote attackers to execute arbitrary SQL commands via the c parameter in a cat action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T21:00:00.000Z
CVE-2007-2572 
PHP remote file inclusion vulnerability in modules/noevents/templates/mfa_theme.php in NoAh (aka PHP Content Architect, phparch) 0.9 pre 1.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the tpls[1] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T21:00:00.000Z
CVE-2007-2573 
PHP remote file inclusion vulnerability in plugin/HP_DEV/cms2.php in PHPtree 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the s_dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T21:00:00.000Z
CVE-2007-2574 
Directory traversal vulnerability in index.php in Archangel Weblog 0.90.02 allows remote attackers to read arbitrary files via a .. (dot dot) in the index parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T21:00:00.000Z
CVE-2007-2575 
PHP remote file inclusion vulnerability in watermark.php in the vm (aka Jean-Francois Laflamme) watermark 0.4.1 mod for Gallery allows remote attackers to execute arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T21:00:00.000Z
CVE-2007-2576 
Buffer overflow in the East Wind Software advdaudio.ocx 1.5.1.1 ActiveX control allows user-assisted remote attackers to execute arbitrary code via a long OpenDVD property value.  NOTE: this issue might be related to CVE-2007-0976.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T21:00:00.000Z
CVE-2007-2577 
Multiple SQL injection vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to execute arbitrary SQL commands via (1) the mode parameter to feeds.php, the (2) form[cat] parameter to (a) news/list/index.php or (b) certain news/details/id_*/action_create/index.php files, or (3) the form[mods][] parameter to search/list/action_search/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T21:00:00.000Z
CVE-2007-2578 
Unspecified vulnerability in search/list/action_search/index.php in ACP3 4.0 beta 3 allows remote attackers to have unknown impact, relating to "Cookie Manipulation", via the form[search_term] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T21:00:00.000Z
CVE-2007-2579 
Multiple cross-site scripting (XSS) vulnerabilities in ACP3 4.0 beta 3 allow remote attackers to inject arbitrary web script or HTML via (1) the form[mail] parameter to contact/contact/index.php; the (2) form[mods][] or (3) form[search_term] parameter to search/list/action_search/index.php; (4) the id parameter to modules/dl/download.php; (5) the form[cat] parameter to news/list/index.php; the (6) form[cat], (7) form[name], or (8) form[message] parameter to certain news/details/id_*/action_create/index.php files; or (9) the form[mail] parameter to newsletter/create/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T21:00:00.000Z
CVE-2007-2580 
Unspecified vulnerability in Apple Safari allows local users to obtain sensitive information (saved keychain passwords) via the document.loginform.password.value JavaScript parameter loaded from an AppleScript script.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T21:00:00.000Z
CVE-2007-2581 
Multiple cross-site scripting (XSS) vulnerabilities in Microsoft Windows SharePoint Services 3.0 for Windows Server 2003 and Office SharePoint Server 2007 allow remote attackers to inject arbitrary web script or HTML via the PATH_INFO (query string) in "every main page," as demonstrated by default.aspx.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T21:00:00.000Z
CVE-2007-2582 
Multiple buffer overflows in the DB2 JDBC Applet Server (DB2JDS) service in IBM DB2 9.x and earlier allow remote attackers to (1) execute arbitrary code via a crafted packet to the DB2JDS service on tcp/6789; and cause a denial of service via (2) an invalid LANG parameter or (2) a long packet that generates a "MemTree overflow."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T22:00:00.000Z
CVE-2007-2583 
The in_decimal::set function in item_cmpfunc.cc in MySQL before 5.0.40, and 5.1 before 5.1.18-beta, allows context-dependent attackers to cause a denial of service (crash) via a crafted IF clause that results in a divide-by-zero error and a NULL pointer dereference.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T22:00:00.000Z
CVE-2007-2584 
Buffer overflow in the IsOldAppInstalled function in the McSubMgr.McSubMgr Subscription Manager ActiveX control (MCSUBMGR.DLL) in McAfee SecurityCenter before 6.0.25 and 7.x before 7.2.147 allows remote attackers to execute arbitrary code via a crafted argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T22:00:00.000Z
CVE-2007-2585 
Stack-based buffer overflow in the Verify function in the BarCodeWiz ActiveX control 2.0 and 2.52 (BarcodeWiz.dll) allows remote attackers to execute arbitrary code via a long argument.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T22:00:00.000Z
CVE-2007-2586 
The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which allows remote attackers to execute arbitrary code, and have other impact including reading startup-config, as demonstrated by a crafted MKD command that involves access to a VTY device and overflows a buffer, aka bug ID CSCek55259.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T22:00:00.000Z
