# CVEs published 2007-01-30

50 CVEs were published on January 30, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2006-5753](https://cve.now/CVE-2006-5753.md): Unspecified vulnerability in the listxattr system call in Linux kernel, when a "bad inode" is present, allows local users to cause a denial (no CVSS)
- [CVE-2006-5754](https://cve.now/CVE-2006-5754.md): The aio\_setup\_ring function in Linux kernel does not properly initialize a variable, which allows local users to cause a denial of service ( (no CVSS)
- [CVE-2006-6535](https://cve.now/CVE-2006-6535.md): The dev\_queue\_xmit function in Linux kernel 2.6 can fail before calling the local\_bh\_disable function, which could lead to data corruption a (no CVSS)
- [CVE-2007-0588](https://cve.now/CVE-2007-0588.md): The InternalUnpackBits function in Apple QuickDraw, as used by Quicktime 7.1.3 and other applications on Mac OS X 10.4.8 and earlier, allows (no CVSS)
- [CVE-2007-0589](https://cve.now/CVE-2007-0589.md): SQL injection vulnerability in Forum Livre 1.0 allows remote attackers to execute arbitrary SQL commands via the user parameter to info\_user (no CVSS)
- [CVE-2007-0590](https://cve.now/CVE-2007-0590.md): Cross-site scripting (XSS) vulnerability in busca2.asp in Forum Livre 1.0 remote attackers to inject arbitrary web script or HTML via the pa (no CVSS)
- [CVE-2007-0591](https://cve.now/CVE-2007-0591.md): PHP remote file inclusion vulnerability in configure.php in Vu Le An Virtual Path (VirtualPath) 1.0 allows remote attackers to execute arbit (no CVSS)
- [CVE-2007-0592](https://cve.now/CVE-2007-0592.md): Cross-site scripting (XSS) vulnerability in EzDatabase 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified (no CVSS)
- [CVE-2007-0593](https://cve.now/CVE-2007-0593.md): Siteman 1.1.11 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a (no CVSS)
- [CVE-2007-0594](https://cve.now/CVE-2007-0594.md): Siteman 2.0.x2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a (no CVSS)
- [CVE-2007-0595](https://cve.now/CVE-2007-0595.md): Cross-site scripting (XSS) vulnerability in search in High 5 Review Site allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2007-0596](https://cve.now/CVE-2007-0596.md): PHP remote file inclusion vulnerability in index/main.php in Aztek Forum 4.00 allows remote authenticated administrators to execute arbitrar (no CVSS)
- [CVE-2007-0597](https://cve.now/CVE-2007-0597.md): Aztek Forum 4.00 allows remote attackers to obtain sensitive information via a direct request to forum.php with the fid=XD query string, whi (no CVSS)
- [CVE-2007-0598](https://cve.now/CVE-2007-0598.md): SQL injection vulnerability in forum/load.php in Aztek Forum 4.00 allows remote attackers to execute arbitrary SQL commands via the fid cook (no CVSS)
- [CVE-2007-0599](https://cve.now/CVE-2007-0599.md): Variable overwrite vulnerability in common/config.php in Aztek Forum 4.00 allows remote attackers to overwrite arbitrary program variables a (no CVSS)
- [CVE-2007-0600](https://cve.now/CVE-2007-0600.md): SQL injection vulnerability in news\_page.asp in Martyn Kilbryde Newsposter Script (aka makit news/blog poster) 3 and earlier allows remote a (no CVSS)
- [CVE-2007-0601](https://cve.now/CVE-2007-0601.md): common/safety.php in Aztek Forum 4.00 allows remote attackers to enter certain data containing %22 sequences (URL encoded double quotes) and (no CVSS)
- [CVE-2007-0602](https://cve.now/CVE-2007-0602.md): Buffer overflow in libvsapi.so in the VSAPI library in Trend Micro VirusWall 3.81 for Linux, as used by IScan.BASE/vscan, allows local users (no CVSS)
- [CVE-2007-0603](https://cve.now/CVE-2007-0603.md): PGP Desktop before 9.5.1 does not validate data objects received over the (1) \\pipe\\pgpserv named pipe for PGPServ.exe or the (2) \\pipe\\pgps (no CVSS)
- [CVE-2007-0604](https://cve.now/CVE-2007-0604.md): Cross-site scripting (XSS) vulnerability in Movable Type (MT) before 3.34 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2007-0455](https://cve.now/CVE-2007-0455.md): Buffer overflow in the gdImageStringFTEx function in gdft.c in GD Graphics Library 2.0.33 and earlier allows remote attackers to cause a den (no CVSS)
- [CVE-2007-0464](https://cve.now/CVE-2007-0464.md): The \_CFNetConnectionWillEnqueueRequests function in CFNetwork 129.19 on Apple Mac OS X 10.4 through 10.4.10 allows remote attackers to cause (no CVSS)
- [CVE-2007-0567](https://cve.now/CVE-2007-0567.md): Cross-site scripting (XSS) vulnerability in admin.php in Interactive-Scripts.Com PHP Membership Manager 1.5 allows remote attackers to injec (no CVSS)
- [CVE-2007-0568](https://cve.now/CVE-2007-0568.md): PHP remote file inclusion vulnerability in system/lib/package.php in MyPHPCommander 2.0 allows remote attackers to execute arbitrary PHP cod (no CVSS)
- [CVE-2007-0569](https://cve.now/CVE-2007-0569.md): SQL injection vulnerability in xNews.php in xNews 1.3 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sh (no CVSS)
