Zero X KB-Bestellsystem - 'kb_whois.cgi' Command Execution
webapps cgi OSVDB-40495;CVE-2007-6176

Shadowleet PHPKIT 1.6.4pl1 - 'article.php' SQL Injection
webapps php OSVDB-38804;CVE-2007-6134

S.W.A.T. Content Injector 1.52 - 'index.php?cat' SQL Injection
webapps php OSVDB-38801;CVE-2007-6137

Aria-Security Team NetAuctionHelp 4.1 - 'nsearch' SQL Injection
webapps asp

The:Paradox VigileCMS 1.8 - Stealth Remote Command Execution
webapps php

S.W.A.T. DevMass Shopping Cart 1.0 - Remote File Inclusion
webapps php OSVDB-38809;CVE-2007-6133

joseph.giron13 E-vanced Solutions E-vents 5.0 - Multiple Input Validation Vulnerabilities
webapps asp

joseph.giron13 GWExtranet - Multiple Directory Traversal Vulnerabilities
webapps cgi OSVDB-38830

The-0utl4w VUNET Case Manager 3.4 - 'default.asp' SQL Injection
webapps asp

Aria-Security Team VUNET Mass Mailer - 'default.asp' SQL Injection
webapps asp CVE-2007-6138;OSVDB-38807

D4m14n Underground CMS 1.x - 'Search.Cache.Inc.php' Backdoor Access
webapps php

K-159 Alstrasoft e-Friends 4.98 - 'seid' Multiple SQL Injections
webapps php OSVDB-38806;CVE-2007-6106

NoGe TalkBack 2.2.7 - Multiple Remote File Inclusions
webapps php OSVDB-38816;CVE-2007-6105;OSVDB-38815

D4m14n Ucms 1.8 - Backdoor Remote Command Execution
webapps php

heise Security Apple Mac OSX 10.5.x - Mail Arbitrary Code Execution
remote osx CVE-2007-6165;OSVDB-40875

Andrew Christensen ISPmanager 4.2.15 - Responder Privilege Escalation
local linux CVE-2007-6182;OSVDB-42337