# CVEs published 2007-02-01

15 CVEs were published on February 1, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-0656](https://cve.now/CVE-2007-0656.md): PHP remote file inclusion vulnerability in includes/functions.php in phpBB2-MODificat 0.2.0 and earlier allows remote attackers to execute a (no CVSS)
- [CVE-2007-0657](https://cve.now/CVE-2007-0657.md): Unspecified vulnerability in Nexuiz 2.2.2 allows remote attackers to read and overwrite arbitrary files via the gamedir command. (no CVSS)
- [CVE-2007-0658](https://cve.now/CVE-2007-0658.md): The (1) Textimage 4.7.x before 4.7-1.2 and 5.x before 5.x-1.1 module for Drupal and the (2) Captcha 4.7.x before 4.7-1.2 and 5.x before 5.x- (no CVSS)
- [CVE-2007-0659](https://cve.now/CVE-2007-0659.md): download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrat (no CVSS)
- [CVE-2007-0660](https://cve.now/CVE-2007-0660.md): Cross-site scripting (XSS) vulnerability in the IFrame module before 03.02.01 for DotNetNuke (DNN) allows remote attackers to inject arbitra (no CVSS, DotNetNuke.Core)
- [CVE-2007-0661](https://cve.now/CVE-2007-0661.md): Intel Enterprise Southbridge 2 Baseboard Management Controller (BMC), Intel Server Boards 5000XAL, S5000PAL, S5000PSL, S5000XVN, S5000VCL, S (no CVSS)
- [CVE-2007-0662](https://cve.now/CVE-2007-0662.md): PHP remote file inclusion vulnerability in includes/usercp\_viewprofile.php in Hailboards 1.2.0 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2007-0663](https://cve.now/CVE-2007-0663.md): SQL injection vulnerability in index.php in Eclectic Designs CascadianFAQ 4.1 and earlier allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2007-0650](https://cve.now/CVE-2007-0650.md): Buffer overflow in the open\_sty function in mkind.c for makeindex 2.14 in teTeX might allow user-assisted remote attackers to overwrite file (no CVSS)
- [CVE-2007-0648](https://cve.now/CVE-2007-0648.md): Cisco IOS after 12.3(14)T, 12.3(8)YC1, 12.3(8)YG, and 12.4, with voice support and without Session Initiated Protocol (SIP) configured, allo (no CVSS)
- [CVE-2007-0649](https://cve.now/CVE-2007-0649.md): Variable overwrite vulnerability in interface/globals.php in OpenEMR 2.8.2 and earlier allows remote attackers to overwrite arbitrary progra (no CVSS)
- [CVE-2007-0644](https://cve.now/CVE-2007-0644.md): Format string vulnerability in Apple Safari 2.0.4 (419.3) allows remote user-assisted attackers to cause a denial of service (crash) via for (no CVSS)
- [CVE-2007-0645](https://cve.now/CVE-2007-0645.md): Format string vulnerability in iPhoto 6.0.5 allows remote user-assisted attackers to cause a denial of service (crash) via format string spe (no CVSS)
- [CVE-2007-0646](https://cve.now/CVE-2007-0646.md): Format string vulnerability in iMovie HD 6.0.3, and Safari in Apple Mac OS X 10.4 through 10.4.10, allows remote user-assisted attackers to (no CVSS)
- [CVE-2007-0647](https://cve.now/CVE-2007-0647.md): Format string vulnerability in Help Viewer 3.0.0 allows remote user-assisted attackers to cause a denial of service (crash) via format strin (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-02-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.