# CVEs published 2007-07-10

48 CVEs were published on July 10, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-0040](https://cve.now/CVE-2007-0040.md): The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4, Server 2003 SP1 and SP2, Server 2003 x64 Edition and… (no CVSS)
- [CVE-2007-0041](https://cve.now/CVE-2007-0041.md): The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers… (no CVSS)
- [CVE-2007-0042](https://cve.now/CVE-2007-0042.md): Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows… (no CVSS)
- [CVE-2007-0043](https://cve.now/CVE-2007-0043.md): The Just In Time (JIT) Compiler service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows… (no CVSS)
- [CVE-2007-1754](https://cve.now/CVE-2007-1754.md): PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows… (no CVSS)
- [CVE-2007-1756](https://cve.now/CVE-2007-1756.md): Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and Office Excel 2007 does not properly validate version information, which… (no CVSS)
- [CVE-2007-3028](https://cve.now/CVE-2007-3028.md): The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4 does not properly check "the number of convertible… (no CVSS)
- [CVE-2007-3029](https://cve.now/CVE-2007-3029.md): Unspecified vulnerability in Microsoft Excel 2002 SP3 and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a… (no CVSS)
- [CVE-2007-3030](https://cve.now/CVE-2007-3030.md): Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a… (no CVSS)
- [CVE-2007-3038](https://cve.now/CVE-2007-3038.md): The Teredo interface in Microsoft Windows Vista and Vista x64 Edition does not properly handle certain network traffic, which allows… (no CVSS)
- [CVE-2007-3107](https://cve.now/CVE-2007-3107.md): The signal handling in the Linux kernel before 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to… (no CVSS)
- [CVE-2007-3655](https://cve.now/CVE-2007-3655.md): Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows… (no CVSS)
- [CVE-2007-3656](https://cve.now/CVE-2007-3656.md): Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which… (no CVSS)
- [CVE-2007-3657](https://cve.now/CVE-2007-3657.md): Mozilla Firefox 2.0.0.4 allows remote attackers to cause a denial of service by opening multiple tabs in a popup window. (no CVSS)
- [CVE-2007-3658](https://cve.now/CVE-2007-3658.md): Unspecified vulnerability in Microsoft Register Server (REGSVR) allows attackers to cause a denial of service via a crafted DLL library. (no CVSS)
- [CVE-2007-3659](https://cve.now/CVE-2007-3659.md): Buffer overflow in the doBrowserAction function in FreeWRL 1.19.3 allows local users to execute arbitrary code via a crafted BROWSER… (no CVSS)
- [CVE-2007-3660](https://cve.now/CVE-2007-3660.md): The Nonnoi ASP/Barcode ActiveX control (nonnoi\_ASPBarcode.dll) allows remote attackers to overwrite arbitrary files via an argument to the… (no CVSS)
- [CVE-2007-3661](https://cve.now/CVE-2007-3661.md): Eltima Software Virtual Serial Port (VSPAX) ActiveX control (VSPort.DLL) allows remote attackers to cause a denial of service via certain… (no CVSS)
- [CVE-2007-3662](https://cve.now/CVE-2007-3662.md): Media Player Classic (MPC) 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code… (no CVSS)
- [CVE-2007-3663](https://cve.now/CVE-2007-3663.md): Divide-by-zero error in Media Player Classic (MPC) 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly… (no CVSS)
- [CVE-2007-3664](https://cve.now/CVE-2007-3664.md): Multiple unspecified vulnerabilities in Eltima Software RunService ActiveX control (RunService.dll) allow remote attackers to cause a… (no CVSS)
- [CVE-2007-3665](https://cve.now/CVE-2007-3665.md): Multiple unspecified vulnerabilities in FileBackup.DLL in Symantec Norton Ghost 12.0 allow remote attackers to cause a denial of service… (no CVSS)
- [CVE-2007-3666](https://cve.now/CVE-2007-3666.md): Buffer overflow in RemoteCommand.DLL in Symantec Norton Ghost 12.0 allows remote attackers to execute arbitrary code via the Connect… (no CVSS)
- [CVE-2007-3667](https://cve.now/CVE-2007-3667.md): Unspecified vulnerability in EXCLEXPT.DLL in ActiveReportsExcelReport allows remote attackers to cause a denial of service via the DDRow… (no CVSS)
- [CVE-2007-3668](https://cve.now/CVE-2007-3668.md): Multiple unspecified vulnerabilities in NMSDVDXU.DLL in NuMedia NMSDVDX allow remote attackers to cause a denial of service via… (no CVSS)
