Hummingbird

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-4729 1Hummingbird 2Exceed Exceed Powersuite Apr 23, 2026 Oct 24, 2008 N/A· v4 N/A· v3 6.8 MEDIUM· v2 Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword...Show more Stack-based buffer overflow in Hummingbird.XWebHostCtrl.1 ActiveX control (hclxweb.dll) in Hummingbird Xweb ActiveX Control 13.0 and earlier allows remote attackers to execute arbitrary code via a long PlainTextPassword property. NOTE: code execution might not be possible in 13.0.Show less
CVE-2008-4728 1Hummingbird 1Deployment Wizard Apr 23, 2026 Oct 24, 2008 N/A· v4 N/A· v3 9.3 HIGH· v2 Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the (1)...Show more Multiple insecure method vulnerabilities in the DeployRun.DeploymentSetup.1 (DeployRun.dll) ActiveX control 10.0.0.44 in Hummingbird Deployment Wizard 2008 allow remote attackers to execute arbitrary programs via the (1) Run and (2) PerformUpdateAsync methods, and (3) modify arbitrary registry values via the SetRegistryValueAsString method. NOTE: the SetRegistryValueAsString method could be leveraged for code execution by specifying executable file values to Startup folders.Show less
CVE-2006-0174 1Hummingbird 2Collaboration Enterprise Collaboration Apr 16, 2026 Jan 11, 2006 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain sensitive information (intranet IP addresses and enumerations of valid parameter values) via a direc...Show more Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to obtain sensitive information (intranet IP addresses and enumerations of valid parameter values) via a direct request to hc, which reveals the information in an error message or a cookie.Show less
CVE-2006-0173 1Hummingbird 1Enterprise Collaboration Apr 16, 2026 Jan 11, 2006 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to misrepresent the type and name of a file via modified doc_ext and id parameters, which might trick a user i...Show more Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to misrepresent the type and name of a file via modified doc_ext and id parameters, which might trick a user into downloading dangerous or unexpected content.Show less
CVE-2006-0172 1Hummingbird 1Enterprise Collaboration Apr 16, 2026 Jan 11, 2006 N/A· v4 N/A· v3 3.5 LOW· v2 Cross-site scripting (XSS) vulnerability in the file manager utility in Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML...Show more Cross-site scripting (XSS) vulnerability in the file manager utility in Hummingbird Collaboration (aka Hummingbird Enterprise Collaboration) 5.21 and earlier allows remote attackers to inject arbitrary web script or HTML in an uploaded page, which is published without a check for hostile scripting.Show less
CVE-2005-2599 1Hummingbird 1Connectivity Apr 16, 2026 Aug 17, 2005 N/A· v4 N/A· v3 7.5 HIGH· v2 Hummingbird FTP for Connectivity 10.0 uses weak encryption (trivial encoding) to store the user's password in the FTP profile, which allows attackers to gain privileges.
CVE-2005-1815 1Hummingbird 1Connectivity Apr 16, 2026 Jun 1, 2005 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of service and possibly execute arbitrary code via (1) an FTP command with a long argument to FTPD (ftpd...Show more Multiple buffer overflows in Hummingbird Connectivity inetD 10.0.0.1 and 9.0.0.4 allows attackers to cause a denial of service and possibly execute arbitrary code via (1) an FTP command with a long argument to FTPD (ftpdw.exe) or (2) a large amount of data to LPD (Lpdw.exe).Show less
CVE-2004-2729 1Hummingbird 1Connectivity Apr 16, 2026 Dec 31, 2004 N/A· v4 N/A· v3 4.4 MEDIUM· v2 Inetd32 Administration Tool of Hummingbird Connectivity 7.1 and 9.0 allows local users to execute arbitrary code by changing the program for handling incoming connections.
CVE-2004-2728 1Hummingbird 1Connectivity Apr 16, 2026 Dec 31, 2004 N/A· v4 N/A· v3 3.5 LOW· v2 Buffer overflow in the FTP server of Hummingbird Connectivity 7.1 and 9.0 allows remote, authenticated users to cause a denial of service (application crash) via a long argument to the XCWD command.
CVE-2004-2258 1Hummingbird 1Exceed Apr 16, 2026 Dec 31, 2004 N/A· v4 N/A· v3 2.1 LOW· v2 Xconfig in Hummingbird Exceed before 9.0.0.1, when the Screen Definition is password-protected, allows local users to access certain options by switching to another tab, then switching back to the original tab.
CVE-2003-1103 1Hummingbird 1Cyberdocs Apr 16, 2026 Dec 31, 2003 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in loginact.asp for Hummingbird CyberDOCS before 3.9 allows remote attackers to execute arbitrary SQL commands.
CVE-2003-1101 1Hummingbird 1Cyberdocs Apr 16, 2026 Dec 31, 2003 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allows remote attackers to obtain the full path of the DM Web Server via invalid login credentials, which reveals the path in an error message.
CVE-2003-1100 1Hummingbird 1Cyberdocs Apr 16, 2026 Dec 31, 2003 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in Hummingbird CyberDOCS 3.5.1, 3.9, and 4.0 allow remote attackers to inject arbitrary web script or HTML via certain vectors.
CVE-1999-1196 1Hummingbird 1Exceed Apr 16, 2026 Apr 7, 1999 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Hummingbird Exceed X version 5 allows remote attackers to cause a denial of service via malformed data to port 6000.
CVE-1999-1280 1Hummingbird 1Exceed Apr 16, 2026 Dec 3, 1998 N/A· v4 N/A· v3 7.5 HIGH· v2 Hummingbird Exceed 6.0.1.0 inadvertently includes a DLL that was meant for development and testing, which logs user names and passwords in cleartext in the test.log file.