Provide references for further information: Can you share references or external links related to CVE-2007-1217?

{'name': '34742', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/34742'}, {'name': 'oval:org.mitre.oval:def:10503', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10503'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugzilla.kernel.org/show_bug.cgi?id=8028'}, {'name': 'MDKSA-2007:078', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2007:078'}, {'name': 'RHSA-2007:0673', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2007-0673.html'}, {'name': 'GLSA-200704-23', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200704-23.xml'}, {'name': '24777', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24777'}, {'name': '27528', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/27528'}, {'name': '26379', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/26379'}, {'name': '26760', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/26760'}, {'name': 'RHSA-2007:0705', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2007-0705.html'}, {'name': '23333', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/23333'}, {'name': 'RHSA-2007:0672', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2007-0672.html'}, {'name': '26709', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/26709'}, {'name': '26478', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/26478'}, {'name': 'RHSA-2007:0774', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2007-0774.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=408530'}, {'name': 'RHSA-2007:0671', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2007-0671.html'}, {'name': '1018539', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1018539'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2007-404.htm'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1217?


Explain the CVE ID: What does the identifier CVE-2007-1218 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1218.

Off-by-one buffer overflow in the parse_elements function in the 802.11 printer code (print-802_11.c) for tcpdump 3.9.5 and earlier allows remote attackers to cause a denial of service (crash) via a crafted 802.11 frame.  NOTE: this was originally referred to as heap-based, but it might be stack-based.


Provide references for further information: Can you share references or external links related to CVE-2007-1218?

{'name': 'RHSA-2007:0387', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2007-0387.html'}, {'name': 'ADV-2007-4238', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/4238'}, {'name': '22772', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22772'}, {'name': 'TA07-352A', 'tags': ['third-party-advisory', 'x_refsource_CERT'], 'url': 'http://www.us-cert.gov/cas/techalerts/TA07-352A.html'}, {'name': '32427', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://www.osvdb.org/32427'}, {'name': 'DSA-1272', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2007/dsa-1272'}, {'name': '27580', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/27580'}, {'name': 'FEDORA-2007-347', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://fedoranews.org/cms/node/2798'}, {'name': 'USN-429-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-429-1'}, {'name': '28136', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/28136'}, {'name': 'ADV-2007-0793', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0793'}, {'name': '24354', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24354'}, {'name': 'tcpdump-print80211c-bo(32749)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32749'}, {'tags': ['x_refsource_MISC'], 'url': 'http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-802_11.c?r1=1.31.2.11&r2=1.31.2.12'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.rpath.com/browse/RPL-1100'}, {'tags': ['x_refsource_MISC'], 'url': 'https://bugs.gentoo.org/show_bug.cgi?id=168916'}, {'name': 'RHSA-2007:0368', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2007-0368.html'}, {'name': 'oval:org.mitre.oval:def:9520', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9520'}, {'name': '24423', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24423'}, {'name': '20070301 tcpdump: off-by-one heap overflow in 802.11 printer', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://seclists.org/fulldisclosure/2007/Mar/0003.html'}, {'name': 'MDKSA-2007:056', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2007:056'}, {'name': 'APPLE-SA-2007-12-17', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce/2007/Dec/msg00002.html'}, {'name': '24451', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24451'}, {'name': 'MDKSA-2007:155', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2007:155'}, {'name': '24610', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24610'}, {'name': '24583', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24583'}, {'name': '1017717', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017717'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=307179'}, {'name': 'FEDORA-2007-348', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://fedoranews.org/cms/node/2799'}, {'name': 'TLSA-2007-46', 'tags': ['vendor-advisory', 'x_refsource_TURBO'], 'url': 'http://www.turbolinux.com/security/2007/TLSA-2007-46.txt'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://cvs.tcpdump.org/cgi-bin/cvsweb/tcpdump/print-802_11.c'}, {'name': '24318', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24318'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1218?


Explain the CVE ID: What does the identifier CVE-2007-1219 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1219.

PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-1219?

{'name': '34635', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/34635'}, {'name': 'ADV-2007-0778', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0778'}, {'name': '22739', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22739'}, {'name': '3382', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3382'}, {'name': 'admin-phorum-del-file-include(32719)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32719'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1219?


Explain the CVE ID: What does the identifier CVE-2007-1220 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1220.

The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 does not properly verify the parameters passed to the syscall dispatcher, which allows attackers with physical access to bypass code-signing requirements and execute arbitrary code.


Provide references for further information: Can you share references or external links related to CVE-2007-1220?

{'name': '2367', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2367'}, {'name': '20070227 Xbox 360 Hypervisor Privilege Escalation Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461489/100/0/threaded'}, {'name': '22745', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22745'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1220?


Explain the CVE ID: What does the identifier CVE-2007-1221 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1221.

The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 allows attackers with physical access to force execution of the hypervisor syscall with a certain register set, which bypasses intended code protection.


Provide references for further information: Can you share references or external links related to CVE-2007-1221?

{'name': '2367', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2367'}, {'name': '20070327 Re: RE: Xbox 360 Hypervisor Privilege Escalation Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/463974/100/200/threaded'}, {'name': '20070227 Xbox 360 Hypervisor Privilege Escalation Vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461489/100/0/threaded'}, {'name': '22745', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22745'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1221?


Explain the CVE ID: What does the identifier CVE-2007-1222 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1222.

Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows local users of the guest operating system to write arbitrary files to the host filesystem, and execute arbitrary code via launchd by writing a plist file to a LaunchAgents directory.


Provide references for further information: Can you share references or external links related to CVE-2007-1222?

{'name': '33799', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33799'}, {'name': '24171', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24171'}, {'name': '[dailydave] 20070216 Minor Virtualization Vulnerability', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.immunitysec.com/pipermail/dailydave/2007-February/004091.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1222?


Explain the CVE ID: What does the identifier CVE-2007-1223 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1223.

Unspecified vulnerability in Hitachi OSAS/FT/W before 20070223 allows attackers to cause a denial of service (responder control processing halt) by sending "data unexpectedly through the port".


Provide references for further information: Can you share references or external links related to CVE-2007-1223?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.hitachi-support.com/security_e/vuls_e/HS07-004_e/index-e.html'}, {'name': 'osas-unspecified-dos(32696)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32696'}, {'name': '36003', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/36003'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1223?


Explain the CVE ID: What does the identifier CVE-2007-1224 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1224.