- [CVE-2007-3669](https://cve.now/CVE-2007-3669.md): Multiple unspecified vulnerabilities in the Innovasys DockStudioXP InnovaDSXP2.OCX ActiveX Control have unspecified attack vectors and… (no CVSS)
- [CVE-2007-3670](https://cve.now/CVE-2007-3670.md): Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs… (no CVSS)
- [CVE-2007-3671](https://cve.now/CVE-2007-3671.md): Unspecified vulnerability in the kernel in Microsoft Windows Vista has unspecified remote attack vectors and impact, as shown in the "0day… (no CVSS)
- [CVE-2007-3672](https://cve.now/CVE-2007-3672.md): Cross-site scripting (XSS) vulnerability in ecrire/tools.php in DotClear 1.2.6 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2006-4519](https://cve.now/CVE-2006-4519.md): Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary… (no CVSS)
- [CVE-2007-3646](https://cve.now/CVE-2007-3646.md): SQL injection vulnerability in index.php in FlashGameScript 1.7 and earlier allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2007-3647](https://cve.now/CVE-2007-3647.md): The isloggedin function in Php/login.inc.php in phpTrafficA 1.4.3 and earlier allows remote attackers to bypass authentication and obtain… (no CVSS)
- [CVE-2007-3648](https://cve.now/CVE-2007-3648.md): SQL injection vulnerability in Webmatic before 2.6.2, and possibly other versions before 2.7, allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2007-3649](https://cve.now/CVE-2007-3649.md): Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard (HP) Digital Imaging… (no CVSS)
- [CVE-2007-3642](https://cve.now/CVE-2007-3642.md): The decode\_choice function in net/netfilter/nf\_conntrack\_h323\_asn1.c in the Linux kernel before 2.6.20.15, 2.6.21.x before 2.6.21.6, and… (no CVSS)
- [CVE-2007-3643](https://cve.now/CVE-2007-3643.md): admin/index.php in AV Arcade 2.1b grants administrative privileges when the ava\_userid cookie value is 1, which allows remote attackers to… (no CVSS)
- [CVE-2006-7220](https://cve.now/CVE-2006-7220.md): Unspecified vulnerability in SAP SAPLPD and SAPSPRINT allows remote attackers to cause a denial of service (application crash) via a… (no CVSS)
- [CVE-2007-3630](https://cve.now/CVE-2007-3630.md): changePW.php in AV Tutorial Script (avtutorial) 1.0 does not require authentication or knowledge of an old password for password changes… (no CVSS)
- [CVE-2007-3631](https://cve.now/CVE-2007-3631.md): SQL injection vulnerability in index.php in GameSiteScript (gss) 3.1 and earlier allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2007-3632](https://cve.now/CVE-2007-3632.md): Multiple PHP remote file inclusion vulnerabilities in LimeSurvey (aka PHPSurveyor) 1.49RC2 allow remote attackers to execute arbitrary PHP… (no CVSS)
- [CVE-2007-3633](https://cve.now/CVE-2007-3633.md): Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 allows remote… (no CVSS)
- [CVE-2007-3634](https://cve.now/CVE-2007-3634.md): Unspecified vulnerability in the G/PGP (GPG) Plugin 2.0 for Squirrelmail 1.4.10a allows remote authenticated users to execute arbitrary… (no CVSS)
- [CVE-2007-3635](https://cve.now/CVE-2007-3635.md): Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin before 2.1 for Squirrelmail might allow "local authenticated users" to… (no CVSS)
- [CVE-2007-3636](https://cve.now/CVE-2007-3636.md): Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin 2.1 for Squirrelmail allow remote attackers to execute arbitrary commands… (no CVSS)
- [CVE-2007-3637](https://cve.now/CVE-2007-3637.md): SQL injection vulnerability in MKPortal 1.1.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka… (no CVSS)
- [CVE-2007-3638](https://cve.now/CVE-2007-3638.md): Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users, who are listed in an address book, to execute… (no CVSS)
- [CVE-2007-3639](https://cve.now/CVE-2007-3639.md): WordPress before 2.2.2 allows remote attackers to redirect visitors to other websites and potentially obtain sensitive information via (1)… (no CVSS)
- [CVE-2007-3640](https://cve.now/CVE-2007-3640.md): Adobe Integrated Runtime (AIR, aka Apollo) allows context-dependent attackers to modify arbitrary files within an executing .air file… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2007-07-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.