# CVEs published 2007-01-17 41 CVEs were published on January 17, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-0243](https://cve.now/CVE-2007-0243.md): Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2\_12 and earlier, and SDK and JRE 1. (no CVSS) - [CVE-2006-6940](https://cve.now/CVE-2006-6940.md): Buffer overflow in the ParseHeader function in clsOWA.cls in POP3/SMTP to OWA (pop2owa) 1.1.3 allows remote attackers to execute arbitrary c (no CVSS) - [CVE-2007-0298](https://cve.now/CVE-2007-0298.md): PHP remote file inclusion vulnerability in show.php in LunarPoll, when register\_globals is enabled, allows remote attackers to execute arbit (no CVSS) - [CVE-2007-0299](https://cve.now/CVE-2007-0299.md): Integer overflow in the byte\_swap\_sbin function in bsd/ufs/ufs/ufs\_byte\_order.c in Mac OS X 10.4.8 allows user-assisted remote attackers to (no CVSS) - [CVE-2007-0268](https://cve.now/CVE-2007-0268.md): Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unknown impact and attack vectors related to (1) (no CVSS) - [CVE-2007-0269](https://cve.now/CVE-2007-0269.md): Unspecified vulnerability in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and attack vectors related to the Change Dat (no CVSS) - [CVE-2007-0270](https://cve.now/CVE-2007-0270.md): Buffer overflow in SYS.DBMS\_DRS in Oracle Database 9.2.0.7 and 10.1.0.4 allows remote authenticated users to cause a denial of service (cras (no CVSS) - [CVE-2007-0271](https://cve.now/CVE-2007-0271.md): Unspecified vulnerability in Oracle Database 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors related to the Log Miner component an (no CVSS) - [CVE-2007-0272](https://cve.now/CVE-2007-0272.md): Multiple buffer overflows in MDSYS.MD in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.4 allows remote authenticated users to cause (no CVSS) - [CVE-2007-0273](https://cve.now/CVE-2007-0273.md): Unspecified vulnerability in Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and attack vectors related to XMLDB (no CVSS) - [CVE-2007-0274](https://cve.now/CVE-2007-0274.md): Multiple unspecified vulnerabilities in Oracle Database 9.2.0.7 and 10.1.0.5 have unknown impact and attack vectors related to (1) Export an (no CVSS) - [CVE-2007-0275](https://cve.now/CVE-2007-0275.md): Cross-site scripting (XSS) vulnerability in Oracle Reports Web Cartridge (RWCGI60) in the Workflow Cartridge component, as used in Oracle Da (no CVSS) - [CVE-2007-0276](https://cve.now/CVE-2007-0276.md): Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4 and 9.0.1.5 have unknown impact and attack vectors related to (1) Advanced S (no CVSS) - [CVE-2007-0277](https://cve.now/CVE-2007-0277.md): Unspecified vulnerability in Oracle Database client-only 10.1.0.4 has unknown impact and attack vectors related to the Export component and (no CVSS) - [CVE-2007-0278](https://cve.now/CVE-2007-0278.md): Multiple unspecified vulnerabilities in Oracle Database 8.1.7.4, 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unknown impact and attack vectors relat (no CVSS) - [CVE-2007-0279](https://cve.now/CVE-2007-0279.md): Multiple unspecified vulnerabilities in Oracle HTTP Server 9.2.0.8 and Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impa (no CVSS) - [CVE-2007-0280](https://cve.now/CVE-2007-0280.md): Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.3, 10.1.2.0.0, 10.1.2.0.2, and 10.1.2.2; and Collaboration (no CVSS) - [CVE-2007-0281](https://cve.now/CVE-2007-0281.md): Multiple unspecified vulnerabilities in Oracle HTTP Server 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.3; Application Server 9.0.4.3, 10.1.2.0.0, (no CVSS) - [CVE-2007-0282](https://cve.now/CVE-2007-0282.md): Unspecified vulnerability in Oracle HTTP Server 9.0.1.5, Application Server 9.0.4.2 and 10.1.2.0.0, and Collaboration Suite 9.0.4.2 has unkn (no CVSS) - [CVE-2007-0283](https://cve.now/CVE-2007-0283.md): Unspecified vulnerability in Oracle Application Server 9.0.4.3 and Collaboration Suite 9.0.4.2 has unknown impact and attack vectors related (no CVSS) - [CVE-2007-0284](https://cve.now/CVE-2007-0284.md): Multiple unspecified