# CVEs published 2007-03-27

24 CVEs were published on March 27, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2006-7175](https://cve.now/CVE-2006-7175.md): The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not allow the administrator to disable SSLv2… (no CVSS)
- [CVE-2006-7176](https://cve.now/CVE-2006-7176.md): The version of Sendmail 8.13.1-2 on Red Hat Enterprise Linux 4 Update 4 and earlier does not reject the "localhost.localdomain" domain… (no CVSS)
- [CVE-2007-1716](https://cve.now/CVE-2007-1716.md): pam\_console does not properly restore ownership for certain console devices when there are multiple users logged into the console and one… (no CVSS)
- [CVE-2007-1712](https://cve.now/CVE-2007-1712.md): SQL injection vulnerability in default.asp in ActiveWebSoftwares Active Auction Pro 7.1 allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2007-1713](https://cve.now/CVE-2007-1713.md): CRLF injection vulnerability in BSMTP.DLL in B21Soft BASP21 2003.0211, and BASP21 Pro 1.0.702.27 and earlier, allows remote attackers to… (no CVSS)
- [CVE-2007-1714](https://cve.now/CVE-2007-1714.md): Cross-site scripting (XSS) vulnerability in index.php in CcCounter 2.0 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2007-1715](https://cve.now/CVE-2007-1715.md): PHP remote file inclusion vulnerability in frontpage.php in Free Image Hosting 2.0 and earlier allows remote attackers to execute… (no CVSS)
- [CVE-2007-1695](https://cve.now/CVE-2007-1695.md): PHP remote file inclusion vulnerability in includes/usercp\_register.php in phpBB 2.0.19 allows remote attackers to execute arbitrary PHP… (no CVSS)
- [CVE-2007-1696](https://cve.now/CVE-2007-1696.md): SQL injection vulnerability in ViewNewspapers.asp in Active Newsletter 4.3 and earlier allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2007-1697](https://cve.now/CVE-2007-1697.md): PHP remote file inclusion vulnerability in header.inc.php in Philex 0.2.3 and earlier allows remote attackers to execute arbitrary PHP… (no CVSS)
- [CVE-2007-1698](https://cve.now/CVE-2007-1698.md): download.php in Philex 0.2.3 and earlier allows remote attackers to read arbitrary files and source code, and obtain sensitive information… (no CVSS)
- [CVE-2007-1699](https://cve.now/CVE-2007-1699.md): Multiple PHP remote file inclusion vulnerabilities in the SWmenu (com\_swmenupro and com\_swmenufree) 4.0 component for Mambo and Joomla!… (no CVSS)
- [CVE-2007-1700](https://cve.now/CVE-2007-1700.md): The session extension in PHP 4 before 4.4.5, and PHP 5 before 5.2.1, calculates the reference count for the session variables without… (no CVSS)
- [CVE-2007-1701](https://cve.now/CVE-2007-1701.md): PHP 4 before 4.4.5, and PHP 5 before 5.2.1, when register\_globals is enabled, allows context-dependent attackers to execute arbitrary code… (no CVSS)
- [CVE-2007-1702](https://cve.now/CVE-2007-1702.md): PHP remote file inclusion vulnerability in mod\_flatmenu.php in the Flatmenu 1.07 and earlier Mambo module allows remote attackers to… (no CVSS)
- [CVE-2007-1703](https://cve.now/CVE-2007-1703.md): SQL injection vulnerability in index.php in the RWCards (com\_rwcards) 2.4.3 and earlier component for Joomla! allows remote attackers to… (no CVSS)
- [CVE-2007-1704](https://cve.now/CVE-2007-1704.md): SQL injection vulnerability in index.php in the Car Manager (com\_resman) 1.1 and earlier component for Joomla! allows remote attackers to… (no CVSS)
- [CVE-2007-1705](https://cve.now/CVE-2007-1705.md): SQL injection vulnerability in default.asp in Active Trade 2 allows remote attackers to execute arbitrary SQL commands via the catid… (no CVSS)
- [CVE-2007-1706](https://cve.now/CVE-2007-1706.md): SQL injection vulnerability in eWebQuiz.asp in eWebQuiz 8 allows remote attackers to execute arbitrary SQL commands via the QuizID… (no CVSS)
- [CVE-2007-1707](https://cve.now/CVE-2007-1707.md): PHP remote file inclusion vulnerability in index.php in Net Side Content Management System (Net-Side.net CMS) allows remote attackers to… (no CVSS)
- [CVE-2007-1708](https://cve.now/CVE-2007-1708.md): PHP remote file inclusion vulnerability in lib/db/ez\_sql.php in ttCMS 4 and earlier allows remote attackers to execute arbitrary PHP code… (no CVSS)
- [CVE-2007-1709](https://cve.now/CVE-2007-1709.md): Buffer overflow in the confirm\_phpdoc\_compiled function in the phpDOC extension (PECL phpDOC) in PHP 5.2.1 allows context-dependent… (no CVSS)
- [CVE-2007-1710](https://cve.now/CVE-2007-1710.md): The readfile function in PHP 4.4.4, 5.1.6, and 5.2.1 allows context-dependent attackers to bypass safe\_mode restrictions and read… (no CVSS)
- [CVE-2007-1711](https://cve.now/CVE-2007-1711.md): Double free vulnerability in the unserializer in PHP 4.4.5 and 4.4.6 allows context-dependent attackers to execute arbitrary code by… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2007-03-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.