CVE-2007-2587 
The IOS FTP Server in Cisco IOS 11.3 through 12.4 allows remote authenticated users to cause a denial of service (IOS reload) via unspecified vectors involving transferring files (aka bug ID CSCse29244).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T22:00:00.000Z
CVE-2007-2588 
Multiple buffer overflows in the Office Viewer OCX ActiveX control (oa.ocx) 3.2 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) HttpDownloadFile, (2) Open, (3) OpenWebFile, (4) DoOleCommand, (5) FTPDownloadFile, (6) FTPUploadFile, (7) HttpUploadFile, (8) Save, or (9) SaveWebFile function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-09T22:00:00.000Z
CVE-2007-2589 
Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attackers to send e-mails from arbitrary users via certain data in the SRC attribute of an IMG element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T03:55:00.000Z
CVE-2007-2590 
Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to obtain user names and other sensitive information via a direct request to (1) usrmgr/userList.asp or (2) usrmgr/userStatusList.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T03:55:00.000Z
CVE-2007-2591 
usrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allows remote attackers to modify user account details and cause a denial of service (account deactivation) via the userid parameter in an update action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T03:55:00.000Z
CVE-2007-2592 
Multiple cross-site scripting (XSS) vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wireless Email Express, allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to de/pda/dev_logon.asp and (2) multiple unspecified vectors in (a) usrmgr/registerAccount.asp, (b) de/create_account.asp, and other files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T03:55:00.000Z
CVE-2007-2593 
The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requirements, downgrade the server security, and possibly conduct man-in-the-middle attacks via unspecified vectors, as demonstrated using the Remote Desktop Protocol (RDP) 6.0 client.  NOTE: a third party claims that the vendor may have fixed this in approximately 2006.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T03:55:00.000Z
CVE-2007-2594 
PHP remote file inclusion vulnerability in inc/articles.inc.php in phpMyPortal 3.0.0 RC3 allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[CHEMINMODULES] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2595 
RSAuction 2.73.1.3 allows remote authenticated users to move their own account status from Suspended to Active via a direct request for the activation URL that is provided at the time of account registration. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2596 
PHP remote file inclusion vulnerability in common/func.php in aForum 1.32 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the CommonAbsDir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2597 
Multiple PHP remote file inclusion vulnerabilities in telltarget CMS 1.3.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) ordnertiefe parameter to site_conf.php; or the (2) tt_docroot parameter to (a) class.csv.php, (b) produkte_nach_serie.php, or (c) ref_kd_rubrik.php in functionen/; (d) hg_referenz_jobgalerie.php, (e) surfer_anmeldung_NWL.php, (f) produkte_nach_serie_alle.php, (g) surfer_aendern.php, (h) ref_kd_rubrik.php, or (i) referenz.php in module/; or (j) 1/lay.php or (k) 3/lay.php in standard/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2598 
SQL injection vulnerability in print.php in SimpleNews 1.0.0 FINAL allows remote attackers to execute arbitrary SQL commands via the news_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2599 
Multiple SQL injection vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) catFile parameter to (a) browseCat.php or (b) browseSubCat.php; the (2) id parameter to (c) openTutorial.php, (d) topFrame.php, or (e) admin/editListing.php; or (3) the search parameter to search.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2600 
Multiple cross-site scripting (XSS) vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) catFile parameter to (a) browseCat.php or (b) browseSubCat.php; the (2) id parameter to (c) openTutorial.php, (d) topFrame.php, or (e) admin/editListing.php; or the (3) search parameter to search.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2601 
Buffer overflow in a certain ActiveX control in the GDivX Zenith Player AviFixer class in fix.dll 1.0.0.1 allows remote attackers to execute arbitrary code via a long SetInputFile property value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2602 
Buffer overflow in MIBEXTRA.EXE in Ipswitch WhatsUp Gold 11 allows attackers to cause a denial of service (application crash) or execute arbitrary code via a long MIB filename argument.  NOTE: If there is not a common scenario under which MIBEXTRA.EXE is called with attacker-controlled command line arguments, then perhaps this issue should not be included in CVE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2603 
