| 21017 | Gallery < 2.0.3 IP Spoofing | medium |
| 21016 | Listserv < 14.5 Multiple Buffer Overflows | high |
| 20994 | Limbo CMS index.php Itemid Parameter Arbitrary Command Execution | high |
| 20992 | vBulletin Email Field XSS | medium |
| 20991 | imageVue < 16.2 admin/upload.php Unrestricted File Upload | high |
| 20988 | HP System Management Homepage (SMH) on Windows Namazu lang Parameter Traversal Arbitrary File Access | medium |
| 20986 | phpRPC Library rpc_decoder.php decode() Function Arbitrary Code Execution | high |
| 20984 | Coppermine Photo Gallery showdoc.php f Parameter Local File Inclusion | medium |
| 20978 | SPIP < 1.8.2-g Multiple Vulnerabilities | high |
| 20974 | NOCC <= 1.0 Multiple Vulnerabilities | high |
| 20972 | Plume CMS < 1.0.3 Remote File Inclusion | high |
| 20971 | Noah's Classifieds <= 1.3 Multiple Vulnerabilities | high |
| 20970 | SquirrelMail < 1.4.6 Multiple Vulnerabilities | medium |
| 20969 | PostNuke < 0.762 Multiple Vulnerabilities | medium |
| 20968 | ViRobot Linux Server filescan Authentication Bypass | critical |
| 20961 | CherryPy staticFilter Traversal Arbitrary File Access | medium |
| 20959 | Geeklog < 1.3.11sr4 / 1.4.0sr1 Multiple Remote Vulnerabilities (LFI, SQLi) | high |
| 20952 | Fedora Directory Server Crafted IFRAME adm.conf Admin Server Password Disclosure | medium |
| 20932 | NeoMail Session ID Weakness neomail-prefs.pl Arbitrary Mail-folder Manipulation | medium |
| 20930 | MyBB < 1.04 misc.php SQLi | high |
| 20929 | Flyspray install-0.9.7.php adodbpath Parameter Remote File Inclusion | medium |
| 20926 | dotProject docs/ Directory Multiple Script Information Disclosure | medium |
| 20925 | dotProject Multiple Scripts Remote File Inclusion | high |
| 20893 | HP Systems Insight Manager Namazu lang Parameter Traversal Arbitrary File Access | medium |
| 20892 | LinPHA <= 1.0 Multiple Vulnerabilities | medium |
| 20891 | PmWiki < 2.1 beta 21 Multiple Vulnerabilities | medium |
| 20880 | RunCMS Multiple Script bbPath Parameter Remote File Inclusion | medium |
| 20869 | Dragonfly CMS install.php newlang Parameter Local File Inclusion | high |
| 20867 | PHP iCalendar Multiple Script Remote File Inclusion | medium |
| 20861 | Loudblog backend_settings.php Multiple Parameter Remote File Inclusion | high |
| 20841 | MyBB Detection | info |
| 20839 | Website Baker Admin Login SQL Injection | high |
| 20838 | MyBB index.php 'referrer' Parameter SQLi | high |
| 20835 | Invision Power Board Dragoran Portal Module index.php site Parameter SQL Injection | high |
| 20825 | RCBlog index.php post Parameter Traversal Arbitrary File Access | medium |
| 20824 | Limbo CMS Multiple Vulnerabilities | high |
| 20806 | Lyris ListManager Subscription Form Administrative Command Injection | high |
| 20750 | ELOG < 2.6.1 Multiple Remote Vulnerabilities (Traversal, FS) | medium |
| 20736 | Geronimo Console Default Credentials | high |
| 20402 | PHP Upload Center index.php filename Parameter Directory Traversal Arbitrary File Access | medium |
| 20401 | Trend Micro ControlManager < 3.0 SP5 Multiple Vulnerabilities | high |
| 20385 | ADOdb server.php sql Parameter SQL Injection | high |
| 20384 | ADOdb tmssql.php do Parameter Arbitrary PHP Function Execution | high |
| 20383 | AppServ appserv/main.php appserv_root Parameter Remote File Inclusion | medium |
| 20379 | phpBB < 2.0.19 Multiple XSS | medium |
| 20378 | PHP Support Tickets index.php Multiple Parameter SQL Injection | high |
| 20376 | PHPSurveyor Multiple SQL Injections | high |
| 20375 | Web Wiz check_user.asp txtUserName Parameter SQL Injection | high |
| 20374 | phpDocumentor <= 1.3.0 RC4 Local And Remote File Inclusion | high |
| 20373 | MyBB < 1.01 function_upload.php SQLi | high |
