# CVEs published 2007-07-27

20 CVEs were published on July 27, 2007: 2 critical, 1 high. Days are UTC.

- [CVE-2007-3532](https://cve.now/CVE-2007-3532.md): NVIDIA drivers (nvidia-drivers) before 1.0.7185, 1.0.9639, and 100.14.11, as used in Gentoo Linux and possibly other distributions… (no CVSS)
- [CVE-2007-4031](https://cve.now/CVE-2007-4031.md): Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete… (no CVSS)
- [CVE-2007-4032](https://cve.now/CVE-2007-4032.md): Buffer overflow in CrystalPlayer Pro 1.98 allows user-assisted remote attackers to execute arbitrary code via a long string in a .mls… (no CVSS)
- [CVE-2007-4033](https://cve.now/CVE-2007-4033.md): Buffer overflow in the intT1\_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute… (no CVSS)
- [CVE-2007-4034](https://cve.now/CVE-2007-4034.md): Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before 2007.7.13.3… (no CVSS)
- [CVE-2007-4035](https://cve.now/CVE-2007-4035.md): Guidance Software EnCase does not properly handle (1) certain malformed MBR partition tables with many entries, which allows remote… (no CVSS)
- [CVE-2007-4036](https://cve.now/CVE-2007-4036.md): Guidance Software EnCase allows user-assisted remote attackers to cause a denial of service via (1) a corrupted Microsoft Exchange… (no CVSS)
- [CVE-2007-4037](https://cve.now/CVE-2007-4037.md): Guidance Software EnCase allows user-assisted attackers to trigger a buffer over-read and application crash via a malformed NTFS… (no CVSS)
- [CVE-2007-4038](https://cve.now/CVE-2007-4038.md): Argument injection vulnerability in Mozilla Firefox before 2.0.0.5, when running on systems with Thunderbird 1.5 installed and certain… (no CVSS)
- [CVE-2007-4039](https://cve.now/CVE-2007-4039.md): Argument injection vulnerability involving Mozilla, when certain URIs are registered, allows remote attackers to conduct cross-browser… (CVSS 9.8)
- [CVE-2007-4040](https://cve.now/CVE-2007-4040.md): Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, allows remote… (CVSS 8.8)
- [CVE-2007-4041](https://cve.now/CVE-2007-4041.md): Multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and 3.0alpha allow remote attackers to execute arbitrary commands… (no CVSS)
- [CVE-2007-4042](https://cve.now/CVE-2007-4042.md): Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary commands via a NULL byte… (no CVSS)
- [CVE-2007-4043](https://cve.now/CVE-2007-4043.md): file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) before 4.6.3 allows remote attackers to bypass… (CVSS 9.8)
- [CVE-2007-4045](https://cve.now/CVE-2007-4045.md): The CUPS service, as used in SUSE Linux before 20070720 and other Linux distributions, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2007-4046](https://cve.now/CVE-2007-4046.md): SQL injection vulnerability in index.php in the Pony Gallery (com\_ponygallery) 1.5 and earlier component for Joomla! allows remote… (no CVSS)
- [CVE-2007-4047](https://cve.now/CVE-2007-4047.md): geoBlog (aka BitDamaged) 1 does not require authentication for (1) deletecomment.php, (2) deleteblog.php, and (3) listcomment.php in… (no CVSS)
- [CVE-2007-1354](https://cve.now/CVE-2007-1354.md): The Access Control functionality (JMXOpsAccessControlFilter) in JMX Console in JBoss Application Server 4.0.2 and 4.0.5 before 20070416… (no CVSS)
- [CVE-2007-2874](https://cve.now/CVE-2007-2874.md): Buffer overflow in the wpa\_printf function in the debugging code in wpa\_supplicant in the Fedora NetworkManager package before 0.6.5-3.fc7… (no CVSS)
- [CVE-2007-3105](https://cve.now/CVE-2007-3105.md): Stack-based buffer overflow in the random number generator (RNG) implementation in the Linux kernel before 2.6.22 might allow local root… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2007-07-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.