callAX VMware 'IntraProcessLogging.dll' 5.5.3.42958 - Arbitrary Data Write
remote windows OSVDB-40099;CVE-2007-4059

g00ns SimpleBlog 3.0 - 'comments_get.asp?id' SQL Injection
webapps asp OSVDB-37268;CVE-2007-4055

Cr@zy_King Metyus Forum Portal 1.0 - 'Philboard_Forum.asp' SQL Injection
webapps asp CVE-2007-4116;OSVDB-36466

Tim Brown Bandersnatch 0.4 - Multiple Input Validation Vulnerabilities
webapps php CVE-2007-3909;OSVDB-38268

t0pP8uZz Adult Directory - 'cat_id' SQL Injection
webapps php OSVDB-37267;CVE-2007-4056

h07 Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution
remote windows OSVDB-37704;CVE-2007-4062;OSVDB-37703;CVE-2007-4061;OSVDB-37702;CVE-2007-4031

NetJackal PHP 5.x - 'Win32service' Local 'Safe_Mode()' Bypass
local windows

A.D.T Seditio CMS 121 - 'pfs.php' Arbitrary File Upload
webapps php OSVDB-39023;CVE-2007-4057

callAX mlsrvx.dll 1.8.9.1 ArGoSoft Mail Server - Data Write/Code Execution
remote windows

qaaz IBM AIX 5.3 SP6 - FTP 'gets()' Local Privilege Escalation
local aix CVE-2007-4004

qaaz IBM AIX 5.3 SP6 - 'pioout' Arbitrary Library Loading Privilege Escalation
local aix CVE-2007-4003

qaaz IBM AIX 5.3 SP6 - Capture Terminal Sequence Privilege Escalation
local aix CVE-2007-3333

Xavier Roche Microsoft Windows Explorer - '.png' Image Local Denial of Service
dos windows CVE-2007-5133;OSVDB-45521

David Kierznowski WordPress Plugin WP-FeedStats 2.1 - HTML Injection
webapps php CVE-2007-4104;OSVDB-37259

d3hydr8 Nukedit 4.9.x - 'login.asp' Cross-Site Scripting
webapps asp CVE-2007-4052;OSVDB-37129

r0ut3r T1lib - 'intT1_Env_GetCompletePath' Buffer Overflow (PoC)
dos php CVE-2007-4033;OSVDB-38698