| 1592 | phpinfo() Function Information Disclosure (deprecated) | medium |
| 1589 | WebWho+ whois.cgi Remote Command Execution | high |
| 1588 | popper_mod < 1.2.3 Administration Authentication Bypass | high |
| 1584 | Bonsai < 1.4 Multiple Vulnerabilities | critical |
| 1582 | Bugzilla < 2.14.5 / 2.16.2 / 2.17.3 Multiple Vulnerabilities | high |
| 1579 | Sambar testcgi.exe Default CGI Disclosure | low |
| 1578 | Sambar environ.pl Default CGI Disclosure | low |
| 1569 | VPOPMail vpopmail.php Remote Command Execution | high |
| 1567 | Coppermine Gallery < 1.1 Beta 2 PHP Code Execution (deprecated) | high |
| 1217 | SquirrelMail < 1.4.3 Multiple Vulnerabilities | critical |
| 5097 | MediaWiki 1.14.0 / 1.15.0 Cross-Site Scripting Vulnerability | medium |
| 5096 | WordPress < 2.8.1 Multiple Vulnerabilities | medium |
| 5095 | Bugzilla < 3.2.4/3.4 RC1 Security-Bypass Vulnerability | medium |
| 5092 | Horde Passwd Module < 3.1.1 XSS | medium |
| 5090 | FireStats < 1.6.2 SQL Injection Vulnerability | high |
| 5089 | MyBB < 1.4.8 Multiple XSS | medium |
| 5088 | Movable Type < 4.26 Multiple Vulnerabilities | high |
| 5086 | BASE < 1.2.5 Authentication Bypass | high |
| 5085 | MyBB < 1.4.7 SQL Injection | high |
| 5078 | RT: Request Tracker 'ShowConfigTab' Security Bypass | medium |
| 5039 | Simple Machines < 1.1.9 / 2.0.0 RC1 XSS (deprecated) | medium |
| 5037 | SquirrelMail < 1.4.18 Multiple Vulnerabilities | high |
| 5036 | DocuWiki Version Detection | info |
| 5033 | BASE < 1.4.3 XSS | high |
| 5028 | Coppermine < 1.4.23 injection | high |
| 5019 | IceWarp Merak WebMail Server < 9.4.2 Multiple Vulnerabilities | high |
| 5018 | Openfire < 3.6.4 Arbitrary Password Manipulation | medium |
| 5016 | IBM Tivoli Storage Manager < 5.2.5.4/5.3.6.6/5.4.2.7/5.5.2 Multiple Vulnerabilities | high |
| 5012 | MyBB < 1.4.6 Multiple Vulnerabilities | high |
| 4597 | RunCMS < 1.6.2 Multiple Script Remote File Inclusion | high |
| 4587 | WordPress 2.x < 2.6 'press-this.php' XSS | medium |
| 4585 | phpBB < 3.0.2 Multiple Information Disclosure Vulnerabilities | medium |
| 4574 | Simple Machines Forum %lt; 1.1.4 / 1.0.12 SQL Injection | medium |
| 4573 | MyBB < 1.2.13 SQL Injection | medium |
| 4559 | WebGUI < 7.5.13 RSS Feed Authentication Bypass | medium |
| 4549 | ListManager words Parameter Cross-Site Scripting Vulnerability | medium |
| 4540 | Gallery < 2.2.4 Multiple Vulnerabilities | high |
| 4519 | Cerberus Helpdesk < Cerberus Helpdesk 4.0 Build 603 | medium |
| 4510 | MercuryBoard < 1.1.6 SQL Injection | high |
| 4506 | Mantis Cross-Site Request Forgery Vulnerabilities | medium |
| 4505 | Cross-Domain Policy File (crossdomain.xml) Detection | info |
| 4002 | Cubecart < 3.0.17 cart.inc.php Multiple Parameter SQL Injection | medium |
| 3536 | AWStats < 6.6 migrate Variable Command Execution | medium |
| 3530 | CGI:IRC Server Detection | high |
| 3528 | sBLOG <= 0.7.2 search.php keyword Parameter SQL Injection | critical |
| 3526 | Limbo CMS <= 1.0.4.2 Multiple Vulnerabilitiesa | high |
| 3521 | Help Center Live < 2.1.0 osTicket Multiple SQL Injection | high |
| 3520 | Coppermine Photo Gallery < 1.4.5 index.php file Parameter Local File Inclusion | medium |
| 3519 | MyBB < 1.1.1 Multiple Script Variable Overwrite | high |
| 3518 | Serendipity <= 1.0-beta2 Blog Configuration PHP Code Injection | high |