# CVEs published 2007-01-08 21 CVEs were published on January 8, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2006-4097](https://cve.now/CVE-2006-4097.md): Multiple unspecified vulnerabilities in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solu (no CVSS) - [CVE-2006-4098](https://cve.now/CVE-2006-4098.md): Stack-based buffer overflow in the CSRadius service in Cisco Secure Access Control Server (ACS) for Windows before 4.1 and ACS Solution Engi (no CVSS) - [CVE-2006-6893](https://cve.now/CVE-2006-6893.md): Tor allows remote attackers to discover the IP address of a hidden service by accessing this service at a high rate, thereby changing the se (no CVSS) - [CVE-2006-6894](https://cve.now/CVE-2006-6894.md): Multiple unspecified vulnerabilities in SPINE before 1.2 have unknown impact and attack vectors, related to (1) "Placeholders in database ha (no CVSS) - [CVE-2006-6895](https://cve.now/CVE-2006-6895.md): The Bluetooth stack in the Sony Ericsson T60 does not properly implement "Limited discoverable" mode, which allows remote attackers to obtai (no CVSS) - [CVE-2006-6896](https://cve.now/CVE-2006-6896.md): The Bluetooth stack in the Plantronic Headset does not properly implement Non-pairable mode, which allows remote attackers to conduct unauth (no CVSS) - [CVE-2006-6897](https://cve.now/CVE-2006-6897.md): Directory traversal vulnerability in Widcomm Bluetooth for Windows (BTW) 3.0.1.905 allows remote attackers to conduct unauthorized file oper (no CVSS) - [CVE-2006-6898](https://cve.now/CVE-2006-6898.md): Widcomm Bluetooth for Windows (BTW) before 4.0.1.1500 allows remote attackers to listen to and record conversations, aka the CarWhisperer at (no CVSS) - [CVE-2006-6899](https://cve.now/CVE-2006-6899.md): hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard Human Interface Device ( (no CVSS) - [CVE-2006-6900](https://cve.now/CVE-2006-6900.md): Unspecified vulnerability in the Bluetooth stack in Apple Mac OS 10.4 has unknown impact and attack vectors, related to an "implementation b (no CVSS) - [CVE-2006-6901](https://cve.now/CVE-2006-6901.md): Unspecified vulnerability in the Bluetooth stack in Microsoft Windows allows remote attackers to gain administrative access (aka Remote Root (no CVSS) - [CVE-2006-6902](https://cve.now/CVE-2006-6902.md): Unspecified vulnerability in the Bluetooth stack in Microsoft Windows Mobile Pocket PC edition allows remote attackers to gain administrativ (no CVSS) - [CVE-2006-6903](https://cve.now/CVE-2006-6903.md): Unspecified vulnerability in the Toshiba Bluetooth stack allows remote attackers to gain administrative access (aka Remote Root) via unspeci (no CVSS) - [CVE-2006-6904](https://cve.now/CVE-2006-6904.md): Unspecified vulnerability in the Broadcom Bluetooth stack allows remote attackers to gain administrative access (aka Remote Root) via unspec (no CVSS) - [CVE-2006-6905](https://cve.now/CVE-2006-6905.md): Unspecified vulnerability in the Widcomm Bluetooth stack allows remote attackers to gain administrative access (aka Remote Root) via unspeci (no CVSS) - [CVE-2006-6906](https://cve.now/CVE-2006-6906.md): Unspecified vulnerability in the Bluetooth stack on Mac OS 10.4.7 and earlier has unknown impact and local attack vectors, related to "Mach (no CVSS) - [CVE-2006-6907](https://cve.now/CVE-2006-6907.md): Unspecified vulnerability in the Bluesoil Bluetooth stack has unknown impact and attack vectors. (no CVSS) - [CVE-2006-6908](https://cve.now/CVE-2006-6908.md): Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and earlier on Windows, W (no CVSS) - [CVE-2007-0099](https://cve.now/CVE-2007-0099.md): Race condition in the msxml3 module in Microsoft XML Core Services 3.0, as used in Internet Explorer 6 and other applications, allows remote (no CVSS) - [CVE-2007-0100](https://cve.now/CVE-2007-0100.md): The Perforce client does not restrict the set of files that it overwrites upon receiving a request from the server, which allows remote atta (no CVSS) - [CVE-2007-0101](https://cve.now/CVE-2007-0101.md): Cross-site request forgery (CSRF) vulnerability in SPINE allows remote attackers to perform unauthorized actions as administrators via unspe (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-01-08 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.