vulnerabilities in Oracle Application Server 9.0.4.3 and 10.1.2.0.0, and Collaboration Suite 9.0.4.2, have unknown impa (no CVSS) - [CVE-2007-0285](https://cve.now/CVE-2007-0285.md): Unspecified vulnerability in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2; Collaboration Suite 9.0.4.2 and 10.1.2; and E-Busi (no CVSS) - [CVE-2007-0286](https://cve.now/CVE-2007-0286.md): Unspecified vulnerability in Oracle Application Server 10.1.2.0.2 and 10.1.3.0, and Collaboration Suite 10.1.2, has unknown impact and attac (no CVSS) - [CVE-2007-0287](https://cve.now/CVE-2007-0287.md): Unspecified vulnerability in Oracle Application Server 9.0.4.3, 10.1.2.0.0, and 10.1.2.0.2; and Collaboration Suite 9.0.4.2 and 10.1.2; has (no CVSS) - [CVE-2007-0288](https://cve.now/CVE-2007-0288.md): Unspecified vulnerability in Oracle Application Server 10.1.4.0 has unknown impact and attack vectors related to Oracle Internet Directory, (no CVSS) - [CVE-2007-0289](https://cve.now/CVE-2007-0289.md): Multiple unspecified vulnerabilities in Oracle Collaboration Suite 9.0.4.2 have unknown impact and attack vectors related to Oracle Containe (no CVSS) - [CVE-2007-0290](https://cve.now/CVE-2007-0290.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors related t (no CVSS) - [CVE-2007-0291](https://cve.now/CVE-2007-0291.md): Unspecified vulnerability in Oracle E-Business Suite and Applications 6.2.3 has unknown impact and attack vectors related to Oracle Exchange (no CVSS) - [CVE-2007-0292](https://cve.now/CVE-2007-0292.md): Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 have unknown impact and attack vectors related to Oracle Agent, a (no CVSS) - [CVE-2007-0293](https://cve.now/CVE-2007-0293.md): Multiple unspecified vulnerabilities in Oracle Enterprise Manager 10.1.0.5 and 10.2.0.1 have unknown impact and attack vectors related to (1 (no CVSS) - [CVE-2007-0294](https://cve.now/CVE-2007-0294.md): Unspecified vulnerability in Oracle Enterprise Manager 10.2.0.1 has unknown impact and attack vectors related to Database Cloning & Data Gua (no CVSS) - [CVE-2007-0295](https://cve.now/CVE-2007-0295.md): Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.13 and 8.47.11 has unknown impact and attack vec (no CVSS) - [CVE-2007-0296](https://cve.now/CVE-2007-0296.md): Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.13, 8.47.11, and 8.48.06 has unknown impact and (no CVSS) - [CVE-2007-0297](https://cve.now/CVE-2007-0297.md): Unspecified vulnerability in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.11 and 8.48.06 has unknown impact and attack vec (no CVSS) - [CVE-2007-0222](https://cve.now/CVE-2007-0222.md): Directory traversal vulnerability in the EmChartBean server side component for Oracle Application Server 10g allows remote attackers to read (no CVSS) - [CVE-2006-6936](https://cve.now/CVE-2006-6936.md): Cross-site scripting (XSS) vulnerability in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary HTML or web script via (1) (no CVSS) - [CVE-2006-6937](https://cve.now/CVE-2006-6937.md): SQL injection vulnerability in displaypic.asp in Xtreme ASP Photo Gallery allows remote attackers to inject arbitrary SQL commands via the s (no CVSS) - [CVE-2006-6938](https://cve.now/CVE-2006-6938.md): Directory traversal vulnerability in includes/common.php in NitroTech 0.0.3a, as distributed before 2006, allows remote attackers to include (no CVSS) - [CVE-2006-6939](https://cve.now/CVE-2006-6939.md): GNU ed before 0.3 allows local users to overwrite arbitrary files via a symlink attack on temporary files, possibly in the open\_sbuf functio (no CVSS) - [CVE-2007-0014](https://cve.now/CVE-2007-0014.md): ChainKey Java Code Protection allows attackers to decompile Java class files via a Java class loader with a modified defineClass method that (no CVSS) - [CVE-2007-0267](https://cve.now/CVE-2007-0267.md): The ufs\_lookup function in the Mac OS X 10.4.8 and FreeBSD 6.1 kernels allows local users to cause a denial of service (kernel panic) and po (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-01-17 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.