Unspecified vulnerability in the Init function in the Audio CD Ripper OCX (AudioCDRipperOCX.ocx) 1.0 ActiveX control allows remote attackers to cause a denial of service (NULL dereference and Internet Explorer crash) via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2604 
Unspecified vulnerability in the FlexLabel ActiveX control allows remote attackers to cause a denial of service (unstable behavior) via an improper initialization, as demonstrated by a certain value of the Caption property.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2605 
Unspecified vulnerability in the GetPropertyById function in ISoftomateObj in SoftomateLib in BRUJULA4.NET.DLL in the Brujula Toolbar (Brujula.net toolbar) allows attackers to cause a denial of service (NULL dereference and browser crash) via certain arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2606 
Multiple buffer overflows in Firebird 2.1 allow attackers to trigger memory corruption and possibly have other unspecified impact via certain input processed by (1) config\ConfigFile.cpp or (2) msgs\check_msgs.epp.  NOTE: if ConfigFile.cpp reads a configuration file with restrictive permissions, then the ConfigFile.cpp vector may not cross privilege boundaries and perhaps should not be included in CVE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2607 
PHP remote file inclusion vulnerability in views/print/printbar.php in LaVague 0.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the views_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2608 
PHP remote file inclusion vulnerability in lib/smarty/SmartyFU.class.php in Miplex2 Alpha 1 allows remote attackers to execute arbitrary PHP code via a URL in the system[smarty][dir] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2609 
Multiple PHP remote file inclusion vulnerabilities in gnuedu 1.3b2 allow remote attackers to execute arbitrary PHP code via a URL in the (a) ETCDIR parameter to (1) libs/lom.php; (2) lom_update.php, (3) check-lom.php, and (4) weigh_keywords.php in scripts/; the (b) LIBSDIR parameter to (5) logout.php, (6) help.php, (7) index.php, (8) login.php; and the ETCDIR parameter to (9) web/lom.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2610 
Cross-site scripting (XSS) vulnerability in OpenLD before 1.1.9, and 1.1-modified before 1.1-modified3, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors in the Search feature, possibly the term parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2611 
Multiple PHP remote file inclusion vulnerabilities in CGX 20050314 allow remote attackers to execute arbitrary PHP code via a URL in the pathCGX parameter to (1) mtdialogo.php, (2) ltdialogo.php, (3) login.php, and (4) logingecon.php in inc/; and multiple unspecified files in frm/, sql/, and cns/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2612 
SQL injection vulnerability in libs/Wakka.class.php in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to execute arbitrary SQL commands via the limit parameter.  NOTE: this issue only applies to a "modified installation."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2613 
WikkaWiki (Wikka Wiki) before 1.1.6.3 allows attackers in a shared virtual host server environment to upload and execute an arbitrary configuration file by modifying the WAKKA_CONFIG environment variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2614 
PHP remote file inclusion vulnerability in examples/widget8.php in phpHtmlLib 2.4.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the phphtmllib parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2615 
Multiple PHP remote file inclusion vulnerabilities in Crie seu PHPLojaFacil 0.1.5 allow remote attackers to execute arbitrary PHP code via a URL in the path_local parameter to (1) ftp.php, (2) libs/db.php, and (3) libs/ftp.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T10:00:00.000Z
CVE-2007-2616 
Stack-based buffer overflow in the SSL version of the NMDMC.EXE service in Novell NetMail 3.52e FTF2 and probably earlier allows remote attackers to execute arbitrary code via a crafted request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T16:00:00.000Z
CVE-2007-2617 
srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T16:00:00.000Z
CVE-2007-2618 
CRLF injection vulnerability in index.php in Drake CMS 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the lang parameter. NOTE: Drake CMS has only a beta version available, and the vendor has previously stated "We do not consider security reports valid until the first official release of Drake CMS."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T16:00:00.000Z
CVE-2007-2619 
Symantec pcAnywhere 11.5.x and 12.0.x retains unencrypted login credentials for the most recent login within process memory, which allows local administrators to obtain the credentials by reading process memory, a different vulnerability than CVE-2006-3785.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T16:00:00.000Z
CVE-2007-2620 
PHP remote file inclusion vulnerability in inc/config.inc.php in Jakub Steiner (aka jimmac) original 0.11 allows remote attackers to execute arbitrary PHP code via a URL in the x[1] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-05-11T16:00:00.000Z