Stefan Esser PHP 5.2.1 - Multiple functions 'Reference' Information Disclosures
local php

Stefan Esser PHP 5.2.1 - 'Session.Save_Path()' TMPDIR open_basedir Restriction Bypass
local php CVE-2007-1835;OSVDB-33953

Stefan Esser PHP 4.4.4 - 'Zip_Entry_Read()' Integer Overflow
remote php CVE-2007-1777;OSVDB-33949

Stefan Esser PHP 4.4.5/4.4.6 - 'session_decode()' Double-Free (PoC)
dos linux OSVDB-33946;CVE-2007-1711

Stefan Esser PHP < 4.4.5/5.2.1 - '_SESSION' Deserialization Overwrite
local linux OSVDB-33945;CVE-2007-1701

Stefan Esser PHP < 4.4.5/5.2.1 - '_SESSION unset()' Local Overflow
local linux OSVDB-33944;CVE-2007-1700

GeFORC3 MzK Blog - 'Katgoster.asp' SQL Injection
webapps asp CVE-2007-3824;OSVDB-36257

Stefan Esser PHP 5.2.1 - 'Unserialize()' Local Information Leak
local multiple OSVDB-33943;CVE-2007-1649

laurent gaffie W-Agora 4.2.1 - 'change_password.php?userid' Cross-Site Scripting
webapps php CVE-2007-1606;OSVDB-34379

laurent gaffie W-Agora 4.2.1 - 'search.php?search_user' Cross-Site Scripting
webapps php CVE-2007-1606;OSVDB-34378

laurent gaffie W-Agora 4.2.1 - 'profile.php?showuser' Cross-Site Scripting
webapps php CVE-2007-1606;OSVDB-34377

laurent gaffie W-Agora 4.2.1 - Multiple Arbitrary File Upload Vulnerabilities
webapps php CVE-2007-1604;OSVDB-34384

Ivan Fratric Web Wiz Forums 8.05 - String Filtering SQL Injection
webapps php CVE-2007-1548;OSVDB-34344

fluffy_bunny Monster Top List 1.4.2 - 'functions.php?root_path' Remote File Inclusion
webapps php CVE-2006-1781

Stefan Esser PHP 5.2.1 - 'hash_update_file()' Freed Resource Usage
local linux OSVDB-33942;CVE-2007-1581

Stefan Esser PHP 4.4.6/5.2.1 - ext/gd Already Freed Resources Usage
local linux OSVDB-33941;CVE-2007-1582