Grok Developments NetProxy 4.03 allows remote attackers to bypass URL filtering via a request that omits "http://" from the URL and specifies the destination port (:80).


Provide references for further information: Can you share references or external links related to CVE-2007-1224?

{'name': '3381', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3381'}, {'name': '36001', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/36001'}, {'name': 'netproxy-url-filtering-bypass(32697)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32697'}, {'name': 'ADV-2007-0779', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0779'}, {'name': '22741', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22741'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1224?


Explain the CVE ID: What does the identifier CVE-2007-1225 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1225.

The connection log file implementation in Grok Developments NetProxy 4.03 does not record requests that omit http:// in a URL, which might allow remote attackers to conduct unauthorized activities and avoid detection.


Provide references for further information: Can you share references or external links related to CVE-2007-1225?

{'name': '3381', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3381'}, {'name': 'netproxy-url-filtering-bypass(32697)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32697'}, {'name': 'ADV-2007-0779', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0779'}, {'name': '36002', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/36002'}, {'name': '22741', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22741'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1225?


Explain the CVE ID: What does the identifier CVE-2007-1226 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1226.

McAfee VirusScan for Mac (Virex) before 7.7 patch 1 has weak permissions (0666) for /Library/Application Support/Virex/VShieldExclude.txt, which allows local users to reconfigure Virex to skip scanning of arbitrary files.


Provide references for further information: Can you share references or external links related to CVE-2007-1226?

{'name': '22744', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22744'}, {'name': '20070227 [NETRAGARD-20070220 SECURITY ADVISORY] [McAfee VirusScan for Mac (Virex) Local root exploit and Scan Bypass]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461485/100/0/threaded'}, {'name': '1017707', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017707'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=518722&sliceId=SAL_Public&command=show&forward=nonthreadedKC&kcId=518722'}, {'name': 'ADV-2007-0777', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0777'}, {'name': '33798', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33798'}, {'name': '24337', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24337'}, {'name': '2342', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2342'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1226?


Explain the CVE ID: What does the identifier CVE-2007-1227 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1227.

VShieldCheck in McAfee VirusScan for Mac (Virex) before 7.7 patch 1 allow local users to change permissions of arbitrary files via a symlink attack on /Library/Application Support/Virex/VShieldExclude.txt, as demonstrated by symlinking to the root crontab file to execute arbitrary commands.


Provide references for further information: Can you share references or external links related to CVE-2007-1227?

{'name': '22744', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22744'}, {'name': '20070227 [NETRAGARD-20070220 SECURITY ADVISORY] [McAfee VirusScan for Mac (Virex) Local root exploit and Scan Bypass]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461485/100/0/threaded'}, {'name': '33797', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33797'}, {'name': '1017707', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017707'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://knowledge.mcafee.com/SupportSite/dynamickc.do?externalId=518722&sliceId=SAL_Public&command=show&forward=nonthreadedKC&kcId=518722'}, {'name': 'ADV-2007-0777', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0777'}, {'name': '24337', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24337'}, {'name': '2342', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2342'}, {'name': 'mcafee-virex-library-privilege-escalation(32729)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32729'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1227?


Explain the CVE ID: What does the identifier CVE-2007-1228 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1228.

IBM DB2 UDB 8.2 before Fixpak 7 (aka fixpack 14), and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain unauthorized directories.


Provide references for further information: Can you share references or external links related to CVE-2007-1228?

{'name': 'IY87492', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1IY87492'}, {'name': '24387', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24387'}, {'name': 'IY86711', 'tags': ['vendor-advisory', 'x_refsource_AIXAPAR'], 'url': 'http://www-1.ibm.com/support/docview.wss?uid=swg1IY86711'}, {'name': '1017731', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017731'}, {'name': '22729', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22729'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1228?


Explain the CVE ID: What does the identifier CVE-2007-1229 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1229.

Cross-site scripting (XSS) vulnerability in the Nullsoft ShoutcastServer 1.9.7 allows remote attackers to inject arbitrary web script or HTML via the top-level URI on the Incoming interface (port 8001/tcp), which is not properly handled in the administrator interface when viewing the log file.


Provide references for further information: Can you share references or external links related to CVE-2007-1229?

{'name': '20070227 Nullsoft ShoutcastServer Persistant XSS - 0day', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461474/100/0/threaded'}, {'name': 'shoutcast-admin-interface-xss(32726)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32726'}, {'name': '20070227 Nullsoft ShoutcastServer Persistant XSS - 0day', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0604.html'}, {'name': '33793', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33793'}, {'name': '24323', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24323'}, {'name': 'ADV-2007-0775', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0775'}, {'name': '22742', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22742'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1229?


Explain the CVE ID: What does the identifier CVE-2007-1230 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1230.

Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/functions.php in WordPress before 2.1.2-alpha allow remote attackers to inject arbitrary web script or HTML via (1) the Referer HTTP header or (2) the URI, a different vulnerability than CVE-2007-1049.


Provide references for further information: Can you share references or external links related to CVE-2007-1230?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.wordpress.org/changeset/4952'}, {'name': 'ADV-2007-0756', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0756'}, {'name': '24566', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24566'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://trac.wordpress.org/changeset/4951'}, {'name': 'GLSA-200703-23', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200703-23.xml'}, {'name': '34361', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/34361'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1230?


Explain the CVE ID: What does the identifier CVE-2007-1231 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1231.

Multiple cross-site scripting (XSS) vulnerabilities in SQLiteManager 1.2.0 allow remote attackers to inject arbitrary web script or HTML via the (1) database name, (2) table name, (3) ViewName, (4) view, (5) trigger, and (6) function fields in main.php and certain other files.


Provide references for further information: Can you share references or external links related to CVE-2007-1231?

{'name': 'sqlitemanager-main-xss(32692)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32692'}, {'name': '22731', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22731'}, {'name': '20070224 SQLiteManager v1.2.0 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461304/100/0/threaded'}, {'name': '2366', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2366'}, {'name': '34634', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/34634'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1231?


Explain the CVE ID: What does the identifier CVE-2007-1232 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1232.

Directory traversal vulnerability in SQLiteManager 1.2.0 allows remote attackers to read arbitrary files via a .. (dot dot) in a SQLiteManager_currentTheme cookie.


Provide references for further information: Can you share references or external links related to CVE-2007-1232?

