# CVEs published 2007-05-18

12 CVEs were published on May 18, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-2757](https://cve.now/CVE-2007-2757.md): Multiple cross-site scripting (XSS) vulnerabilities in Redoable 1.2 allow remote attackers to inject arbitrary web script or HTML via the… (no CVSS)
- [CVE-2007-2758](https://cve.now/CVE-2007-2758.md): Multiple buffer overflows in WinImage 8.0.8000 allow user-assisted remote attackers to execute arbitrary code via a FAT image that… (no CVSS)
- [CVE-2007-2759](https://cve.now/CVE-2007-2759.md): Multiple SQL injection vulnerabilities in the insert function in the ValuePreference class (grid/ed/ValuePreference.java) in Adempiere… (no CVSS)
- [CVE-2007-2760](https://cve.now/CVE-2007-2760.md): The canUpdate function in model/MRole.java in Adempiere before 3.1.6 does not properly validate user roles, which allows remote… (no CVSS)
- [CVE-2007-2761](https://cve.now/CVE-2007-2761.md): Stack-based buffer overflow in MagicISO 5.4 build 239 and earlier allows remote attackers to execute arbitrary code via a long filename in… (no CVSS)
- [CVE-2007-2762](https://cve.now/CVE-2007-2762.md): Multiple PHP remote file inclusion vulnerabilities in Build it Fast (bif3) 0.4.1 allow remote attackers to execute arbitrary PHP code via… (no CVSS)
- [CVE-2007-2763](https://cve.now/CVE-2007-2763.md): Buffer overflow in the UnlockSupport function in the LockModules subsystem in a certain ActiveX control in ltmm15.dll in Sienzo Digital… (no CVSS)
- [CVE-2007-2764](https://cve.now/CVE-2007-2764.md): The embedded Linux kernel in certain Sun-Brocade SilkWorm switches before 20070516 does not properly handle a situation in which a… (no CVSS)
- [CVE-2007-2765](https://cve.now/CVE-2007-2765.md): blockhosts.py in BlockHosts before 2.0.3 does not properly parse daemon log files, which allows remote attackers to add arbitrary deny… (no CVSS)
- [CVE-2007-2766](https://cve.now/CVE-2007-2766.md): lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local… (no CVSS)
- [CVE-2007-2682](https://cve.now/CVE-2007-2682.md): The installer for Adobe Version Cue CS3 Server on Apple Mac OS X, as used in Adobe Creative Suite 3 (CS3), does not re-enable the personal… (no CVSS)
- [CVE-2007-2756](https://cve.now/CVE-2007-2756.md): The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2007-05-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.