# CVEs published 2007-04-06

26 CVEs were published on April 6, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-0956](https://cve.now/CVE-2007-0956.md): The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a… (no CVSS)
- [CVE-2007-0957](https://cve.now/CVE-2007-0957.md): Stack-based buffer overflow in the krb5\_klog\_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind)… (no CVSS)
- [CVE-2007-1003](https://cve.now/CVE-2007-1003.md): Integer overflow in ALLOCATE\_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver)… (no CVSS)
- [CVE-2007-1216](https://cve.now/CVE-2007-1216.md): Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration daemon (kadmind) in… (no CVSS)
- [CVE-2007-1351](https://cve.now/CVE-2007-1351.md): Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier… (no CVSS)
- [CVE-2007-1352](https://cve.now/CVE-2007-1352.md): Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute… (no CVSS)
- [CVE-2007-1680](https://cve.now/CVE-2007-1680.md): Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control (yacscom.dll) in Yahoo! Messenger… (no CVSS)
- [CVE-2007-1684](https://cve.now/CVE-2007-1684.md): The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute… (no CVSS)
- [CVE-2007-1882](https://cve.now/CVE-2007-1882.md): qcbin/servlet/tdservlet/TDAPI\_GeneralWebTreatment in HP Mercury Quality Center 9.0 build 9.1.0.4352 allows remote authenticated users to… (no CVSS)
- [CVE-2007-1883](https://cve.now/CVE-2007-1883.md): PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to read arbitrary memory locations via an interruption… (no CVSS)
- [CVE-2007-1884](https://cve.now/CVE-2007-1884.md): Multiple integer signedness errors in the printf function family in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 on 64 bit machines allow… (no CVSS)
- [CVE-2007-1885](https://cve.now/CVE-2007-1885.md): Integer overflow in the str\_replace function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute… (no CVSS)
- [CVE-2007-1886](https://cve.now/CVE-2007-1886.md): Integer overflow in the str\_replace function in PHP 4.4.5 and PHP 5.2.1 allows context-dependent attackers to have an unknown impact via a… (no CVSS)
- [CVE-2007-1887](https://cve.now/CVE-2007-1887.md): Buffer overflow in the sqlite\_decode\_binary function in the bundled sqlite library in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows… (no CVSS)
- [CVE-2007-1888](https://cve.now/CVE-2007-1888.md): Buffer overflow in the sqlite\_decode\_binary function in src/encode.c in SQLite 2, as used by PHP 4.x through 5.x and other applications… (no CVSS)
- [CVE-2007-1889](https://cve.now/CVE-2007-1889.md): Integer signedness error in the \_zend\_mm\_alloc\_int function in the Zend Memory Manager in PHP 5.2.0 allows remote attackers to execute… (no CVSS)
- [CVE-2007-1890](https://cve.now/CVE-2007-1890.md): Integer overflow in the msg\_receive function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1, on FreeBSD and possibly other platforms, allows… (no CVSS)
- [CVE-2007-0445](https://cve.now/CVE-2007-0445.md): Heap-based buffer overflow in the arj.ppl module in the OnDemand Scanner in Kaspersky Anti-Virus, Anti-Virus for Workstations, and… (no CVSS)
- [CVE-2007-1001](https://cve.now/CVE-2007-1001.md): Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6… (no CVSS)
- [CVE-2007-1112](https://cve.now/CVE-2007-1112.md): Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the (a) AXKLPROD60Lib.KAV60Info (AxKLProd60.dll) and (b)… (no CVSS)
- [CVE-2007-1270](https://cve.now/CVE-2007-1270.md): Double free vulnerability in VMware ESX Server 3.0.0 and 3.0.1 allows attackers to cause a denial of service (crash), obtain sensitive… (no CVSS)
- [CVE-2007-1271](https://cve.now/CVE-2007-1271.md): Buffer overflow in VMware ESX Server 3.0.0 and 3.0.1 might allow attackers to gain privileges or cause a denial of service (application… (no CVSS)
- [CVE-2007-1878](https://cve.now/CVE-2007-1878.md): Cross-zone scripting vulnerability in the DOM templates (domplates) used by the console.log function in the Firebug extension before 1.03… (no CVSS)
- [CVE-2007-1879](https://cve.now/CVE-2007-1879.md): The StartUploading function in KL.SysInfo ActiveX control (AxKLSysInfo.dll) in Kaspersky Anti-Virus 6.0 and Internet Security 6.0 before… (no CVSS)
- [CVE-2007-1880](https://cve.now/CVE-2007-1880.md): Integer overflow in the \_NtSetValueKey function in klif.sys in Kaspersky Anti-Virus, Anti-Virus for Workstations, Anti-Virus for File… (no CVSS)
- [CVE-2007-1881](https://cve.now/CVE-2007-1881.md): Unspecified vulnerability in KLIF (klif.sys) in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2007-04-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.