- [CVE-2007-0570](https://cve.now/CVE-2007-0570.md): PHP remote file inclusion vulnerability in ains\_main.php in Johannes Gijsbers (aka Taradino) Ad Fundum Integratable News Script (AINS) 0.02b (no CVSS)
- [CVE-2007-0571](https://cve.now/CVE-2007-0571.md): PHP remote file inclusion vulnerability in include/lib/lib\_head.php in phpMyReports 3.0.11 and earlier allows remote attackers to execute ar (no CVSS)
- [CVE-2007-0572](https://cve.now/CVE-2007-0572.md): PHP remote file inclusion vulnerability in include/irc/phpIRC.php in Drunken:Golem Gaming Portal 0.5.1 Alpha 2 and earlier allows remote att (no CVSS)
- [CVE-2007-0573](https://cve.now/CVE-2007-0573.md): PHP remote file inclusion vulnerability in includes/config.inc.php in nsGalPHP 0.41 and earlier allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2007-0574](https://cve.now/CVE-2007-0574.md): SQL injection vulnerability in rss/show\_webfeed.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) 3.40 allows remote attacker (no CVSS)
- [CVE-2007-0575](https://cve.now/CVE-2007-0575.md): Multiple SQL injection vulnerabilities in the administrative login page (admin/login.asp) in ASPCode.net AdMentor allow remote attackers to (no CVSS)
- [CVE-2007-0576](https://cve.now/CVE-2007-0576.md): PHP remote file inclusion vulnerability in xt\_counter.php in Xt-Stats 2.3.x up to 2.4.0.b3 allows remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2007-0577](https://cve.now/CVE-2007-0577.md): PHP remote file inclusion vulnerability in function.inc.php in ACGVclick 0.2.0 and earlier allows remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2007-0578](https://cve.now/CVE-2007-0578.md): The http\_open function in httpget.c in mpg123 before 0.64 allows remote attackers to cause a denial of service (infinite loop) by closing th (no CVSS)
- [CVE-2007-0579](https://cve.now/CVE-2007-0579.md): Unspecified vulnerability in the calendar component in Horde Groupware Webmail Edition before 1.0, and Groupware before 1.0, allows remote a (no CVSS)
- [CVE-2007-0580](https://cve.now/CVE-2007-0580.md): PHP remote file inclusion vulnerability in menu.php in Foro Domus 2.10 allows remote attackers to execute arbitrary PHP code via a URL in th (no CVSS)
- [CVE-2007-0581](https://cve.now/CVE-2007-0581.md): PHP remote file inclusion vulnerability in functions.php in EclipseBB 0.5.0 Lite allows remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2007-0582](https://cve.now/CVE-2007-0582.md): SQL injection vulnerability in default.asp in ChernobiLe 1.0 allows remote attackers to execute arbitrary SQL commands via the User (usernam (no CVSS)
- [CVE-2007-0583](https://cve.now/CVE-2007-0583.md): Multiple cross-site scripting (XSS) vulnerabilities in HTTP Commander 6.0, and possibly earlier, allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2007-0584](https://cve.now/CVE-2007-0584.md): PHP remote file inclusion vulnerability in membres/membreManager.php in PhP Generic Library & Framework for comm (g-neric) allows remote att (no CVSS)
- [CVE-2007-0585](https://cve.now/CVE-2007-0585.md): include/debug.php in Webfwlog 0.92 and earlier, when register\_globals is enabled, allows remote attackers to obtain source code of files via (no CVSS)
- [CVE-2007-0558](https://cve.now/CVE-2007-0558.md): PHP remote file inclusion vulnerability in modules/mail/main.php in Inter7 vHostAdmin 1.0 allows remote attackers to execute arbitrary PHP c (no CVSS)
- [CVE-2007-0559](https://cve.now/CVE-2007-0559.md): PHP remote file inclusion vulnerability in config.php in RPW 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the sq (no CVSS)
- [CVE-2007-0560](https://cve.now/CVE-2007-0560.md): SQL injection vulnerability in user.asp in ASP EDGE 1.2b and earlier allows remote attackers to execute arbitrary SQL commands via the user (no CVSS)
- [CVE-2007-0561](https://cve.now/CVE-2007-0561.md): Multiple PHP remote file inclusion vulnerabilities in Xero Portal 1.2 allow remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2007-0562](https://cve.now/CVE-2007-0562.md): Windows Explorer (explorer.exe) 6.0.2900.2180 in Microsoft Windows XP SP2 allows user-assisted remote attackers to cause a denial of service (no CVSS)
- [CVE-2007-0563](https://cve.now/CVE-2007-0563.md): Multiple cross-site scripting (XSS) vulnerabilities in Symantec Web Security (SWS) before 3.0.1.85 allow remote attackers to inject arbitrar (no CVSS)
- [CVE-2007-0564](https://cve.now/CVE-2007-0564.md): The license registering interface in Symantec Web Security (SWS) before 3.0.1.85 allows attackers to cause a denial of service (CPU consumpt (no CVSS)
- [CVE-2007-0565](https://cve.now/CVE-2007-0565.md): CGI-Rescue Shopping Basket Professional 7.50 and earlier allows remote attackers to inject arbitrary operating system commands via unspecifi (no CVSS)
- [CVE-2007-0566](https://cve.now/CVE-2007-0566.md): SQL injection vulnerability in news\_detail.asp in ASP NEWS 3 and earlier allows remote attackers to execute arbitrary SQL commands via the i (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-01-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.