# CVEs published 2007-03-02

30 CVEs were published on March 2, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-1219](https://cve.now/CVE-2007-1219.md): PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arbitrary PHP code… (no CVSS)
- [CVE-2007-1220](https://cve.now/CVE-2007-1220.md): The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 does not properly verify the parameters passed to the syscall dispatcher, which… (no CVSS)
- [CVE-2007-1221](https://cve.now/CVE-2007-1221.md): The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 allows attackers with physical access to force execution of the hypervisor… (no CVSS)
- [CVE-2007-1222](https://cve.now/CVE-2007-1222.md): Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows… (no CVSS)
- [CVE-2007-1223](https://cve.now/CVE-2007-1223.md): Unspecified vulnerability in Hitachi OSAS/FT/W before 20070223 allows attackers to cause a denial of service (responder control processing… (no CVSS)
- [CVE-2007-1224](https://cve.now/CVE-2007-1224.md): Grok Developments NetProxy 4.03 allows remote attackers to bypass URL filtering via a request that omits "http://" from the URL and… (no CVSS)
- [CVE-2007-1225](https://cve.now/CVE-2007-1225.md): The connection log file implementation in Grok Developments NetProxy 4.03 does not record requests that omit http:// in a URL, which might… (no CVSS)
- [CVE-2007-1226](https://cve.now/CVE-2007-1226.md): McAfee VirusScan for Mac (Virex) before 7.7 patch 1 has weak permissions (0666) for /Library/Application Support/Virex/VShieldExclude.txt… (no CVSS)
- [CVE-2007-1227](https://cve.now/CVE-2007-1227.md): VShieldCheck in McAfee VirusScan for Mac (Virex) before 7.7 patch 1 allow local users to change permissions of arbitrary files via a… (no CVSS)
- [CVE-2007-1228](https://cve.now/CVE-2007-1228.md): IBM DB2 UDB 8.2 before Fixpak 7 (aka fixpack 14), and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain… (no CVSS)
- [CVE-2007-1229](https://cve.now/CVE-2007-1229.md): Cross-site scripting (XSS) vulnerability in the Nullsoft ShoutcastServer 1.9.7 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2007-1230](https://cve.now/CVE-2007-1230.md): Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/functions.php in WordPress before 2.1.2-alpha allow remote attackers to… (no CVSS)
- [CVE-2007-1005](https://cve.now/CVE-2007-1005.md): Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA (formerly Computer Associates) eTrust Intrusion Detection… (no CVSS)
- [CVE-2007-1218](https://cve.now/CVE-2007-1218.md): Off-by-one buffer overflow in the parse\_elements function in the 802.11 printer code (print-802\_11.c) for tcpdump 3.9.5 and earlier allows… (no CVSS)
- [CVE-2006-3892](https://cve.now/CVE-2006-3892.md): The Management Console server in EMC NetWorker (formerly Legato NetWorker) 7.3.2 before Jumbo Update 1 uses weak authentication, which… (no CVSS)
- [CVE-2006-7095](https://cve.now/CVE-2006-7095.md): Integer signedness error in the network\_receive\_packet function in socket.c in dimension 3 engine (dim3) 1.5 and earlier allows remote… (no CVSS)
- [CVE-2006-7096](https://cve.now/CVE-2006-7096.md): Buffer overflow in the network\_host\_handle\_join function in host.c in dimension 3 engine (dim3) 1.5 and earlier allows remote attackers to… (no CVSS)
- [CVE-2006-7097](https://cve.now/CVE-2006-7097.md): Multiple unspecified vulnerabilities in TaskFreak! before 0.1.4 have unknown impact and attack vectors. (no CVSS)
- [CVE-2007-1189](https://cve.now/CVE-2007-1189.md): Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite certain memory… (no CVSS)
- [CVE-2007-1190](https://cve.now/CVE-2007-1190.md): Unspecified vulnerability in the EmbeddedWB Web Browser ActiveX control allows remote attackers to execute arbitrary code via unspecified… (no CVSS)
- [CVE-2007-1191](https://cve.now/CVE-2007-1191.md): The Social Bookmarks (del.icio.us) plug-in 8F in Quicksilver writes usernames and passwords in plaintext to the… (no CVSS)
- [CVE-2007-1192](https://cve.now/CVE-2007-1192.md): Thomas R. (no CVSS)
- [CVE-2007-1193](https://cve.now/CVE-2007-1193.md): Multiple unspecified vulnerabilities in the Login page in OrangeHRM before 20070212 have unknown impact and attack vectors. (no CVSS)
- [CVE-2007-1194](https://cve.now/CVE-2007-1194.md): Norman SandBox Analyzer does not use the proper range for Interrupt Descriptor Table (IDT) entries, which allows local users to determine… (no CVSS)
- [CVE-2007-1195](https://cve.now/CVE-2007-1195.md): Multiple buffer overflows in XM Easy Personal FTP Server 5.3.0 allow remote attackers to execute arbitrary code via unspecified vectors. (no CVSS)
- [CVE-2007-1196](https://cve.now/CVE-2007-1196.md): Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execute arbitrary code… (no CVSS)
- [CVE-2007-1197](https://cve.now/CVE-2007-1197.md): Multiple unspecified vulnerabilities in Epiware before 4.7.5 have unknown impact and attack vectors, possibly related to cross-site… (no CVSS)
- [CVE-2007-1198](https://cve.now/CVE-2007-1198.md): Cross-site scripting (XSS) vulnerability in TaskFreak! before 0.5.7 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2007-1199](https://cve.now/CVE-2007-1199.md): Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with… (no CVSS)
- [CVE-2007-1217](https://cve.now/CVE-2007-1217.md): Buffer overflow in the bufprint function in capiutil.c in libcapi, as used in Linux kernel 2.6.9 to 2.6.20 and isdn4k-utils, allows local… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2007-03-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.