# CVEs published 2007-01-10

14 CVEs were published on January 10, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2006-5857](https://cve.now/CVE-2006-5857.md): Adobe Reader and Acrobat 7.0.8 and earlier allows user-assisted remote attackers to execute code via a crafted PDF file that triggers memory (no CVSS)
- [CVE-2006-5858](https://cve.now/CVE-2006-5858.md): Adobe ColdFusion MX 7 through 7.0.2, and JRun 4, when run on Microsoft IIS, allows remote attackers to read arbitrary files, list directorie (no CVSS)
- [CVE-2007-0167](https://cve.now/CVE-2007-0167.md): Multiple PHP file inclusion vulnerabilities in WGS-PPC (aka PPC Search Engine), as distributed with other aliases, allow remote attackers to (no CVSS)
- [CVE-2006-6143](https://cve.now/CVE-2006-6143.md): The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon (kadmind) and other produc (no CVSS)
- [CVE-2006-6144](https://cve.now/CVE-2006-6144.md): The "mechglue" abstraction interface of the GSS-API library for Kerberos 5 1.5 through 1.5.1, as used in Kerberos administration daemon (kad (no CVSS)
- [CVE-2006-6914](https://cve.now/CVE-2006-6914.md): Unspecified vulnerability in ftpd in IBM AIX 5.2.0 and 5.3.0 allows remote attackers to obtain sensitive information, including passwords, v (no CVSS)
- [CVE-2006-6915](https://cve.now/CVE-2006-6915.md): ftpd in IBM AIX 5.2.0 and 5.3.0 allows remote authenticated users to cause a denial of service (port exhaustion) via unspecified vectors. (no CVSS)
- [CVE-2007-0159](https://cve.now/CVE-2007-0159.md): Directory traversal vulnerability in the GeoIP\_update\_database\_general function in libGeoIP/GeoIPUpdate.c in GeoIP 1.4.0 allows remote malic (no CVSS)
- [CVE-2007-0160](https://cve.now/CVE-2007-0160.md): Stack-based buffer overflow in the LiveJournal support (hooks/ljhook.cc) in CenterICQ 4.9.11 through 4.21.0, when using unofficial LiveJourn (no CVSS)
- [CVE-2007-0161](https://cve.now/CVE-2007-0161.md): The PML Driver HPZ12 (HPZipm12.exe) in the HP all-in-one drivers, as used by multiple HP products, uses insecure SERVICE\_CHANGE\_CONFIG DACL (no CVSS)
- [CVE-2007-0162](https://cve.now/CVE-2007-0162.md): Unsanity Application Enhancer (APE) 2.0.2 installs with insecure permissions for the (1) ApplicationEnhancer binary and the (2) /Library/Fra (no CVSS)
- [CVE-2007-0163](https://cve.now/CVE-2007-0163.md): SecureKit Steganography 1.7.1 and 1.8 embeds password information in the carrier file, which allows remote attackers to bypass authenticatio (no CVSS)
- [CVE-2007-0164](https://cve.now/CVE-2007-0164.md): Camouflage 1.2.1 embeds password information in the carrier file, which allows remote attackers to bypass authentication requirements and de (no CVSS)
- [CVE-2007-0165](https://cve.now/CVE-2007-0165.md): Unspecified vulnerability in libnsl in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (crash) via malformed RPC re (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-01-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.