{'name': 'sqlitemanager-sqlitemanager-file-include(32693)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32693'}, {'name': '24296', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24296'}, {'name': '33801', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33801'}, {'name': '20070224 SQLiteManager v1.2.0 Multiple Vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461304/100/0/threaded'}, {'name': '2366', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2366'}, {'name': '22727', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22727'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1232?


Explain the CVE ID: What does the identifier CVE-2007-1233 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1233.

PHP remote file inclusion vulnerability in downloadcounter.php in STWC-Counter 3.4.0.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the stwc_counter_verzeichniss parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-1233?

{'name': 'ADV-2007-0754', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0754'}, {'name': 'stwccounter-downloadcounter-file-include(32681)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32681'}, {'name': '3379', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3379'}, {'name': '24280', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24280'}, {'name': '22723', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22723'}, {'name': '33777', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33777'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1233?


Explain the CVE ID: What does the identifier CVE-2007-1234 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1234.

Multiple cross-site scripting (XSS) vulnerabilities in sitex allow remote attackers to inject arbitrary web script or HTML via (1) the sxYear parameter to calendar.php, (2) the search parameter to search.php, (3) the linkid parameter to redirect.php, or (4) the page parameter to calendar_events.php.


Provide references for further information: Can you share references or external links related to CVE-2007-1234?

{'name': '20070223 sitex multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461305/100/0/threaded'}, {'name': '33161', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33161'}, {'name': '33158', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33158'}, {'name': '2373', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2373'}, {'name': '20070414 Re: sitex multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/465849/100/200/threaded'}, {'name': '33159', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33159'}, {'name': '33160', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33160'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1234?


Explain the CVE ID: What does the identifier CVE-2007-1235 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1235.

Unrestricted file upload vulnerability in sitex allows remote attackers to upload arbitrary PHP code via an avatar filename with a double extension such as .php.jpg, which fails verification and is saved as a .php file.


Provide references for further information: Can you share references or external links related to CVE-2007-1235?

{'name': '20070223 sitex multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461305/100/0/threaded'}, {'name': '33157', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33157'}, {'name': '2373', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2373'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1235?


Explain the CVE ID: What does the identifier CVE-2007-1236 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1236.

sitex allows remote attackers to obtain sensitive information via a request with a numerical value for the (1) sxMonth[] or (2) sxYear[] parameter to calendar.php, or the (3) page[] parameter to calendar_events.php, which reveals the path in various error messages.


Provide references for further information: Can you share references or external links related to CVE-2007-1236?

{'name': '33156', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33156'}, {'name': '20070223 sitex multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461305/100/0/threaded'}, {'name': '33155', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33155'}, {'name': '2373', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2373'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1236?


Explain the CVE ID: What does the identifier CVE-2007-1237 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1237.

sitex allows remote attackers to obtain potentially sensitive information via a ' (quote) value for certain parameters, as demonstrated by parameters used in forum and search, which forces a SQL error.


Provide references for further information: Can you share references or external links related to CVE-2007-1237?

{'name': '20070223 sitex multiple vulnerabilities', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461305/100/0/threaded'}, {'name': '33154', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33154'}, {'name': '2373', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2373'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1237?


Explain the CVE ID: What does the identifier CVE-2007-1238 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1238.

Microsoft Office 2003 allows user-assisted remote attackers to cause a denial of service (application crash) by attempting to insert a corrupted WMF file.


Provide references for further information: Can you share references or external links related to CVE-2007-1238?

{'name': '20070225 Few unreported vulnerabilities by SehaTo', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461373/100/0/threaded'}, {'name': '34489', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/34489'}, {'tags': ['x_refsource_MISC'], 'url': 'http://securityvulns.com/Qdocument120.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1238?


Explain the CVE ID: What does the identifier CVE-2007-1239 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1239.

Microsoft Excel 2003 does not properly parse .XLS files, which allows remote attackers to cause a denial of service (application crash) via a file with a (1) corrupted XML format or a (2) corrupted XLS format, which triggers a NULL pointer dereference.


Provide references for further information: Can you share references or external links related to CVE-2007-1239?

{'name': '20070225 Few unreported vulnerabilities by SehaTo', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461373/100/0/threaded'}, {'name': '22717', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22717'}, {'tags': ['x_refsource_MISC'], 'url': 'http://securityvulns.com/news/Microsoft/Excel/XML/DoS.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1239?


Explain the CVE ID: What does the identifier CVE-2007-1240 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1240.

Multiple cross-site scripting (XSS) vulnerabilities in Docebo CMS 3.0.3 through 3.0.5 allow remote attackers to inject arbitrary web script or HTML via (1) the searchkey parameter to index.php, or the (2) sn or (3) ri parameter to modules/htmlframechat/index.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2007-1240?

{'name': '22719', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22719'}, {'name': 'Docebocms-index-xss(32842)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32842'}, {'tags': ['x_refsource_MISC'], 'url': 'http://downloads.securityfocus.com/vulnerabilities/exploits/22719.html'}, {'name': '35995', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/35995'}, {'name': '35996', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/35996'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1240?


Explain the CVE ID: What does the identifier CVE-2007-1241 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1241.

Cross-site scripting (XSS) vulnerability in setup.php in Audins Audiens 3.3 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2007-1241?

{'tags': ['x_refsource_MISC'], 'url': 'http://downloads.securityfocus.com/vulnerabilities/exploits/22728.html'}, {'name': '35994', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/35994'}, {'name': 'audins-setup-xss(32839)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32839'}, {'name': '22728', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22728'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1241?


Explain the CVE ID: What does the identifier CVE-2007-1242 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1242.

SQL injection vulnerability in system/index.php in Audins Audiens 3.3 allows remote attackers to execute arbitrary SQL commands via the PHPSESSID cookie.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2007-1242?

{'name': 'audins-index-sql-injection(32837)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32837'}, {'name': '34631', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/34631'}, {'name': '22728', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22728'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1242?


Explain the CVE ID: What does the identifier CVE-2007-1243 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1243.

Audins Audiens 3.3 allows remote attackers to bypass authentication and perform certain privileged actions, possibly an uninstall of the product, by calling unistall.php with the values cnf=disinstalla and status=on.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Provide references for further information: Can you share references or external links related to CVE-2007-1243?

{'name': '22728', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22728'}, {'name': '33792', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33792'}, {'name': '24254', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24254'}, {'name': 'audins-unistall-authentication-bypass(32707)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32707'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1243?


