Yet another serious Explorer security hole
506036
A new Explorer hole will make online scam artists lives even easier, by allowing them to make a fake website look more like the real thing than ever before.
745224
Security experts uncovered yet another bug in Internet Explorer this week, one that could let attackers replace the content of any legit site with their own, making it possible to spoof critical pages such as e-bank account access log-in forms or credit
663754
Microsoft has confirmed the existence of a vulnerability affecting the Windows Shell. The issue exists in the WebViewFolderIcon ActiveX control, and exploitation could result in an attacker gaining the same rights as a local user.
620094
roundup Free-roaming source code breeds new Netsky pest. Also: From IE to Opera, browsers are a likely prey.
439783
JXplorer is a fully functional ldap browser written in java with a pluggable architecture, plug in security providers, ldif support, i18n support, online help, user configurable html forms for data display and much, much more. A stable release candidate for JXplorer 3.1 is now available for download; if it checks out it will become the 3.1 release. This release includes a bunch of new security goodies, such as improved SSL handling with browser-like detection of server certificates, optional client side password hashing, and kerberos support.    Otherwise, a number of bug fixes and some internal code refactoring.  If the second release candidate is good (the first had a minor gui problem with kerberos passwords) I'll make the OS specific install packages and re-release in a week or so!  You can find this release candidate here:  https://sourceforge.net/project/showfiles.php?group_id=55394&package_id=52565
424439
10.3.7 fixes bugs, fills security holes
22067
SSL-Exploerer version 0.2.13 has been released. SSL-Explorer is the world's first open-source, browser based SSL VPN solution. This unique remote access security solution provides users and businesses alike with a means of securely accessing network resources from outside the network perimeter using only a standard web browser.    The 0.2.13 release provides a number of important bug fixes to many areas of the system (see change log below). This release also includes a number of performance improvements that provide improved web server responses.  SSL-Explorer: Enterprise Edition product page:  http://3sp.com/showSslExplorer.do   SSL-Explorer: Community Edition product page:  http://3sp.com/showSslExplorerCommunity.do   SSL-Explorer SourceForge.net project page:  http://sourceforge.net/projects/sslexplorer/   ================= =   CHANGE LOG    = =================  SSL-Explorer 0.2.13 - April 27, 2007  All Editions  Bug Fixes       o Webfolders require re-authentication      o Installer Step-4 Available Interfaces      o Installer Step 5 configure proxies port exception inconsistent      o User can enter a negative shutdown delay      o Lack of extension description causes name to not be displayed in application creation      o When removing access right a NPE occurs.      o Selecting no user database throws exception      o Session password entered when launching resource throws exception      o Actions for account now available in Accounts listing rather than Account edit page.      o Default icon/list resource view only works for favourites      o Setting Authentication order in IE7 or Firefox 2 does not work correctly      o Exception in Network Places displays user password, plus cannot determine certain file types      o System Configuration, Windows Integration - AD tab not working      o Network Places NullPointerException when trying to paste nothing      o In Access Rights, creating any access right gives you an error in the information section      o Replacement Proxy - ClassNotFoundException on MultipartForm      o User prevented from entering javascript or HTTP header injection in SSL-Explorer redirect URLs      o Unable to Create another account immediately after creating a new one      o Problems with AD accounts that have different username/sAMAccountNames      o Install Wizard Import certificate requiring an alias is not mandatory      o HTML Applications Broken      o Vista /   Java 6 Fatal JVM Crash      o When opening 2 different web forwards, the forward that was opened first gives 404 errors for all links      o MSJVM support not working      o Resolved concurrent modification exception in web forward POST request that contains URI parameters      o Policy associations removed when user database changes      o Ip restrictions - the ability to recover from an ip restricted state      o Options to disable weak SSL cipher suites      o Performance improvements   Enterprise Edition  Bug Fixes      o Comma separated CN not found with any groups when authenticating with AD via LDAP       o Audit event name inconsistencies      o Some auditing events don't appear in reports.      o Mail check socket timeout is treated as disconnection      o Force PIN change at next logon doesn't mandate the PIN be different      o Brandless Logon incorrectly displays welcome text      o Drive Mapping causes errors when installed and unlicensed      o When using LDAP, entering a valid user with any invalid password logs you on
213499
Update to "critical" Internet Explorer patch repairs a serious security flaw introduced by the original version.
727620
A security researcher has found a security bug that could be attacked in Internet Explorer. Mozilla Corp. said it plans to patch the problem in its next Firefox software update.
32003
Take two Two groups of security researchers have released unofficial patches designed to protect surfers against an outstanding Internet Explorer vulnerability in the absence of available security updates from Microsoft.â¦
83412
Third party, fire and theft Security researchers have released a patch designed to protect users against an outstanding Internet Explorer vulnerability in the absence of available security updates from Microsoft.â¦
450858
New vulnerabilities include a critical flaw in Internet Explorer and a "major" bug in Firefox.
708807
Blog: Researcher finds a basic cookie-handling error that could compromise Windows PCs.
302649
Beta search app creates vulnerabilities that may threaten your data's   security.
299
Updated: A &quot;cumulative security update&quot; plugs eight holes in the Internet Explorer browser, while other patches address &quot;critical&quot; vulnerabilities in the Windows shell, in SMTP and elsewhere.
295779
Blog: Low ransom request and a self-termination date on the code suggest this is a test attack.
609685
Microsoft today released an out-of-cycle security bulletin and patch for a critical hole in Internet Explorer that is already being widely exploited by attackers.