# CVEs published 2007-09-06 21 CVEs were published on September 6, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-3913](https://cve.now/CVE-2007-3913.md): SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. (no CVSS) - [CVE-2007-4472](https://cve.now/CVE-2007-4472.md): Multiple buffer overflows in the Broderbund Expressit 3DGreetings Player ActiveX control could allow remote attackers to execute arbitrary… (no CVSS) - [CVE-2007-4743](https://cve.now/CVE-2007-4743.md): The original patch for CVE-2007-3999 in svc\_auth\_gss.c in the RPCSEC\_GSS RPC library in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used… (no CVSS) - [CVE-2007-4744](https://cve.now/CVE-2007-4744.md): PHP remote file inclusion vulnerability in environment.php in AnyInventory 1.9.1 and 2.0, when register\_globals is enabled, allows remote… (no CVSS) - [CVE-2007-4745](https://cve.now/CVE-2007-4745.md): Multiple cross-site scripting (XSS) vulnerabilities in the AkoBook 3.42 and earlier component (com\_akobook) for Mambo allow remote… (no CVSS) - [CVE-2007-4746](https://cve.now/CVE-2007-4746.md): The Cisco Video Surveillance IP Gateway Encoder/Decoder (Standalone and Module) firmware 1.8.1 and earlier, Video Surveillance SP/ISP… (no CVSS) - [CVE-2007-4747](https://cve.now/CVE-2007-4747.md): The telnet service in Cisco Video Surveillance IP Gateway Encoder/Decoder (Standalone and Module) firmware 1.8.1 and earlier, Video… (no CVSS) - [CVE-2007-4748](https://cve.now/CVE-2007-4748.md): Buffer overflow in the PowerPlayer.dll ActiveX control in PPStream 2.0.1.3829 allows remote attackers to execute arbitrary code via a long… (no CVSS) - [CVE-2007-3752](https://cve.now/CVE-2007-3752.md): Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service (application crash) or execute… (no CVSS) - [CVE-2004-2685](https://cve.now/CVE-2004-2685.md): Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long address in a ping (p)… (no CVSS) - [CVE-2007-4732](https://cve.now/CVE-2007-4732.md): Unspecified vulnerability in the strfreectty function in the Special File System (SPECFS) in Sun Solaris 8 through 10 allows local users… (no CVSS) - [CVE-2007-4733](https://cve.now/CVE-2007-4733.md): The Aztech DSL600EU router, when WAN access to the web interface is disabled, does not properly block inbound traffic on TCP port 80… (no CVSS) - [CVE-2007-4734](https://cve.now/CVE-2007-4734.md): Buffer overflow in Ots Labs OTSTurntables 1.00 allows user-assisted remote attackers to execute arbitrary code via a long file path in an… (no CVSS) - [CVE-2007-4735](https://cve.now/CVE-2007-4735.md): Buffer overflow in Next Generation Software Virtual DJ (VDJ) 5.0 allows user-assisted remote attackers to execute arbitrary code via a… (no CVSS) - [CVE-2007-4736](https://cve.now/CVE-2007-4736.md): SQL injection vulnerability in category.php in CartKeeper CKGold Shopping Cart 2.0 allows remote attackers to execute arbitrary SQL… (no CVSS) - [CVE-2007-4737](https://cve.now/CVE-2007-4737.md): Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute… (no CVSS) - [CVE-2007-4738](https://cve.now/CVE-2007-4738.md): Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute… (no CVSS) - [CVE-2007-4739](https://cve.now/CVE-2007-4739.md): reprepro 1.3.0 through 2.2.3 does not properly verify signatures when updating repositories, which allows remote attackers to construct… (no CVSS) - [CVE-2007-4740](https://cve.now/CVE-2007-4740.md): The HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 in Telecom Italy Alice Messenger allows remote… (no CVSS) - [CVE-2007-4741](https://cve.now/CVE-2007-4741.md): Cross-site scripting (XSS) vulnerability in admin/adminusers.php in Claroline before 1.8.6 allows remote authenticated administrators to… (no CVSS) - [CVE-2007-4742](https://cve.now/CVE-2007-4742.md): Claroline before 1.8.6 allows remote authenticated administrators to obtain sensitive information via an invalid value in the sort… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2007-09-06 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.