# CVEs published 2007-12-12

17 CVEs were published on December 12, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6320](https://cve.now/CVE-2007-6320.md): Feature 4.7.x-dev and 5.x-dev before 20071206, a Drupal module, does not follow Drupal's Forms API submission model, which allows remote… (no CVSS)
- [CVE-2007-6321](https://cve.now/CVE-2007-6321.md): Cross-site scripting (XSS) vulnerability in RoundCube webmail 0.1rc2, 2007-12-09, and earlier versions, when using Internet Explorer… (no CVSS)
- [CVE-2007-0064](https://cve.now/CVE-2007-0064.md): Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft… (no CVSS)
- [CVE-2007-3039](https://cve.now/CVE-2007-3039.md): Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000… (no CVSS)
- [CVE-2007-3895](https://cve.now/CVE-2007-3895.md): Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a… (no CVSS)
- [CVE-2007-3901](https://cve.now/CVE-2007-3901.md): Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX… (no CVSS)
- [CVE-2007-3902](https://cve.now/CVE-2007-3902.md): Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote… (no CVSS)
- [CVE-2007-3903](https://cve.now/CVE-2007-3903.md): Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in… (no CVSS)
- [CVE-2007-5344](https://cve.now/CVE-2007-5344.md): Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via a crafted website using Javascript that… (no CVSS)
- [CVE-2007-5347](https://cve.now/CVE-2007-5347.md): Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via "unexpected method calls to HTML… (no CVSS)
- [CVE-2007-5350](https://cve.now/CVE-2007-5350.md): Unspecified vulnerability in the Windows Advanced Local Procedure Call (ALPC) in the kernel in Microsoft Windows Vista allows local users… (no CVSS)
- [CVE-2007-5351](https://cve.now/CVE-2007-5351.md): Unspecified vulnerability in Server Message Block Version 2 (SMBv2) signing support in Microsoft Windows Vista allows remote attackers to… (no CVSS)
- [CVE-2007-6314](https://cve.now/CVE-2007-6314.md): BarracudaDrive Web Server before 3.8 allows remote attackers to read the source code for web scripts by appending a (1) + (plus), (2) . (no CVSS)
- [CVE-2007-6315](https://cve.now/CVE-2007-6315.md): Group Chat in BarracudaDrive Web Server before 3.8 allows remote authenticated users to cause a denial of service (crash) via a HTTP… (no CVSS)
- [CVE-2007-6316](https://cve.now/CVE-2007-6316.md): Cross-site scripting (XSS) vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2007-6317](https://cve.now/CVE-2007-6317.md): Multiple directory traversal vulnerabilities in BarracudaDrive Web Server before 3.8 allow (1) remote attackers to read arbitrary files… (no CVSS)
- [CVE-2007-6318](https://cve.now/CVE-2007-6318.md): SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2007-12-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.