# CVEs published 2007-02-14

22 CVEs were published on February 14, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-0919](https://cve.now/CVE-2007-0919.md): Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6 allows remote attackers to list the directory… (no CVSS)
- [CVE-2007-0920](https://cve.now/CVE-2007-0920.md): SQL injection vulnerability in philboard\_forum.asp in Philboard 1.14 and earlier allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2007-0921](https://cve.now/CVE-2007-0921.md): Portal Search allows remote attackers to redirect a URL to an arbitrary web site by placing the URL in the query string to the top-level… (no CVSS)
- [CVE-2007-0922](https://cve.now/CVE-2007-0922.md): Cross-site scripting (XSS) vulnerability in buscador/buscador.htm in Portal Search allows remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2007-0923](https://cve.now/CVE-2007-0923.md): buscador/buscador.htm in Portal Search allows remote attackers to obtain sensitive information (business logic) via a query string… (no CVSS)
- [CVE-2007-0924](https://cve.now/CVE-2007-0924.md): Till Gerken phpPolls 1.0.3 allows remote attackers to bypass authentication and perform certain administrative actions via a direct… (no CVSS)
- [CVE-2007-0925](https://cve.now/CVE-2007-0925.md): Cross-site scripting (XSS) vulnerability in search/SearchResults.aspx in Community Server allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2007-0926](https://cve.now/CVE-2007-0926.md): The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via… (no CVSS)
- [CVE-2007-0927](https://cve.now/CVE-2007-0927.md): Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a crafted announce… (no CVSS)
- [CVE-2007-0928](https://cve.now/CVE-2007-0928.md): Virtual Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to… (no CVSS)
- [CVE-2007-0929](https://cve.now/CVE-2007-0929.md): Directory traversal vulnerability in php rrd browser before 0.2.1 allows remote attackers to read arbitrary files via ".." sequences in… (no CVSS)
- [CVE-2007-0930](https://cve.now/CVE-2007-0930.md): Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify arbitrary variables and conduct attacks via… (no CVSS)
- [CVE-2007-0931](https://cve.now/CVE-2007-0931.md): Heap-based buffer overflow in the management interfaces in (1) Aruba Mobility Controllers 200, 800, 2400, and 6000 and (2) Alcatel-Lucent… (no CVSS)
- [CVE-2007-0932](https://cve.now/CVE-2007-0932.md): The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly… (no CVSS)
- [CVE-2006-5860](https://cve.now/CVE-2006-5860.md): Cross-site scripting (XSS) vulnerability in the administrator console for Adobe JRun 4.0, as used in ColdFusion, allows remote attackers… (no CVSS)
- [CVE-2007-0914](https://cve.now/CVE-2007-0914.md): Race condition in the TCP subsystem for Solaris 10 allows remote attackers to cause a denial of service (system panic) via unknown vectors. (no CVSS)
- [CVE-2007-0915](https://cve.now/CVE-2007-0915.md): Distributed SLS daemon (SLSd) on HP-UX B.11.11 allows remote attackers to overwrite arbitrary files and gain privileges via a crafted RPC… (no CVSS)
- [CVE-2007-0916](https://cve.now/CVE-2007-0916.md): Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11 and B.11.23 allows… (no CVSS)
- [CVE-2007-0917](https://cve.now/CVE-2007-0917.md): The Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use… (no CVSS)
- [CVE-2007-0918](https://cve.now/CVE-2007-0918.md): The ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains… (no CVSS)
- [CVE-2006-5859](https://cve.now/CVE-2006-5859.md): Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 7.0 and 7.0.1, when Global Script Protection is not enabled, allows… (no CVSS)
- [CVE-2007-0913](https://cve.now/CVE-2007-0913.md): Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2007-02-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.