# CVEs published 2007-02-13 29 CVEs were published on February 13, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-0219](https://cve.now/CVE-2007-0219.md): Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from (1) Msb1fren.dll, (2) Htmlmm.ocx, and (3) Blnmgrps.dll as ActiveX… (no CVSS) - [CVE-2007-0905](https://cve.now/CVE-2007-0905.md): PHP before 5.2.1 allows attackers to bypass safe\_mode and open\_basedir restrictions via unspecified vectors in the session extension. (no CVSS) - [CVE-2007-0906](https://cve.now/CVE-2007-0906.md): Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via… (no CVSS) - [CVE-2007-0907](https://cve.now/CVE-2007-0907.md): Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving the sapi\_header\_op… (no CVSS) - [CVE-2007-0908](https://cve.now/CVE-2007-0908.md): The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key\_length… (no CVSS) - [CVE-2007-0909](https://cve.now/CVE-2007-0909.md): Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to… (no CVSS) - [CVE-2007-0910](https://cve.now/CVE-2007-0910.md): Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors. (no CVSS) - [CVE-2007-0911](https://cve.now/CVE-2007-0911.md): Off-by-one error in the str\_ireplace function in PHP 5.2.1 might allow context-dependent attackers to cause a denial of service (crash). (no CVSS) - [CVE-2007-0912](https://cve.now/CVE-2007-0912.md): Cross-Site Request Forgery (CSRF) vulnerability in admin/admin.adm.php in Jportal 2.3.1, and possibly earlier, allows remote attackers to… (no CVSS) - [CVE-2006-4697](https://cve.now/CVE-2006-4697.md): Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from Imjpcksid.dll as ActiveX controls, which allows remote attackers… (no CVSS) - [CVE-2007-0217](https://cve.now/CVE-2007-0217.md): The wininet.dll FTP client code in Microsoft Internet Explorer 5.01 and 6 might allow remote attackers to execute arbitrary code via an… (no CVSS) - [CVE-2007-0208](https://cve.now/CVE-2007-0208.md): Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the… (no CVSS) - [CVE-2007-0209](https://cve.now/CVE-2007-0209.md): Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac allows user-assisted remote… (no CVSS) - [CVE-2006-1311](https://cve.now/CVE-2006-1311.md): The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac… (no CVSS) - [CVE-2006-3448](https://cve.now/CVE-2006-3448.md): Buffer overflow in the Step-by-Step Interactive Training in Microsoft Windows 2000 SP4, XP SP2 and Professional, and Server 2003 SP1… (no CVSS) - [CVE-2006-5270](https://cve.now/CVE-2006-5270.md): Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and… (no CVSS) - [CVE-2007-0025](https://cve.now/CVE-2007-0025.md): The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows… (no CVSS) - [CVE-2007-0026](https://cve.now/CVE-2007-0026.md): The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary… (no CVSS) - [CVE-2007-0210](https://cve.now/CVE-2007-0210.md): The Window Image Acquisition (WIA) Service in Microsoft Windows XP SP2 allows local users to gain privileges via unspecified vectors… (no CVSS) - [CVE-2007-0211](https://cve.now/CVE-2007-0211.md): The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local… (no CVSS) - [CVE-2007-0214](https://cve.now/CVE-2007-0214.md): The HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional, 2003 SP1 allows remote attackers to… (no CVSS) - [CVE-2007-0900](https://cve.now/CVE-2007-0900.md): Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register\_globals is enabled, allow… (no CVSS) - [CVE-2007-0901](https://cve.now/CVE-2007-0901.md): Multiple cross-site scripting (XSS) vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script… (no CVSS, moin) - [CVE-2007-0902](https://cve.now/CVE-2007-0902.md): Unspecified vulnerability in the "Show debugging information" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive… (no CVSS, moin) - [CVE-2007-0903](https://cve.now/CVE-2007-0903.md): Unspecified vulnerability in the mod\_roster\_odbc module in ejabberd before 1.1.3 has unknown impact and attack vectors. (no CVSS) - [CVE-2007-0904](https://cve.now/CVE-2007-0904.md): SQL injection vulnerability in projects.php in LightRO CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the ID… (no CVSS) - [CVE-2007-0842](https://cve.now/CVE-2007-0842.md): The 64-bit versions of Microsoft Visual C++ 8.0 standard library (MSVCR80.DLL) time functions, including (1) localtime, (2) localtime\_s… (no CVSS) - [CVE-2007-0896](https://cve.now/CVE-2007-0896.md): Cross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++ extensions for Firefox, allows remote attackers to… (no CVSS) - [CVE-2007-0895](https://cve.now/CVE-2007-0895.md): Race condition in recursive directory deletion with the (1) -r or (2) -R option in rm in Solaris 8 through 10 before 20070208 allows local… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2007-02-13 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.