Explain the CVE ID: What does the identifier CVE-2007-1244 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1244.

Cross-site request forgery (CSRF) vulnerability in the AdminPanel in WordPress 2.1.1 and earlier allows remote attackers to perform privileged actions as administrators, as demonstrated using the delete action in wp-admin/post.php.  NOTE: this issue can be leveraged to perform cross-site scripting (XSS) attacks and steal cookies via the post parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-1244?

{'name': 'wordpress-post-csrf(32703)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32703'}, {'name': '20070226 WordPress AdminPanel CSRF/XSS - 0day', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0583.html'}, {'name': '20070226 WordPress AdminPanel CSRF/XSS - 0day', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461351/100/0/threaded'}, {'name': '22735', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22735'}, {'name': '24566', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24566'}, {'name': '33787', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33787'}, {'name': 'GLSA-200703-23', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://www.gentoo.org/security/en/glsa/glsa-200703-23.xml'}, {'name': '33788', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33788'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1244?


Explain the CVE ID: What does the identifier CVE-2007-1245 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1245.

IrfanView 3.99 allows remote attackers to cause a denial of service (application crash) via a malformed WMF file.


Provide references for further information: Can you share references or external links related to CVE-2007-1245?

{'name': '20070225 Few unreported vulnerabilities by SehaTo', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461373/100/0/threaded'}, {'name': '34487', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/34487'}, {'tags': ['x_refsource_MISC'], 'url': 'http://securityvulns.com/news/IrfanView/WMF/DoS.html'}, {'tags': ['x_refsource_MISC'], 'url': 'http://securityvulns.com/Qdocument120.html'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1245?


Explain the CVE ID: What does the identifier CVE-2007-1246 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1246.

The DMO_VideoDecoder_Open function in loader/dmo/DMO_VideoDecoder.c in MPlayer 1.0rc1 and earlier, as used in xine-lib, does not set the biSize before use in a memcpy, which allows user-assisted remote attackers to cause a buffer overflow and possibly execute arbitrary code, a different vulnerability than CVE-2007-1387.


Provide references for further information: Can you share references or external links related to CVE-2007-1246?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://svn.mplayerhq.hu/mplayer/trunk/loader/dmo/DMO_VideoDecoder.c'}, {'name': '20070301 MPlayer DMO buffer overflow', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://lists.grok.org.uk/pipermail/full-disclosure/2007-March/052738.html'}, {'name': 'SUSE-SR:2007:005', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2007_5_sr.html'}, {'name': 'MDKSA-2007:057', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2007:057'}, {'name': 'SUSE-SR:2007:007', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2007_007_suse.html'}, {'name': '20070423 FLEA-2007-0013-1: xine-lib', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/466691/30/6900/threaded'}, {'name': '24995', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24995'}, {'name': '24866', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24866'}, {'name': '24462', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24462'}, {'tags': ['x_refsource_MISC'], 'url': 'http://svn.mplayerhq.hu/mplayer/trunk/loader/dmo/DMO_VideoDecoder.c?r1=22019&r2=22204'}, {'name': '29601', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/29601'}, {'name': 'USN-433-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-433-1'}, {'name': '24448', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24448'}, {'name': 'ADV-2007-0794', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0794'}, {'name': '24446', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24446'}, {'name': 'mplayer-dmovideodecoder-bo(32747)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32747'}, {'name': 'MDKSA-2007:055', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2007:055'}, {'name': '25462', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/25462'}, {'name': 'DSA-1536', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2008/dsa-1536'}, {'name': 'GLSA-200704-09', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200704-09.xml'}, {'name': '24444', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24444'}, {'name': '24443', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24443'}, {'name': 'GLSA-200705-21', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200705-21.xml'}, {'name': 'SSA:2007-109-02', 'tags': ['vendor-advisory', 'x_refsource_SLACKWARE'], 'url': 'http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.449141'}, {'name': '24897', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24897'}, {'name': '22771', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22771'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1246?


Explain the CVE ID: What does the identifier CVE-2007-1247 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1247.

Multiple PHP remote file inclusion vulnerabilities in aWeb Labs aWebNews 1.5 allow remote attackers to execute arbitrary PHP code via a URL in the path_to_news parameter to (1) listing.php or (2) visview.php.


Provide references for further information: Can you share references or external links related to CVE-2007-1247?

{'name': '33824', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33824'}, {'name': '20070301 aWebNews V 1.1', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461684/100/0/threaded'}, {'name': '33825', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33825'}, {'name': 'ADV-2007-0808', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0808'}, {'name': '20070301 aWebNews v 1.1=>RFI', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461680/100/0/threaded'}, {'name': '22781', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22781'}, {'name': 'awebnews-pathtonews-file-include(32770)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32770'}, {'name': '24351', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24351'}, {'name': '2365', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2365'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1247?


Explain the CVE ID: What does the identifier CVE-2007-1248 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1248.

Multiple cross-site scripting (XSS) vulnerabilities in built2go News Manager Blog 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) cid, (2) uid, and (3) nid parameters to (a) news.php, and the nid parameter to (b) rating.php.


Provide references for further information: Can you share references or external links related to CVE-2007-1248?

{'name': '24334', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24334'}, {'name': '22783', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22783'}, {'name': 'newsmanagerblog-news-rating-xss(32772)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32772'}, {'name': '2343', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2343'}, {'name': '20070301 Built2Go v.1.0 => ( news.php & rating.php ) Cross Site Scripting', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461672/100/0/threaded'}, {'name': 'ADV-2007-0818', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0818'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1248?


Explain the CVE ID: What does the identifier CVE-2007-1249 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1249.

MoveSortedContentAction in C1 Financial Services Contelligent 9.1.4 does not check "the additional environment security configuration," which allows remote attackers with write permissions to reorder components.


Provide references for further information: Can you share references or external links related to CVE-2007-1249?

{'name': 'contelligent-sortedcontent-security-bypass(32775)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32775'}, {'name': '22785', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22785'}, {'name': 'ADV-2007-0814', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0814'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.contelligent.com/contell/cms/c1web/contelligent/site/contelligent/changelog.html?fromRelease=9.1.4'}, {'name': '24364', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24364'}, {'name': '33497', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33497'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1249?


Explain the CVE ID: What does the identifier CVE-2007-1250 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1250.

SQL injection vulnerability in section/default.asp in ANGEL Learning Management Suite (LMS) 7.1 allows remote attackers to execute arbitrary SQL commands via the id parameter.


