# CVEs published 2007-04-16 26 CVEs were published on April 16, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-1558](https://cve.now/CVE-2007-1558.md): The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use… (no CVSS) - [CVE-2007-2042](https://cve.now/CVE-2007-2042.md): Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite 1.0.6 and earlier module for Mambo allow… (no CVSS) - [CVE-2007-2043](https://cve.now/CVE-2007-2043.md): Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia (com\_mosmedia) 1.08 and earlier module for Mambo… (no CVSS) - [CVE-2007-2044](https://cve.now/CVE-2007-2044.md): PHP remote file inclusion vulnerability in mod\_weather.php in the Antonis Ventouris Weather module for Mambo and Joomla! allows remote… (no CVSS) - [CVE-2007-2045](https://cve.now/CVE-2007-2045.md): Unspecified vulnerability in the IP implementation in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (CPU… (no CVSS) - [CVE-2007-2046](https://cve.now/CVE-2007-2046.md): Multiple CRLF injection vulnerabilities in adclick.php in (a) Openads (phpAdsNew) 2.0.11 and earlier and (b) Openads for PostgreSQL… (no CVSS) - [CVE-2007-2047](https://cve.now/CVE-2007-2047.md): CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 (aka Max Media Manager, MMM) before 0.3.31-alpha-pr3 allows remote… (no CVSS) - [CVE-2007-2048](https://cve.now/CVE-2007-2048.md): Directory traversal vulnerability in /console in the Management Console in webMethods Glue 6.5.1 and earlier allows remote attackers to… (no CVSS) - [CVE-2007-2049](https://cve.now/CVE-2007-2049.md): Multiple PHP remote file inclusion vulnerabilities in the Calendar Module (com\_calendar) 1.5.5 for Mambo allow remote attackers to execute… (no CVSS) - [CVE-2007-2050](https://cve.now/CVE-2007-2050.md): Multiple directory traversal vulnerabilities in header.php in RicarGBooK 1.2.1 allow remote attackers to include and execute arbitrary… (no CVSS) - [CVE-2007-2051](https://cve.now/CVE-2007-2051.md): Buffer overflow in the parsecmd function in bftpd before 1.8 has unknown impact and attack vectors related to the confstr variable. (no CVSS) - [CVE-2007-2052](https://cve.now/CVE-2007-2052.md): Off-by-one error in the PyLocale\_strxfrm function in Modules/\_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be… (no CVSS) - [CVE-2007-1745](https://cve.now/CVE-2007-1745.md): The chm\_decompress\_stream function in libclamav/chmunpack.c in Clam AntiVirus (ClamAV) before 0.90.2 leaks file descriptors, which has… (no CVSS) - [CVE-2007-1997](https://cve.now/CVE-2007-1997.md): Integer signedness error in the (1) cab\_unstore and (2) cab\_extract functions in libclamav/cab.c in Clam AntiVirus (ClamAV) before 0.90.2… (no CVSS) - [CVE-2007-2031](https://cve.now/CVE-2007-2031.md): Buffer overflow in the HTTP proxy service for 3proxy 0.5 to 0.5.3g, and 0.6b-devel before 20070413, might allow remote attackers to… (no CVSS) - [CVE-2007-2032](https://cve.now/CVE-2007-2032.md): Cisco Wireless Control System (WCS) before 4.0.96.0 has a hard-coded FTP username and password for backup operations, which allows remote… (no CVSS) - [CVE-2007-2033](https://cve.now/CVE-2007-2033.md): Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.81.0 allows remote authenticated users to read any… (no CVSS) - [CVE-2007-2034](https://cve.now/CVE-2007-2034.md): Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.87.0 allows remote authenticated users to gain the privileges… (no CVSS) - [CVE-2007-2035](https://cve.now/CVE-2007-2035.md): Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web root with insufficient access control… (no CVSS) - [CVE-2007-2036](https://cve.now/CVE-2007-2036.md): The SNMP implementation in the Cisco Wireless LAN Controller (WLC) before 20070419 uses the default read-only community public, and the… (no CVSS) - [CVE-2007-2037](https://cve.now/CVE-2007-2037.md): Cisco Wireless LAN Controller (WLC) before 3.2.116.21, and 4.0.x before 4.0.155.0, allows remote attackers on a local network to cause a… (no CVSS) - [CVE-2007-2038](https://cve.now/CVE-2007-2038.md): The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.193.5, 4.0.x before 4.0.206.0, and 4.1.x allows… (no CVSS) - [CVE-2007-2039](https://cve.now/CVE-2007-2039.md): The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.171.5, 4.0.x before 4.0.206.0, and 4.1.x allows… (no CVSS) - [CVE-2007-2040](https://cve.now/CVE-2007-2040.md): Cisco Aironet 1000 Series and 1500 Series Lightweight Access Points before 3.2.185.0, and 4.0.x before 4.0.206.0, have a hard-coded… (no CVSS) - [CVE-2007-2041](https://cve.now/CVE-2007-2041.md): Cisco Wireless LAN Controller (WLC) before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs… (no CVSS) - [CVE-2007-2030](https://cve.now/CVE-2007-2030.md): lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2007-04-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.