# CVEs published 2007-03-24

20 CVEs were published on March 24, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-1667](https://cve.now/CVE-2007-1667.md): Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c… (no CVSS)
- [CVE-2007-1465](https://cve.now/CVE-2007-1465.md): Stack-based buffer overflow in dproxy.c for dproxy 0.1 through 0.5 allows remote attackers to execute arbitrary code via a long DNS query… (no CVSS)
- [CVE-2007-1666](https://cve.now/CVE-2007-1666.md): The processor\_request function in the debugger server for DataRescue IDA Pro 5.0 and 5.1 does not verify that authentication has taken… (no CVSS)
- [CVE-2007-1658](https://cve.now/CVE-2007-1658.md): Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a (1) local… (no CVSS)
- [CVE-2007-1657](https://cve.now/CVE-2007-1657.md): Stack-based buffer overflow in the file\_compress function in minigzip (Modules/zlib) in Python 2.5 allows context-dependent attackers to… (no CVSS)
- [CVE-2007-1642](https://cve.now/CVE-2007-1642.md): Unspecified vulnerability in ManageEngine Firewall Analyzer allows remote authenticated users to "access any common file" via a direct URL… (no CVSS)
- [CVE-2007-1643](https://cve.now/CVE-2007-1643.md): Multiple PHP remote file inclusion vulnerabilities in LAN Management System (LMS) 1.8.9 Vala and earlier allow remote attackers to execute… (no CVSS)
- [CVE-2007-1644](https://cve.now/CVE-2007-1644.md): The dynamic DNS update mechanism in the DNS Server service on Microsoft Windows does not properly authenticate clients in certain… (no CVSS)
- [CVE-2007-1645](https://cve.now/CVE-2007-1645.md): Buffer overflow in FutureSoft TFTP Server 2000 on Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via a long… (no CVSS)
- [CVE-2007-1646](https://cve.now/CVE-2007-1646.md): Multiple cross-site scripting (XSS) vulnerabilities in SubHub 2.3.0 allow remote attackers to inject arbitrary web script or HTML via (1)… (no CVSS)
- [CVE-2007-1647](https://cve.now/CVE-2007-1647.md): Moodle 1.5.2 and earlier stores sensitive information under the web root with insufficient access control, and provides directory… (no CVSS)
- [CVE-2007-1648](https://cve.now/CVE-2007-1648.md): 0irc 1345 build 20060823 allows remote attackers to cause a denial of service (application crash) by operating an IRC server that sends a… (no CVSS)
- [CVE-2007-1649](https://cve.now/CVE-2007-1649.md): PHP 5.2.1 allows context-dependent attackers to read portions of heap memory by executing certain scripts with a serialized data input… (no CVSS)
- [CVE-2007-1650](https://cve.now/CVE-2007-1650.md): pcapsipdump.cpp in pcapsipdump before 0.1.3 allows remote attackers to cause a denial of service (application crash) via a malformed SIP… (no CVSS)
- [CVE-2007-1651](https://cve.now/CVE-2007-1651.md): Cross-site request forgery (CSRF) vulnerability in OpenID allows remote attackers to restore the login session of a user on an OpenID… (no CVSS)
- [CVE-2007-1652](https://cve.now/CVE-2007-1652.md): OpenID allows remote attackers to forcibly log a user into an OpenID enabled site, divulge the user's personal information to this site… (no CVSS)
- [CVE-2007-1653](https://cve.now/CVE-2007-1653.md): GlowWorm FW before 1.5.3b4 allows remote attackers to cause a denial of service (kernel panic) via certain DNS responses that trigger… (no CVSS)
- [CVE-2007-1654](https://cve.now/CVE-2007-1654.md): Buffer overflow in the Ne7sshSftp::addOpenHandle function in ne7ssh\_sftp.cpp in NetSieben SSH Library (ne7ssh) before 1.2.1 allows… (no CVSS)
- [CVE-2007-1655](https://cve.now/CVE-2007-1655.md): Buffer overflow in the fun\_ladd function in funmath.cpp in TinyMUX before 20070126 might allow remote attackers to cause a denial of… (no CVSS)
- [CVE-2007-1656](https://cve.now/CVE-2007-1656.md): Multiple SQL injection vulnerabilities in index.php in Katalog Plyt Audio 1.0 and earlier allow remote attackers to execute arbitrary SQL… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2007-03-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.