Provide references for further information: Can you share references or external links related to CVE-2007-1250?

{'name': '20070301 [Fwd: Re: Angel LMS 7.1 - Remote SQL Injection]', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461811/100/0/threaded'}, {'name': 'angellms-default-sql-injection(32756)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32756'}, {'name': '33846', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33846'}, {'name': '20070301 Angel LMS 7.1 - Remote SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461638/100/0/threaded'}, {'name': '20070301 Re: Angel LMS 7.1 - Remote SQL Injection', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461673/100/0/threaded'}, {'name': 'ADV-2007-0807', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0807'}, {'name': '22768', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22768'}, {'name': '3390', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3390'}, {'name': '24368', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24368'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1250?


Explain the CVE ID: What does the identifier CVE-2007-1251 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1251.

Format string vulnerability in the new_warning function in ntserv/warning.c for Netrek Vanilla Server 2.12.0, when EVENTLOG is enabled, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in the message handling.


Provide references for further information: Can you share references or external links related to CVE-2007-1251?

{'name': '24357', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24357'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?release_id=490561'}, {'name': '22786', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22786'}, {'name': 'vanilla-vsprintf-format-string(32777)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32777'}, {'name': 'ADV-2007-0815', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0815'}, {'tags': ['x_refsource_MISC'], 'url': 'http://aluigi.altervista.org/adv/netrekfs-adv.txt'}, {'name': '20070302 Limited format string in Netrek 2.12.0', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461755/100/0/threaded'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1251?


Explain the CVE ID: What does the identifier CVE-2007-1252 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1252.

Buffer overflow in Symantec Mail Security for SMTP 5.0 before Patch 175 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted headers in an e-mail message.  NOTE: some information was obtained from third party sources.


Provide references for further information: Can you share references or external links related to CVE-2007-1252?

{'name': 'symantec-email-headers-code-execution(32781)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32781'}, {'name': '22782', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22782'}, {'name': 'ADV-2007-0799', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0799'}, {'name': '1017716', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017716'}, {'tags': ['x_refsource_MISC'], 'url': 'ftp://ftp.symantec.com/public/english_us_canada/products/symantec_mail_security/5.0_smtp/updates/release_notes_p175.txt'}, {'name': '33840', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33840'}, {'name': '24371', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24371'}, {'name': 'VU#875633', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/875633'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1252?


Explain the CVE ID: What does the identifier CVE-2007-1253 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1253.

Eval injection vulnerability in the (a) kmz_ImportWithMesh.py Script for Blender 0.1.9h, as used in (b) Blender before 2.43, allows user-assisted remote attackers to execute arbitrary Python code by importing a crafted (1) KML or (2) KMZ file.


Provide references for further information: Can you share references or external links related to CVE-2007-1253?

{'name': '24233', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24233'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2007-39/advisory/'}, {'name': '22770', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22770'}, {'name': '24991', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24991'}, {'name': 'blender-kml-kmz-command-execution(32778)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32778'}, {'name': 'ADV-2007-0798', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0798'}, {'tags': ['x_refsource_MISC'], 'url': 'http://secunia.com/secunia_research/2007-40/advisory/'}, {'name': '24232', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24232'}, {'name': 'GLSA-200704-19', 'tags': ['vendor-advisory', 'x_refsource_GENTOO'], 'url': 'http://security.gentoo.org/glsa/glsa-200704-19.xml'}, {'name': '33836', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33836'}, {'name': '1017714', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017714'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1253?


Explain the CVE ID: What does the identifier CVE-2007-1254 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1254.

SQL injection vulnerability in part.userprofile.php in Connectix Boards 0.7 and earlier allows remote authenticated users to execute arbitrary SQL commands and obtain privileges via the p_skin parameter to index.php.


Provide references for further information: Can you share references or external links related to CVE-2007-1254?

{'name': '24255', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24255'}, {'name': '2364', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2364'}, {'name': '20070221 Connectix Boards <= 0.7 (p_skin) Multiple Vulnerabilities Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/460947/100/0/threaded'}, {'name': '33537', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33537'}, {'name': '3352', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3352'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1254?


Explain the CVE ID: What does the identifier CVE-2007-1255 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1255.

Unrestricted file upload vulnerability in admin.bbcode.php in Connectix Boards 0.7 and earlier allows remote authenticated administrators to execute arbitrary PHP code by uploading a crafted GIF smiley image with a .php extension via the uploadimage parameter to admin.php, which can be later accessed via a direct request for the file in smileys/.  NOTE: this can be leveraged with a separate SQL injection issue for remote unauthenticated attacks.


Provide references for further information: Can you share references or external links related to CVE-2007-1255?

{'name': '24255', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24255'}, {'name': '2364', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2364'}, {'name': '33538', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33538'}, {'name': '20070221 Connectix Boards <= 0.7 (p_skin) Multiple Vulnerabilities Exploit', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/460947/100/0/threaded'}, {'name': '3352', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3352'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1255?


Explain the CVE ID: What does the identifier CVE-2007-1256 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1256.

Mozilla Firefox 2.0.0.2 allows remote attackers to spoof the address bar, favicons, and document source, and perform updates in the context of arbitrary websites, by repeatedly setting document.location in the onunload attribute when linking to another website, a variant of CVE-2007-1092.


Provide references for further information: Can you share references or external links related to CVE-2007-1256?

{'name': '20070227 RE: [Full-disclosure] Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=117259225402112&w=2'}, {'name': '20070227 Re: [Full-disclosure] Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr)', 'tags': ['mailing-list', 'x_refsource_FULLDISC'], 'url': 'http://marc.info/?l=full-disclosure&m=117258301222007&w=2'}, {'name': '20070227 Re: [Full-disclosure] Firefox onUnload + document.write() memory corruption vulnerability (MSIE7 null ptr)', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461437/100/0/threaded'}, {'name': '35913', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/35913'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1256?


Explain the CVE ID: What does the identifier CVE-2007-1257 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1257.

The Network Analysis Module (NAM) in Cisco Catalyst Series 6000, 6500, and 7600 allows remote attackers to execute arbitrary commands via certain SNMP packets that are spoofed from the NAM's own IP address.


Provide references for further information: Can you share references or external links related to CVE-2007-1257?

