Vulnerabilities > Trend Micro > Serverprotect > 1.25.2007.02.16

DATE CVE VULNERABILITY TITLE RISK
2007-03-02 CVE-2007-1169 Remote Security vulnerability in Trend Micro Serverprotect 1.2520070216
The web interface in Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 accepts logon requests through unencrypted HTTP, which might allow remote attackers to obtain credentials by sniffing the network.
network
low complexity
trend-micro
5.0
2007-03-02 CVE-2007-1168 Authentication Bypass vulnerability in Trend Micro Serverprotect 1.2520070216/1.3/2.5
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
network
low complexity
trend-micro
7.5
2005-05-02 CVE-2005-0533 Heap Overflow vulnerability in Trend Micro VSAPI ARJ Handling
Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with long header file names that modify pointers within a structure.
network
low complexity
trend-micro
7.5