# CVEs published 2007-09-04 22 CVEs were published on September 4, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-4653](https://cve.now/CVE-2007-4653.md): SQL injection vulnerability in links.php in the Links MOD 1.2.2 and earlier for phpBB 2.0.22 and earlier allows remote attackers to… (no CVSS) - [CVE-2007-4654](https://cve.now/CVE-2007-4654.md): Unspecified vulnerability in SSHield 1.6.1 with OpenSSH 3.0.2p1 on Cisco WebNS 8.20.0.1 on Cisco Content Services Switch (CSS) series… (no CVSS) - [CVE-2007-4655](https://cve.now/CVE-2007-4655.md): Multiple directory traversal vulnerabilities in CGI RESCUE Shopping Basket Professional 7.51 and earlier allow remote attackers to list… (no CVSS) - [CVE-2007-4656](https://cve.now/CVE-2007-4656.md): backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line… (no CVSS) - [CVE-2007-4657](https://cve.now/CVE-2007-4657.md): Multiple integer overflows in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to obtain sensitive information (memory… (no CVSS) - [CVE-2007-4658](https://cve.now/CVE-2007-4658.md): The money\_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, which has unknown… (no CVSS) - [CVE-2007-4659](https://cve.now/CVE-2007-4659.md): The zend\_alter\_ini\_entry function in PHP before 5.2.4 does not properly handle an interruption to the flow of execution triggered by a… (no CVSS) - [CVE-2007-4660](https://cve.now/CVE-2007-4660.md): Unspecified vulnerability in the chunk\_split function in PHP before 5.2.4 has unknown impact and attack vectors, related to an incorrect… (no CVSS) - [CVE-2007-4661](https://cve.now/CVE-2007-4661.md): The chunk\_split function in string.c in PHP 5.2.3 does not properly calculate the needed buffer size due to precision loss when performing… (no CVSS) - [CVE-2007-4662](https://cve.now/CVE-2007-4662.md): Buffer overflow in the php\_openssl\_make\_REQ function in PHP before 5.2.4 has unknown impact and attack vectors. (no CVSS) - [CVE-2007-4663](https://cve.now/CVE-2007-4663.md): Directory traversal vulnerability in PHP before 5.2.4 allows attackers to bypass open\_basedir restrictions via unspecified vectors… (no CVSS) - [CVE-2007-4664](https://cve.now/CVE-2007-4664.md): Unspecified vulnerability in the (1) attach database and (2) create database functionality in Firebird before 2.0.2, when a filename… (no CVSS) - [CVE-2007-4665](https://cve.now/CVE-2007-4665.md): Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service (daemon crash) via… (no CVSS) - [CVE-2007-4666](https://cve.now/CVE-2007-4666.md): Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote… (no CVSS) - [CVE-2007-4667](https://cve.now/CVE-2007-4667.md): Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149. (no CVSS) - [CVE-2007-4668](https://cve.now/CVE-2007-4668.md): Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files… (no CVSS) - [CVE-2007-4669](https://cve.now/CVE-2007-4669.md): The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log… (no CVSS) - [CVE-2007-4652](https://cve.now/CVE-2007-4652.md): The session extension in PHP before 5.2.4 might allow local users to bypass open\_basedir restrictions via a session file that is a symlink. (no CVSS) - [CVE-2007-3996](https://cve.now/CVE-2007-3996.md): Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and… (no CVSS) - [CVE-2007-3997](https://cve.now/CVE-2007-3997.md): The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass safe\_mode and… (no CVSS) - [CVE-2007-3998](https://cve.now/CVE-2007-3998.md): The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, which allows remote… (no CVSS) - [CVE-2007-4650](https://cve.now/CVE-2007-4650.md): Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to (1) rename items, (2) read and modify item properties, or… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2007-09-04 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.