{'name': '20070228 Cisco Catalyst 6000, 6500 Series and Cisco 7600 Series NAM (Network Analysis Module) Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20070228-nam.shtml'}, {'name': 'VU#472412', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/472412'}, {'name': 'ADV-2007-0783', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0783'}, {'name': '24344', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24344'}, {'name': '22751', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22751'}, {'name': '33066', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33066'}, {'name': 'oval:org.mitre.oval:def:5188', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5188'}, {'name': 'cisco-catalyst-nam-unauthorized-access(32750)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32750'}, {'name': '1017710', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017710'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1257?


Explain the CVE ID: What does the identifier CVE-2007-1258 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1258.

Unspecified vulnerability in Cisco IOS 12.2SXA, SXB, SXD, and SXF; and the MSFC2, MSFC2a and MSFC3 running in Hybrid Mode on Cisco Catalyst 6000, 6500 and Cisco 7600 series systems; allows remote attackers on a local network segment to cause a denial of service (software reload) via a certain MPLS packet.


Provide references for further information: Can you share references or external links related to CVE-2007-1258?

{'name': 'oval:org.mitre.oval:def:5869', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5869'}, {'name': '33067', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33067'}, {'name': 'ADV-2007-0782', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0782'}, {'name': '24348', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24348'}, {'name': 'cisco-catalyst-mpls-dos(32748)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32748'}, {'name': '20070228 Cisco Catalyst 6000, 6500 and Cisco 7600 Series MPLS Packet Vulnerability', 'tags': ['vendor-advisory', 'x_refsource_CISCO'], 'url': 'http://www.cisco.com/warp/public/707/cisco-sa-20070228-mpls.shtml'}, {'name': '1017709', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017709'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1258?


Explain the CVE ID: What does the identifier CVE-2007-1259 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1259.

Multiple unspecified vulnerabilities in WebAPP before 0.9.9.6 have unknown impact and attack vectors.


Provide references for further information: Can you share references or external links related to CVE-2007-1259?

{'name': 'ADV-2007-0720', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0720'}, {'name': '24227', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24227'}, {'name': '33272', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33272'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=252'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.web-app.org/cgi-bin/index.cgi?action=viewnews&id=254'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1259?


Explain the CVE ID: What does the identifier CVE-2007-1260 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1260.

Stack-based buffer overflow in the connectHandle function in server.cpp in WebMod 0.48 allows remote attackers to execute arbitrary code via a long string in the Content-Length HTTP header.


Provide references for further information: Can you share references or external links related to CVE-2007-1260?

{'name': '33834', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33834'}, {'name': '22788', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22788'}, {'name': '24346', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24346'}, {'name': 'webmod-contentlength-bo(32755)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32755'}, {'tags': ['x_refsource_MISC'], 'url': 'http://cybermind.user.stfunoob.com/w48crash/'}, {'name': '3395', 'tags': ['exploit', 'x_refsource_EXPLOIT-DB'], 'url': 'https://www.exploit-db.com/exploits/3395'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1260?


Explain the CVE ID: What does the identifier CVE-2007-1261 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1261.

Unspecified vulnerability in the reports system in OpenBiblio before 0.6.0 allows attackers to gain privileges via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2007-1261?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://sourceforge.net/project/shownotes.php?group_id=50071&release_id=488061'}, {'name': '35998', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/35998'}, {'name': 'ADV-2007-0790', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0790'}, {'name': 'openbiblio-reports-privilege-escalation(32758)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32758'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1261?


Explain the CVE ID: What does the identifier CVE-2007-1262 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1262.

Multiple cross-site scripting (XSS) vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remote attackers to inject arbitrary web script or HTML via the (1) data: URI in an HTML e-mail attachment or (2) various non-ASCII character sets that are not properly filtered when viewed with Microsoft Internet Explorer.


Provide references for further information: Can you share references or external links related to CVE-2007-1262?

{'name': 'DSA-1290', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2007/dsa-1290'}, {'name': 'ADV-2007-2732', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/2732'}, {'name': 'oval:org.mitre.oval:def:11712', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11712'}, {'name': '25200', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/25200'}, {'name': 'ADV-2007-1748', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/1748'}, {'name': '35888', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/35888'}, {'name': '25320', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/25320'}, {'name': '1018033', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1018033'}, {'name': 'APPLE-SA-2007-07-31', 'tags': ['vendor-advisory', 'x_refsource_APPLE'], 'url': 'http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.rpath.com/browse/RPL-1353'}, {'name': 'JVN#09157962', 'tags': ['third-party-advisory', 'x_refsource_JVN'], 'url': 'http://jvn.jp/en/jp/JVN09157962/index.html'}, {'name': '35887', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/35887'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.squirrelmail.org/security/issue/2007-05-09'}, {'name': 'MDKSA-2007:106', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2007:106'}, {'name': '25236', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/25236'}, {'name': '25690', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/25690'}, {'name': 'SUSE-SR:2007:013', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://www.novell.com/linux/security/advisories/2007_13_sr.html'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://docs.info.apple.com/article.html?artnum=306172'}, {'name': 'RHSA-2007:0358', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'https://rhn.redhat.com/errata/RHSA-2007-0358.html'}, {'name': '25159', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/25159'}, {'name': '25787', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/25787'}, {'name': '23910', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/23910'}, {'name': 'JVNDB-2007-000398', 'tags': ['third-party-advisory', 'x_refsource_JVNDB'], 'url': 'http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000398.html'}, {'name': '26235', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/26235'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1262?


Explain the CVE ID: What does the identifier CVE-2007-1263 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1263.

GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions of OpenPGP messages with multiple components, which might allow remote attackers to forge the contents of a message without detection.


Provide references for further information: Can you share references or external links related to CVE-2007-1263?

