Security Vulnerabilities, CVEs, Published In May 2007 (Gain Privilege)
Session fixation vulnerability in HP Systems Insight Manager (SIM) 4.2 and 5.0 SP4 and SP5 allows remote attackers to hijack web sessions by setting the JSESSIONID cookie.
Max CVSS
10.0
EPSS Score
1.41%
Published
2007-05-16
Updated
2018-10-16
Unspecified vulnerability in Default.aspx in Podium CMS allows remote attackers to have an unknown impact, possibly session fixation, via a META HTTP-EQUIV Set-cookie expression in the id parameter, related to "cookie manipulation." NOTE: this issue might be cross-site scripting (XSS).
Max CVSS
4.3
EPSS Score
0.32%
Published
2007-05-09
Updated
2018-10-16
Session fixation vulnerability in Simple Machines Forum (SMF) 1.1.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
Max CVSS
6.8
EPSS Score
1.96%
Published
2007-05-09
Updated
2018-10-16
XScreenSaver 4.10, when using a remote directory service for credentials, does not properly handle the results from the getpwuid function in drivers/lock.c when there is no network connectivity, which causes XScreenSaver to crash and unlock the screen and allows local users to bypass authentication.
Max CVSS
4.6
EPSS Score
0.04%
Published
2007-05-02
Updated
2017-10-11
4 vulnerabilities found