t0pP8uZz Buddy Zone 1.5 - Multiple SQL Injections
webapps php OSVDB-38962;CVE-2007-3526;OSVDB-38961;OSVDB-38960

t0pP8uZz Buddy Zone 1.5 - 'view_sub_cat.php?cat_id' SQL Injection
webapps php OSVDB-38936;CVE-2007-3549

r00t WebChat 0.78 - 'login.php?rid' SQL Injection
webapps php OSVDB-36295;CVE-2007-3534

Katatafish GL-SH Deaf Forum 6.4.4 - Local File Inclusion
webapps php OSVDB-37111;CVE-2007-3535;OSVDB-37110

GoLd_M b1gbb 2.24.0 - SQL Injection / Cross-Site Scripting
webapps php OSVDB-38951;CVE-2007-3590;OSVDB-38950;CVE-2007-3589;OSVDB-38937

Jesper Jurcenoks ETicket 1.5.5 - 'Open.php' Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2007-2801;OSVDB-34786

Nico Leidecker Papoo 1.0.3 - 'Plugin.php' Authentication Bypass
webapps php

Katatafish QuickTicket 1.2 - 'qti_checkname.php' Local File Inclusion
webapps php OSVDB-37605;CVE-2007-3547

Katatafish QuickTalk forum 1.3 - 'lang' Local File Inclusion
webapps php OSVDB-36487;CVE-2007-3505;OSVDB-36486;OSVDB-36485

t0pP8uZz Elkagroup Image Gallery 1.0 - SQL Injection
webapps php OSVDB-36294;CVE-2007-3461

Alexander Concha WordPress Core 2.2 - 'wp-app.php' Arbitrary File Upload
webapps php

g00ns EVA-Web 1.1 < 2.2 - 'index.php3' Remote File Inclusion
webapps php OSVDB-36327;CVE-2007-3460

GoLd_M PHPSiteBackup 0.1 - 'pcltar.lib.php' Remote File Inclusion
webapps php OSVDB-36009;CVE-2007-2199

Lupton WebCT 4.1.5 - Email and Discussion Board Messages HTML Injection
webapps php CVE-2008-1225;OSVDB-42736

Jesper Jurcenoks Calendarix 0.7.20070307 - Multiple SQL Injections
webapps php CVE-2007-3183;OSVDB-35373

Jesper Jurcenoks Calendarix 0.7.20070307 - Multiple Cross-Site Scripting Vulnerabilities
webapps php CVE-2007-3182;OSVDB-35695