{'tags': ['x_refsource_CONFIRM'], 'url': 'https://issues.rpath.com/browse/RPL-1111'}, {'name': '2007-0009', 'tags': ['vendor-advisory', 'x_refsource_TRUSTIX'], 'url': 'http://www.trustix.org/errata/2007/0009/'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://support.avaya.com/elmodocs2/security/ASA-2007-144.htm'}, {'name': 'FEDORA-2007-315', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://fedoranews.org/cms/node/2776'}, {'name': '24407', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24407'}, {'name': '[gnupg-users] 20070306 [Announce] Multiple Messages Problem in GnuPG and GPGME', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.gnupg.org/pipermail/gnupg-users/2007-March/030514.html'}, {'name': '24438', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24438'}, {'name': 'FEDORA-2007-316', 'tags': ['vendor-advisory', 'x_refsource_FEDORA'], 'url': 'http://fedoranews.org/cms/node/2775'}, {'name': '24650', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24650'}, {'name': 'oval:org.mitre.oval:def:10496', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10496'}, {'name': '2353', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2353'}, {'name': 'RHSA-2007:0107', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2007-0107.html'}, {'name': 'DSA-1266', 'tags': ['vendor-advisory', 'x_refsource_DEBIAN'], 'url': 'http://www.debian.org/security/2007/dsa-1266'}, {'name': '20070305 CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461958/30/7710/threaded'}, {'name': '24511', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24511'}, {'name': 'USN-432-1', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-432-1'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/?action=item&id=1687'}, {'name': '20070305 CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461958/100/0/threaded'}, {'name': '24734', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24734'}, {'name': '24419', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24419'}, {'name': '24544', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24544'}, {'name': 'USN-432-2', 'tags': ['vendor-advisory', 'x_refsource_UBUNTU'], 'url': 'http://www.ubuntu.com/usn/usn-432-2'}, {'name': '24420', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24420'}, {'name': '24875', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24875'}, {'name': '20070301-01-P', 'tags': ['vendor-advisory', 'x_refsource_SGI'], 'url': 'ftp://patches.sgi.com/support/free/security/advisories/20070301-01-P.asc'}, {'name': '24365', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24365'}, {'name': 'MDKSA-2007:059', 'tags': ['vendor-advisory', 'x_refsource_MANDRIVA'], 'url': 'http://www.mandriva.com/security/advisories?name=MDKSA-2007:059'}, {'name': 'RHSA-2007:0106', 'tags': ['vendor-advisory', 'x_refsource_REDHAT'], 'url': 'http://www.redhat.com/support/errata/RHSA-2007-0106.html'}, {'name': '22757', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22757'}, {'name': '1017727', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017727'}, {'name': 'SUSE-SA:2007:024', 'tags': ['vendor-advisory', 'x_refsource_SUSE'], 'url': 'http://lists.suse.com/archive/suse-security-announce/2007-Mar/0008.html'}, {'name': 'ADV-2007-0835', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0835'}, {'name': '24489', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24489'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1263?


Explain the CVE ID: What does the identifier CVE-2007-1264 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1264.

Enigmail 0.94.2 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Enigmail from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without detection.


Provide references for further information: Can you share references or external links related to CVE-2007-1264?

{'name': '[gnupg-users] 20070306 [Announce] Multiple Messages Problem in GnuPG and GPGME', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.gnupg.org/pipermail/gnupg-users/2007-March/030514.html'}, {'name': '22758', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22758'}, {'name': '24416', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24416'}, {'name': '2353', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2353'}, {'name': '20070305 CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461958/30/7710/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/?action=item&id=1687'}, {'name': '20070305 CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461958/100/0/threaded'}, {'name': '1017727', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017727'}, {'name': 'ADV-2007-0835', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0835'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1264?


Explain the CVE ID: What does the identifier CVE-2007-1265 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1265.

KMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents KMail from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without detection.


Provide references for further information: Can you share references or external links related to CVE-2007-1265?

{'name': '[gnupg-users] 20070306 [Announce] Multiple Messages Problem in GnuPG and GPGME', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.gnupg.org/pipermail/gnupg-users/2007-March/030514.html'}, {'name': '2353', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2353'}, {'name': '20070305 CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461958/30/7710/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/?action=item&id=1687'}, {'name': '20070305 CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461958/100/0/threaded'}, {'name': '24413', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24413'}, {'name': '22759', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22759'}, {'name': '1017727', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017727'}, {'name': 'ADV-2007-0835', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0835'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1265?


Explain the CVE ID: What does the identifier CVE-2007-1266 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1266.

Evolution 2.8.1 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Evolution from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without detection.


Provide references for further information: Can you share references or external links related to CVE-2007-1266?

{'name': '[gnupg-users] 20070306 [Announce] Multiple Messages Problem in GnuPG and GPGME', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.gnupg.org/pipermail/gnupg-users/2007-March/030514.html'}, {'name': '2353', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2353'}, {'name': '20070305 CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461958/30/7710/threaded'}, {'name': '22760', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22760'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/?action=item&id=1687'}, {'name': '20070305 CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461958/100/0/threaded'}, {'name': '24412', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24412'}, {'name': '1017727', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017727'}, {'name': 'ADV-2007-0835', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0835'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1266?


Explain the CVE ID: What does the identifier CVE-2007-1267 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1267.

Sylpheed 2.2.7 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Sylpheed from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without detection.


Provide references for further information: Can you share references or external links related to CVE-2007-1267?

{'name': '[gnupg-users] 20070306 [Announce] Multiple Messages Problem in GnuPG and GPGME', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.gnupg.org/pipermail/gnupg-users/2007-March/030514.html'}, {'name': '2353', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2353'}, {'name': '20070305 CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461958/30/7710/threaded'}, {'name': '22777', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22777'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/?action=item&id=1687'}, {'name': '20070305 CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461958/100/0/threaded'}, {'name': '24414', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24414'}, {'name': '1017727', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017727'}, {'name': 'ADV-2007-0835', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0835'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1267?


Explain the CVE ID: What does the identifier CVE-2007-1268 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1268.

Mutt 1.5.13 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Mutt from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without detection.


Provide references for further information: Can you share references or external links related to CVE-2007-1268?

{'name': '[gnupg-users] 20070306 [Announce] Multiple Messages Problem in GnuPG and GPGME', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.gnupg.org/pipermail/gnupg-users/2007-March/030514.html'}, {'name': '24415', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24415'}, {'name': '2353', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2353'}, {'name': '20070305 CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461958/30/7710/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/?action=item&id=1687'}, {'name': '20070305 CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461958/100/0/threaded'}, {'name': '22778', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22778'}, {'name': '1017727', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017727'}, {'name': 'ADV-2007-0835', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0835'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1268?


Explain the CVE ID: What does the identifier CVE-2007-1269 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1269.

GNUMail 1.1.2 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents GNUMail from visually distinguishing between signed and unsigned portions of OpenPGP messages with multiple components, which allows remote attackers to forge the contents of a message without detection.


Provide references for further information: Can you share references or external links related to CVE-2007-1269?

