| 21748 | BlueDragon 6.2.1 Multiple Remote Vulnerabilities (XSS, DoS) | medium |
| 21747 | BDPDT for DotNetNuke (.net nuke) uploadfilepopup.aspx File Upload Privilege Escalation | critical |
| 21739 | w-Agora inc_dir Parameter Remote File Inclusion | high |
| 21736 | Hosting Controller <= 6.1 Hotfix 3.1 Authenticated User Privilege Escalation | medium |
| 21729 | Wikka wikka.php Local File Inclusion | high |
| 21727 | Calendarix Multiple Script id Parameter SQL Injection | medium |
| 21675 | OpenEMR C_FormEvaluation.class.php fileroot Parameter Remote File Inclusion | medium |
| 21662 | DokuWiki Spell Checker Embedded Link Arbitrary PHP Code Execution | high |
| 21645 | Pixelpost index.php category Parameter SQL Injection | medium |
| 21641 | Claroline Multiple Script includePath Parameter Remote File Inclusion | medium |
| 21631 | LifeType index.php articleId Parameter SQL Injection | high |
| 21630 | SquirrelMail plugin.php plugins Parameter Local File Inclusion | high |
| 21621 | e107 email.php Arbitrary Mail Relay | medium |
| 21619 | Geeklog auth.inc.php loginname Parameter SQL Injection | medium |
| 21611 | BASE Multiple Script BASE_path Parameter Remote File Inclusion | medium |
| 21607 | Resin viewfile Servlet Arbitrary File Disclosure | medium |
| 21605 | UBB.threads addpost_newpoll.php thispath Parameter Remote File Inclusion | medium |
| 21597 | Sun Server Console Authentication Bypass | high |
| 21596 | Nucleus CMS PLUGINADMIN.php DIR_LIBS Parameter Remote File Inclusion | medium |
| 21582 | phpwcms spaw_control.class.php spaw_root Parameter Remote File Inclusion | low |
| 21581 | XOOPS xoopsConfig Parameter Variable Overwrite Local File Inclusion | medium |
| 21573 | FCKeditor upload.php Type Parameter Arbitrary File Upload | high |
| 21572 | Ipswitch WhatsUp Professional Crafted Header Authentication Bypass | high |
| 21571 | Squirrelcart cart_content.php cart_isp_root Parameter Remote File Inclusion | medium |
| 21570 | SugarCRM <= 4.2.0a Multiple Script sugarEntry Parameter Remote File Inclusion | medium |
| 21566 | WebCalendar Login Error Message User Account Enumeration | medium |
| 21562 | Ipswitch WhatsUp Professional Multiple Vulnerabilities (XSS, Enum, ID) | medium |
| 21558 | Limbo weblinks.html.php catid Parameter SQL Injection | medium |
| 21557 | ACal embed/day.php path Parameter Remote File Inclusion | high |
| 21555 | e107 e107_cookie Parameter SQL Injection | medium |
| 21339 | Stadtaus Gaestebuch-Script index.php include_files Parameter Remote File Inclusion | medium |
| 21337 | IdealBB < 1.5.4b Multiple Vulnerabilities (XSS, SQLi, Upload, Traversal) | high |
| 21335 | Claroline ldap.inc.php clarolineRepositorySys Parameter Remote File Inclusion | medium |
| 21329 | Aardvark Topsites CONFIG[path] Parameter Remote File Inclusion | medium |
| 21328 | AWStats migrate Parameter Arbitrary Command Execution | medium |
| 21323 | phpBB Multiple Module phpbb_root_path Parameter Remote File Inclusion | medium |
| 21313 | sBLOG search.php keyword Parameter SQL Injection | critical |
| 21312 | X7 Chat help/index.php help_file Parameter Local File Inclusion | medium |
| 21311 | WEBalbum skin2 Cookie Parameter Traversal Local File Inclusion | medium |
| 21310 | phpListPro Multiple Script returnpath Parameter Remote File Inclusions | high |
| 21309 | Monster Top List sources/functions.php root_path Parameter Remote File Inclusion | high |
| 21308 | Limbo CMS sql.php classes_dir Parameter Remote File Inclusion | medium |
| 21307 | Invision Power Board 2.x.x < 04-25-06 Multiple Vulnerabilities | medium |
| 21306 | Help Center Live osTicket Module Multiple Unspecified SQL Injections | high |
| 21305 | phpMyAgenda rootagenda Parameter File Include Vulnerability | high |
| 21304 | Asterisk Recording Interface (ARI) misc/audio.php recording Parameter Traversal Arbitrary File Access | medium |
| 21303 | Asterisk Recording Interface (ARI) includes/main.conf Remote Credential Disclosure | high |
| 21302 | phpBB Advanced GuestBook addentry.php phpbb_root_path Parameter Remote File Inclusion | high |
| 21271 | Symantec AntiVirus Scan Engine Web Interface Multiple Remote Vulnerabilities | critical |
| 21246 | myEvent Multiple Remote Vulnerabilities | high |
