# CVEs published 2007-03-06

36 CVEs were published on March 6, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-1263](https://cve.now/CVE-2007-1263.md): GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions… (no CVSS)
- [CVE-2007-1264](https://cve.now/CVE-2007-1264.md): Enigmail 0.94.2 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Enigmail from visually… (no CVSS)
- [CVE-2007-1265](https://cve.now/CVE-2007-1265.md): KMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents KMail from visually… (no CVSS)
- [CVE-2007-1266](https://cve.now/CVE-2007-1266.md): Evolution 2.8.1 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Evolution from visually… (no CVSS)
- [CVE-2007-1267](https://cve.now/CVE-2007-1267.md): Sylpheed 2.2.7 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Sylpheed from visually… (no CVSS)
- [CVE-2007-1268](https://cve.now/CVE-2007-1268.md): Mutt 1.5.13 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Mutt from visually… (no CVSS)
- [CVE-2007-1269](https://cve.now/CVE-2007-1269.md): GNUMail 1.1.2 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents GNUMail from visually… (no CVSS)
- [CVE-2007-1285](https://cve.now/CVE-2007-1285.md): The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and… (no CVSS)
- [CVE-2007-1286](https://cve.now/CVE-2007-1286.md): Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the… (no CVSS)
- [CVE-2007-1287](https://cve.now/CVE-2007-1287.md): A regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows remote attackers to conduct cross-site… (no CVSS)
- [CVE-2007-1282](https://cve.now/CVE-2007-1282.md): Integer overflow in Mozilla Thunderbird before 1.5.0.10 and SeaMonkey before 1.0.8 allows remote attackers to trigger a buffer overflow… (no CVSS)
- [CVE-2006-7112](https://cve.now/CVE-2006-7112.md): Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote authenticated users to read and include… (no CVSS)
- [CVE-2006-7113](https://cve.now/CVE-2006-7113.md): Unrestricted file upload vulnerability in P-News 2.0 allows remote attackers to upload and execute arbitrary files via an avatar file. (no CVSS)
- [CVE-2006-7114](https://cve.now/CVE-2006-7114.md): P-News 2.0 stores db/user.txt under the web document root with insufficient access control, which allows remote attackers to obtain… (no CVSS)
- [CVE-2006-7115](https://cve.now/CVE-2006-7115.md): SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to… (no CVSS)
- [CVE-2006-7116](https://cve.now/CVE-2006-7116.md): SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2006-7117](https://cve.now/CVE-2006-7117.md): Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute arbitrary local… (no CVSS)
- [CVE-2006-7118](https://cve.now/CVE-2006-7118.md): SQL injection vulnerability in index.asp in DMXReady Site Engine Manager 1.0 allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2006-7119](https://cve.now/CVE-2006-7119.md): PHP remote file inclusion vulnerability in kernel/system/startup.php in J. (no CVSS)
- [CVE-2006-7120](https://cve.now/CVE-2006-7120.md): PHP remote file inclusion vulnerability in lib/php/phphtmllib-2.5.4/examples/example6.php for maintain 3.0.0-RC2 allows remote attackers… (no CVSS)
- [CVE-2006-7121](https://cve.now/CVE-2006-7121.md): The HTTP server in Linksys SPA-921 VoIP Desktop Phone allows remote attackers to cause a denial of service (reboot) via (1) a long URL, or… (no CVSS)
- [CVE-2006-7122](https://cve.now/CVE-2006-7122.md): Cross-site scripting (XSS) vulnerability in the IP Address Lookup functionality in BSQ Sitestats (component for Joomla) 1.8.0, and… (no CVSS)
- [CVE-2006-7123](https://cve.now/CVE-2006-7123.md): Multiple SQL injection vulnerabilities in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allow… (no CVSS)
- [CVE-2006-7124](https://cve.now/CVE-2006-7124.md): PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other… (no CVSS)
- [CVE-2006-7125](https://cve.now/CVE-2006-7125.md): Cross-site scripting (XSS) vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2006-7126](https://cve.now/CVE-2006-7126.md): SQL injection vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2006-7127](https://cve.now/CVE-2006-7127.md): Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a… (no CVSS)
- [CVE-2006-7128](https://cve.now/CVE-2006-7128.md): PHP remote file inclusion vulnerability in forum/forum.php JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary PHP code via a URL… (no CVSS)
- [CVE-2006-7129](https://cve.now/CVE-2006-7129.md): ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the… (no CVSS)
- [CVE-2006-7130](https://cve.now/CVE-2006-7130.md): PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote attackers to… (no CVSS)
- [CVE-2006-7131](https://cve.now/CVE-2006-7131.md): PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6 allows remote attackers to execute arbitrary PHP code via the… (no CVSS)
- [CVE-2006-7132](https://cve.now/CVE-2006-7132.md): Directory traversal vulnerability in pmd-config.php in PHPMyDesk 1.0beta allows remote attackers to include arbitrary local files via the… (no CVSS)
- [CVE-2006-7133](https://cve.now/CVE-2006-7133.md): Directory traversal vulnerability in upload/bin/download.php in Upload Tool for PHP 1.0 allows remote attackers to read arbitrary files… (no CVSS)
- [CVE-2006-7134](https://cve.now/CVE-2006-7134.md): Unrestricted file upload vulnerability in main\_user.php in Upload Tool for PHP 1.0 allows remote attackers to upload and execute arbitrary… (no CVSS)
- [CVE-2007-1281](https://cve.now/CVE-2007-1281.md): Kaspersky AntiVirus Engine 6.0.1.411 for Windows and 5.5-10 for Linux allows remote attackers to cause a denial of service (CPU… (no CVSS)
- [CVE-2007-0994](https://cve.now/CVE-2007-0994.md): A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2007-03-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.