{'name': '[gnupg-users] 20070306 [Announce] Multiple Messages Problem in GnuPG and GPGME', 'tags': ['mailing-list', 'x_refsource_MLIST'], 'url': 'http://lists.gnupg.org/pipermail/gnupg-users/2007-March/030514.html'}, {'name': '2353', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2353'}, {'name': '20070305 CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461958/30/7710/threaded'}, {'tags': ['x_refsource_MISC'], 'url': 'http://www.coresecurity.com/?action=item&id=1687'}, {'name': '20070305 CORE-2007-0115: GnuPG and GnuPG clients unsigned data injection vulnerability', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461958/100/0/threaded'}, {'name': '24417', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24417'}, {'name': '1017727', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017727'}, {'name': '22779', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22779'}, {'name': 'ADV-2007-0835', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0835'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1269?


Explain the CVE ID: What does the identifier CVE-2007-1270 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1270.

Double free vulnerability in VMware ESX Server 3.0.0 and 3.0.1 allows attackers to cause a denial of service (crash), obtain sensitive information, or possibly execute arbitrary code via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2007-1270?

{'name': '1017875', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017875'}, {'name': '20070404 VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/464745/100/0/threaded'}, {'name': 'ADV-2007-1267', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/1267'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/vi3/doc/esx-6431040-patch.html'}, {'name': '24788', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24788'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/vi3/doc/esx-5754280-patch.html'}, {'name': 'oval:org.mitre.oval:def:5463', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5463'}, {'name': '35268', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/35268'}, {'name': '23323', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/23323'}, {'name': '2524', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2524'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1270?


Explain the CVE ID: What does the identifier CVE-2007-1271 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1271.

Buffer overflow in VMware ESX Server 3.0.0 and 3.0.1 might allow attackers to gain privileges or cause a denial of service (application crash) via unspecified vectors.


Provide references for further information: Can you share references or external links related to CVE-2007-1271?

{'name': '1017875', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017875'}, {'name': '23322', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/23322'}, {'name': '20070404 VMSA-2007-0003 VMware ESX 3.0.1 and 3.0.0 server security updates', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/464745/100/0/threaded'}, {'name': 'ADV-2007-1267', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/1267'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/vi3/doc/esx-6431040-patch.html'}, {'name': '24788', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24788'}, {'name': 'oval:org.mitre.oval:def:5552', 'tags': ['vdb-entry', 'signature', 'x_refsource_OVAL'], 'url': 'https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5552'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.vmware.com/support/vi3/doc/esx-5754280-patch.html'}, {'name': '2524', 'tags': ['third-party-advisory', 'x_refsource_SREASON'], 'url': 'http://securityreason.com/securityalert/2524'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1271?


Explain the CVE ID: What does the identifier CVE-2007-1273 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1273.

Integer overflow in the ktruser function in NetBSD-current before 20061022, NetBSD 3 and 3-0 before 20061024, and NetBSD 2 before 20070209, when the kernel is built with the COMPAT_FREEBSD or COMPAT_DARWIN option, allows local users to cause a denial of service and possibly gain privileges.


Provide references for further information: Can you share references or external links related to CVE-2007-1273?

{'name': '22878', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22878'}, {'name': '35453', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/35453'}, {'name': 'NetBSD-SA2007-001', 'tags': ['vendor-advisory', 'x_refsource_NETBSD'], 'url': 'ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2007-001.txt.asc'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1273?


Explain the CVE ID: What does the identifier CVE-2007-1276 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1276.

Multiple cross-site scripting (XSS) vulnerabilities in chooser.cgi in Webmin before 1.330 and Usermin before 1.260 allow remote attackers to inject arbitrary web script or HTML via a crafted filename.


Provide references for further information: Can you share references or external links related to CVE-2007-1276?

{'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.webmin.com/security.html'}, {'name': '33832', 'tags': ['vdb-entry', 'x_refsource_OSVDB'], 'url': 'http://osvdb.org/33832'}, {'name': '24321', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24321'}, {'name': 'ADV-2007-0780', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0780'}, {'name': '1017711', 'tags': ['vdb-entry', 'x_refsource_SECTRACK'], 'url': 'http://www.securitytracker.com/id?1017711'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://www.webmin.com/changes-1.330.html'}, {'name': 'webmin-chooser-xss(32725)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32725'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1276?


Explain the CVE ID: What does the identifier CVE-2007-1277 mean in the context of cybersecurity?


Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2007-1277.

WordPress 2.1.1, as downloaded from some official distribution sites during February and March 2007, contains an externally introduced backdoor that allows remote attackers to execute arbitrary commands via (1) an eval injection vulnerability in the ix parameter to wp-includes/feed.php, and (2) an untrusted passthru call in the iz parameter to wp-includes/theme.php.


Provide references for further information: Can you share references or external links related to CVE-2007-1277?

{'name': '20070303 WordPress source code compromised to enable remote code execution', 'tags': ['mailing-list', 'x_refsource_BUGTRAQ'], 'url': 'http://www.securityfocus.com/archive/1/461794/100/0/threaded'}, {'name': 'VU#214480', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/214480'}, {'name': 'wordpress-theme-command-execution(32807)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32807'}, {'name': 'wordpress-feed-code-execution(32804)', 'tags': ['vdb-entry', 'x_refsource_XF'], 'url': 'https://exchange.xforce.ibmcloud.com/vulnerabilities/32804'}, {'name': '22797', 'tags': ['vdb-entry', 'x_refsource_BID'], 'url': 'http://www.securityfocus.com/bid/22797'}, {'name': 'ADV-2007-0812', 'tags': ['vdb-entry', 'x_refsource_VUPEN'], 'url': 'http://www.vupen.com/english/advisories/2007/0812'}, {'tags': ['x_refsource_CONFIRM'], 'url': 'http://wordpress.org/development/2007/03/upgrade-212/'}, {'name': 'VU#641456', 'tags': ['third-party-advisory', 'x_refsource_CERT-VN'], 'url': 'http://www.kb.cert.org/vuls/id/641456'}, {'tags': ['x_refsource_MISC'], 'url': 'http://ifsec.blogspot.com/2007/03/wordpress-code-compromised-to-enable.html'}, {'name': '24374', 'tags': ['third-party-advisory', 'x_refsource_SECUNIA'], 'url': 'http://secunia.com/advisories/24374'}


Explain the state of this CVE: What is the publication or resolution state of CVE-2007-1277?