Aria-Security Team IT!CMS 0.2 - 'menu-ed.php?wndtitle' Cross-Site Scripting
webapps php CVE-2007-4115;OSVDB-37255

Aria-Security Team IT!CMS 0.2 - 'lang-en.php?wndtitle' Cross-Site Scripting
webapps php CVE-2007-4115;OSVDB-37254

cocoruder Baidu Soba Search Bar 5.4 - 'BaiduBar.dll' ActiveX Control Remote Code Execution
remote windows CVE-2007-4105;OSVDB-37706

freeprotect.net phpCoupon - Remote Payment Bypass
webapps php CVE-2007-4143;OSVDB-39027

Aria-Security Team Real Estate Listing Website Application Template Login Dialog - SQL Injection
webapps asp CVE-2007-4111;OSVDB-36874

Aria-Security Team Pay Roll Time Sheet and Punch Card Application With Web UI - 'login.asp' SQL Injection
webapps asp CVE-2007-4106;OSVDB-36289

Aria-Security Team Message Board / Threaded Discussion Forum - 'Sign_In.aspx' SQL Injection
webapps asp CVE-2007-4110;OSVDB-37258

Aria-Security Team Online Store Application Template - 'Sign_In.aspx' SQL Injection
webapps asp CVE-2007-4109;OSVDB-36465

Yollubunlar Berthanas Ziyaretci Defteri 2.0 - 'Yonetici.asp' SQL Injection
webapps asp CVE-2007-4119;OSVDB-36430

Cr@zy_King Metyus Forum Portal 1.0 - 'Philboard_Forum.asp' SQL Injection
webapps asp CVE-2007-4116;OSVDB-36466

Tim Brown Bandersnatch 0.4 - Multiple Input Validation Vulnerabilities
webapps php CVE-2007-3909;OSVDB-38268

Xavier Roche Microsoft Windows Explorer - '.png' Image Local Denial of Service
dos windows CVE-2007-5133;OSVDB-45521

David Kierznowski WordPress Plugin WP-FeedStats 2.1 - HTML Injection
webapps php CVE-2007-4104;OSVDB-37259

d3hydr8 Nukedit 4.9.x - 'login.asp' Cross-Site Scripting
webapps asp CVE-2007-4052;OSVDB-37129

r0ut3r T1lib - 'intT1_Env_GetCompletePath' Buffer Overflow (PoC)
dos php CVE-2007-4033;OSVDB-38698

Aria-Security Team BSM Store Dependent Forums 1.02 - 'Username' SQL Injection
webapps php CVE-2007-4095;OSVDB-36283