# CVEs published 2007-01-03 30 CVEs were published on January 3, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2006-4575](https://cve.now/CVE-2006-4575.md): Multiple SQL injection vulnerabilities in The Address Book 1.04e allow remote attackers to execute arbitrary SQL commands via the (1) lastna (no CVSS) - [CVE-2006-4576](https://cve.now/CVE-2006-4576.md): Cross-site scripting (XSS) vulnerability in The Address Book 1.04e allows remote attackers to inject arbitrary web script or HTML by uploadi (no CVSS) - [CVE-2006-4577](https://cve.now/CVE-2006-4577.md): Multiple cross-site scripting (XSS) vulnerabilities in The Address Book 1.04e allow remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2006-4578](https://cve.now/CVE-2006-4578.md): export.php in The Address Book 1.04e writes username and password hash information into a publicly accessible file when dumping the MySQL da (no CVSS) - [CVE-2006-4579](https://cve.now/CVE-2006-4579.md): Directory traversal vulnerability in users.php in The Address Book 1.04e allows remote attackers to include arbitrary files via a .. (no CVSS) - [CVE-2006-4580](https://cve.now/CVE-2006-4580.md): register.php in The Address Book 1.04e allows remote attackers to bypass the "Allow User Self-Registration" setting and create arbitrary use (no CVSS) - [CVE-2006-4581](https://cve.now/CVE-2006-4581.md): Unrestricted file upload vulnerability in The Address Book 1.04e validates the Content-Type header but not the file extension, which allows (no CVSS) - [CVE-2006-4582](https://cve.now/CVE-2006-4582.md): Cross-site request forgery (CSRF) vulnerability in The Address Book 1.04e allows remote attackers to perform unauthorized actions as other u (no CVSS) - [CVE-2006-6488](https://cve.now/CVE-2006-6488.md): Stack-based buffer overflow in the DoModal function in the Dialog Wrapper Module ActiveX control (DlgWrapper.dll) before 8.4.166.0, as used (no CVSS) - [CVE-2007-0044](https://cve.now/CVE-2007-0044.md): Adobe Acrobat Reader Plugin before 8.0.0 for the Firefox, Internet Explorer, and Opera web browsers allows remote attackers to force the bro (no CVSS) - [CVE-2007-0045](https://cve.now/CVE-2007-0045.md): Multiple cross-site scripting (XSS) vulnerabilities in Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Ad (no CVSS) - [CVE-2007-0046](https://cve.now/CVE-2007-0046.md): Double free vulnerability in the Adobe Acrobat Reader Plugin before 8.0.0, as used in Mozilla Firefox 1.5.0.7, allows remote attackers to ex (no CVSS) - [CVE-2007-0047](https://cve.now/CVE-2007-0047.md): CRLF injection vulnerability in Adobe Acrobat Reader Plugin before 8.0.0, when used with the Microsoft.XMLHTTP ActiveX object in Internet Ex (no CVSS) - [CVE-2007-0048](https://cve.now/CVE-2007-0048.md): Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x (no CVSS) - [CVE-2006-6837](https://cve.now/CVE-2006-6837.md): Multiple stack-based buffer overflows in the (1) LoadTree, (2) ReadHeader, and (3) LoadXBOXTree functions in the ISO (iso\_wincmd) plugin 1.7 (no CVSS) - [CVE-2006-6838](https://cve.now/CVE-2006-6838.md): Rediff Bol Downloader ActiveX (OCX) control allows remote attackers to execute arbitrary files, and obtain sensitive information (usernames (no CVSS) - [CVE-2006-6839](https://cve.now/CVE-2006-6839.md): Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to "criteria for 'bad' redirection tar (no CVSS) - [CVE-2006-6840](https://cve.now/CVE-2006-6840.md): Unspecified vulnerability in phpBB before 2.0.22 has unknown impact and remote attack vectors related to a "negative start parameter." (no CVSS) - [CVE-2006-6841](https://cve.now/CVE-2006-6841.md): Certain forms in phpBB before 2.0.22 lack session checks, which has unknown impact and remote attack vectors. (no CVSS) - [CVE-2006-6842](https://cve.now/CVE-2006-6842.md): SQL injection vulnerability in admin/admin\_acronyms.php in the Acronym Mod 0.9.5 for phpBB2 Plus 1.53 allows remote attackers to execute arb (no CVSS) - [CVE-2006-6843](https://cve.now/CVE-2006-6843.md): PHP remote file inclusion vulnerability in the BE IT EasyPartner 0.0.9 beta component for Joomla! allows remote attackers to execute arbitra (no CVSS) - [CVE-2006-6844](https://cve.now/CVE-2006-6844.md): Cross-site scripting (XSS) vulnerability in the optional user comment module in CMS Made Simple 1.0.2 allows remote attackers to inject arbi (no CVSS) - [CVE-2006-6845](https://cve.now/CVE-2006-6845.md): Cross-site scripting (XSS) vulnerability in index.php in CMS Made Simple 1.0.2 allows remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2006-6846](https://cve.now/CVE-2006-6846.md): Multiple SQL injection vulnerabilities in While You Were Out (WYWO) InOut Board 1.0 allow remote attackers to execute arbitrary SQL commands (no CVSS) - [CVE-2006-6847](https://cve.now/CVE-2006-6847.md): An ActiveX control in ierpplug.dll for RealNetworks RealPlayer 10.5 allows remote attackers to cause a denial of service (Internet Explorer (no CVSS) - [CVE-2006-6848](https://cve.now/CVE-2006-6848.md): SQL injection vulnerability in admin.asp in ASPTicker 1.0 allows remote attackers to execute arbitrary SQL commands via the PATH\_INFO, possi (no CVSS) - [CVE-2006-6849](https://cve.now/CVE-2006-6849.md): administration/index.php in Cahier de texte (CDT) 2.2 does not properly exit when authentication fails, which allows remote attackers to per (no CVSS) - [CVE-2006-6850](https://cve.now/CVE-2006-6850.md): PHP remote file inclusion vulnerability in include.php in the Roster Module (character\_roster) in Shadowed Portal 5.7 allows remote attacker (no CVSS) - [CVE-2007-0016](https://cve.now/CVE-2007-0016.md): Stack-based buffer overflow in MoviePlay 4.76 allows remote attackers to execute arbitrary code via a long filename in a LST file. (no CVSS) - [CVE-2007-0017](https://cve.now/CVE-2007-0017.md): Multiple format string vulnerabilities in (1) the cdio\_log\_handler function in modules/access/cdda/access.c in the CDDA (libcdda\_plugin) plu (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-01-03 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.