| 24780 | WebCalendar includes/functions.php noSet Variable Overwrite | high |
| 24756 | Symantec Mail Security for SMTP Admin Center Default Credentials | high |
| 24759 | WordPress < 2.1.1 Multiple Script Backdoors | high |
| 24746 | getID3 < 1.7.8-b1 Multiple Remote Vulnerabilities | high |
| 24743 | OrangeHRM login.php txtUserName Parameter SQL Injection | high |
| 24726 | SQLiteManager SQLiteManager_currentTheme Cookie Traversal Local File Inclusion | medium |
| 24713 | Pagesetter for PostNuke index.php id Parameter Traversal Arbitrary File Access | medium |
| 24711 | DokuWiki Detection | info |
| 24698 | ZPanel 2.0 Multiple Script Remote File Inclusion | high |
| 24690 | Trend Micro ServerProtect for Linux splx_2376_info Cookie Authentication Bypass | high |
| 24672 | phpMyFAQ < 1.6.10 Multiple Script Arbitrary File Upload | medium |
| 24669 | Plain Old Webserver URI Traversal Arbitrary File Access | medium |
| 24356 | LifeType rss.php profile Parameter Traversal Arbitrary File Access | medium |
| 24345 | MailEnable Web Mail Client Multiple Vulnerabilities (XSS, CSRF) | medium |
| 24322 | DevTrack Web Service UserName Field SQL Injection | high |
| 24284 | Advanced Poll admin/index.php Session Identifier Replay Authentication Bypass | high |
| 24283 | ColdFusion / JRun on IIS Double Encoded NULL Byte Request File Content Disclosure | medium |
| 24267 | ExoPHPDesk faq.php id Parameter SQL Injection | medium |
| 24266 | Drupal Comment Module comment_form_add_preview() Function Arbitrary Code Execution | medium |
| 24265 | Drupal Comment Function Arbitrary Code Execution | medium |
| 24264 | Drupal Multiple Module $_SESSION Manipulation CAPTCHA Bypass | medium |
| 24263 | CVSTrac Text Output Formatter SQL Injection DoS | medium |
| 24262 | LedgerSMB / SQL-Ledger login.pl script Parameter Arbitrary Perl Code Execution | high |
| 24261 | PHProxy Detection | info |
| 24237 | WordPress Pingback File Information Disclosure | medium |
| 24235 | Website Baker REMEMBER_KEY Cookie SQL Injection | medium |
| 24228 | Oreon lang/index.php file Parameter Remote File Inclusion | high |
| 24223 | WoltLab Burning Board search.php Multiple Parameter SQL Injection | high |
| 24014 | WordPress Trackback 'wp-trackback.php' 'tb_id' Parameter SQL Injection | high |
| 24011 | WordPress Trackback Charset Decoding SQL Injection | medium |
| 24003 | Cuyahoga FCKEditor Misconfiguration Unrestricted File Upload | medium |
| 24001 | phpMyFAQ < 1.6.8 Multiple SQL Injection Vulnerabilities | high |
| 23968 | phpBB < 2.0.22 Multiple Vulnerabilities | critical |
| 23966 | Ultimate PHP Board chat/login.php username Parameter Arbitrary Command Execution | high |
| 23965 | Jinzora Multiple Script include_path Parameter Remote File Inclusion | medium |
| 23964 | Cacti copy_cacti_user.php template_user Variable SQL Injection | high |
| 23963 | Cacti cmd.php Multiple Parameter SQL Injection Arbitrary Command Execution | high |
| 23934 | Mono XSP for ASP.NET Server Crafted Request Script Source Code Disclosure | medium |
| 23933 | TYPO3 'spell-check-logic.php' 'userUid' Parameter Arbitrary Command Execution | high |
| 23927 | PHP-Update blog.php Variable Overwriting Arbitrary Code Execution | high |
| 23843 | JBoss Application Server (jbossas) JMX Console DeploymentFileRepository Traversal Arbitrary File Manipulation | high |
| 23842 | JBoss JMX Console Unrestricted Access | high |
| 23840 | PatchLink Update /dagent/downloadreport.asp Multiple Parameter SQL Injection | high |
| 23785 | Seditio Detection | info |
| 23784 | phpWebThings core/editor.php editor_insert_bottom Parameter Remote File Inclusion | medium |
| 23782 | Land Down Under / Seditio polls.php id Parameter SQL Injection | medium |
| 23781 | JCE Admin Component for Joomla! 'plugin' Parameter Local File Include | high |
| 23780 | ThinClientServer Admin Account Creation Privilege Escalation | high |
| 23774 | PHP Easy Download admin/save.php moreinfo Parameter Code Injection | high |
| 23755 | MailEnable NetWebAdmin Unauthorized Access (ME-10019) | high |
