# CVEs published 2007-04-02

35 CVEs were published on April 2, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-1800](https://cve.now/CVE-2007-1800.md): Cisco Secure ACS does not require authentication when Cisco Trust Agent (CTA) transmits posture information, which might allow remote… (no CVSS)
- [CVE-2007-1801](https://cve.now/CVE-2007-1801.md): Directory traversal vulnerability in inc/lang.php in sBLOG 0.7.3 Beta allows remote attackers to include and execute arbitrary local files… (no CVSS)
- [CVE-2007-1802](https://cve.now/CVE-2007-1802.md): Cross-site scripting (XSS) vulnerability in MailDwarf 3.01 and earlier allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2007-1803](https://cve.now/CVE-2007-1803.md): Unspecified vulnerability in MailDwarf 3.01 and earlier allows remote attackers to send e-mail to addresses different from the configured… (no CVSS)
- [CVE-2007-1804](https://cve.now/CVE-2007-1804.md): PulseAudio 0.9.5 allows remote attackers to cause a denial of service (daemon crash) via (1) a PA\_PSTREAM\_DESCRIPTOR\_LENGTH value of… (no CVSS)
- [CVE-2007-1805](https://cve.now/CVE-2007-1805.md): SQL injection vulnerability in genre.php in the debaser 0.92 and earlier module for Xoops allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2007-1806](https://cve.now/CVE-2007-1806.md): SQL injection vulnerability in categos.php in the RM+Soft Gallery (rmgallery) 1.0 module for Xoops allows remote attackers to execute… (no CVSS)
- [CVE-2007-1807](https://cve.now/CVE-2007-1807.md): SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remote attackers to… (no CVSS)
- [CVE-2007-1808](https://cve.now/CVE-2007-1808.md): SQL injection vulnerability in show.php in the Camportail 1.1 and earlier module for Xoops allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2007-1809](https://cve.now/CVE-2007-1809.md): Multiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder (CWB) PRO 1.5 allow remote attackers to execute… (no CVSS)
- [CVE-2007-1810](https://cve.now/CVE-2007-1810.md): SQL injection vulnerability in product\_details.php in the Kshop 1.17 and earlier module for Xoops allows remote attackers to execute… (no CVSS)
- [CVE-2007-1811](https://cve.now/CVE-2007-1811.md): SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 and earlier module for Xoops allows remote attackers to… (no CVSS)
- [CVE-2007-1812](https://cve.now/CVE-2007-1812.md): PHP remote file inclusion vulnerability in utilitaires/gestion\_sondage.php in BT-Sondage 112 allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2007-1813](https://cve.now/CVE-2007-1813.md): SQL injection vulnerability in display.php in the eCal 2.24 and earlier module for Xoops allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2007-1814](https://cve.now/CVE-2007-1814.md): SQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2007-1815](https://cve.now/CVE-2007-1815.md): SQL injection vulnerability in viewcat.php in the Library module for Xoops allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2007-1816](https://cve.now/CVE-2007-1816.md): SQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2007-1817](https://cve.now/CVE-2007-1817.md): SQL injection vulnerability in index.php in the Lykos Reviews (lykos\_reviews) 1.00 module for Xoops allows remote attackers to execute… (no CVSS)
- [CVE-2007-1818](https://cve.now/CVE-2007-1818.md): PHP remote file inclusion vulnerability in MOD\_forum\_fields\_parse.php in the Forum picture and META tags 1.7 module for phpBB allows… (no CVSS)
- [CVE-2007-1819](https://cve.now/CVE-2007-1819.md): Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality… (no CVSS)
- [CVE-2007-1820](https://cve.now/CVE-2007-1820.md): Nortel Networks CallPilot and Meridian Mail voicemail systems, when a mailbox has auto logon enabled, allow remote attackers to retrieve… (no CVSS)
- [CVE-2007-1821](https://cve.now/CVE-2007-1821.md): Sprint Nextel Sprint voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing… (no CVSS)
- [CVE-2007-1822](https://cve.now/CVE-2007-1822.md): Alcatel-Lucent Lucent Technologies voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by… (no CVSS)
- [CVE-2007-1823](https://cve.now/CVE-2007-1823.md): T-Mobile voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number… (no CVSS)
- [CVE-2007-1824](https://cve.now/CVE-2007-1824.md): Buffer overflow in the php\_stream\_filter\_create function in PHP 5 before 5.2.1 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2007-1825](https://cve.now/CVE-2007-1825.md): Buffer overflow in the imap\_mail\_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute… (no CVSS)
- [CVE-2007-1826](https://cve.now/CVE-2007-1826.md): Unspecified vulnerability in the IPSec Manager Service for Cisco Unified CallManager (CUCM) 5.0 before 5.0(4a)SU1 and Cisco Unified… (no CVSS)
- [CVE-2006-5820](https://cve.now/CVE-2006-5820.md): The LinkSBIcons method in the SuperBuddy ActiveX control (Sb.SuperBuddy.1) in America Online 9.0 Security Edition dereferences an… (no CVSS)
- [CVE-2007-1793](https://cve.now/CVE-2007-1793.md): SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to… (no CVSS)
- [CVE-2007-1794](https://cve.now/CVE-2007-1794.md): The Javascript engine in Mozilla 1.7 and earlier on Sun Solaris 8, 9, and 10 might allow remote attackers to execute arbitrary code via… (no CVSS)
- [CVE-2007-1795](https://cve.now/CVE-2007-1795.md): JCcorp URLshrink 1.3.1 allows remote attackers to execute arbitrary PHP code via the email address field in an HTML link. (no CVSS)
- [CVE-2007-1796](https://cve.now/CVE-2007-1796.md): Multiple unspecified vulnerabilities in JCcorp URLshrink before 1.3.2 have unspecified attack vectors and impact. (no CVSS)
- [CVE-2007-1797](https://cve.now/CVE-2007-1797.md): Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image… (no CVSS)
- [CVE-2007-1798](https://cve.now/CVE-2007-1798.md): Buffer overflow in the drmgr command in IBM AIX 5.2 and 5.3 allows local users to cause a denial of service (crash) and possibly execute… (no CVSS)
- [CVE-2007-1799](https://cve.now/CVE-2007-1799.md): Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2007-04-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.