# CVEs published 2007-01-01

11 CVEs were published on January 1, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2006-6827](https://cve.now/CVE-2006-6827.md): Flash8b.ocx in Macromedia Flash 8 allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via a long string in the (no CVSS)
- [CVE-2006-6828](https://cve.now/CVE-2006-6828.md): Multiple SQL injection vulnerabilities in Efkan Forum 1.0 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the g (no CVSS)
- [CVE-2006-6829](https://cve.now/CVE-2006-6829.md): Efkan Forum 1.0 and earlier store sensitive information under the web root with insufficient access control, which allows remote attackers t (no CVSS)
- [CVE-2006-6830](https://cve.now/CVE-2006-6830.md): PHP remote file inclusion vulnerability in b2verifauth.php in b2 Blog 0.5 and earlier allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2006-6831](https://cve.now/CVE-2006-6831.md): SQL injection vulnerability in faqDsp.asp in aFAQ 1.0 allows remote attackers to execute arbitrary SQL commands via the catcode parameter. (no CVSS)
- [CVE-2006-6832](https://cve.now/CVE-2006-6832.md): Cross-site scripting (XSS) vulnerability in Joomla! before 1.0.12 allows remote attackers to inject arbitrary web script or HTML via unspeci (no CVSS)
- [CVE-2006-6833](https://cve.now/CVE-2006-6833.md): com\_categories in Joomla! before 1.0.12 does not validate input, which has unknown impact and remote attack vectors. (no CVSS)
- [CVE-2006-6834](https://cve.now/CVE-2006-6834.md): Multiple unspecified vulnerabilities in Joomla! before 1.0.12 have unknown impact and attack vectors related to (1) "unneeded legacy functio (no CVSS)
- [CVE-2006-6835](https://cve.now/CVE-2006-6835.md): SQL injection vulnerability in Journal.inc.php in Neocrome Land Down Under (LDU) 8.x and earlier allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2006-6836](https://cve.now/CVE-2006-6836.md): Multiple unspecified vulnerabilities in osp-cert in IBM OS/400 V5R3M0 have unspecified impact and attack vectors, related to ASN.1 parsing. (no CVSS)
- [CVE-2007-0015](https://cve.now/CVE-2007-0015.md): Buffer overflow in Apple QuickTime 7.1.3 allows remote attackers to execute arbitrary code via a long rtsp:// URI. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-01-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.