# CVEs published 2007-02-04

13 CVEs were published on February 4, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2006-6966](https://cve.now/CVE-2006-6966.md): phpGraphy before 0.9.13a does not properly unset variables when the input data includes a numeric parameter with a value matching an alphanu (no CVSS)
- [CVE-2007-0436](https://cve.now/CVE-2007-0436.md): Barron McCann X-Kryptor Driver BMS1446HRR (Xgntr BMS1351 Install BMS1472) in X-Kryptor Secure Client does not drop privileges when launching (no CVSS)
- [CVE-2007-0699](https://cve.now/CVE-2007-0699.md): PHP remote file inclusion vulnerability in includes/includes.php in Guernion Sylvain Portail Web Php (aka Gsylvain35 Portail Web, PwP) befor (no CVSS)
- [CVE-2007-0700](https://cve.now/CVE-2007-0700.md): Directory traversal vulnerability in index.php in Guernion Sylvain Portail Web Php (aka Gsylvain35 Portail Web, PwP) allows remote attackers (no CVSS)
- [CVE-2007-0701](https://cve.now/CVE-2007-0701.md): PHP remote file inclusion vulnerability in inc/common.inc.php in Epistemon 1.0 allows remote attackers to execute arbitrary PHP code via a U (no CVSS)
- [CVE-2007-0702](https://cve.now/CVE-2007-0702.md): Multiple PHP remote file inclusion vulnerabilities in phpEventMan 1.0.2 allow remote attackers to execute arbitrary PHP code via a URL in th (no CVSS)
- [CVE-2007-0703](https://cve.now/CVE-2007-0703.md): PHP remote file inclusion vulnerability in library/StageLoader.php in WebBuilder 2.0 and earlier allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2007-0704](https://cve.now/CVE-2007-0704.md): PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in th (no CVSS)
- [CVE-2007-0705](https://cve.now/CVE-2007-0705.md): Cross-zone scripting vulnerability in Sleipnir 2.49 and earlier, and Portable Sleipnir 2.45 and earlier, allows remote attackers to bypass W (no CVSS)
- [CVE-2007-0706](https://cve.now/CVE-2007-0706.md): Cross-zone scripting vulnerability in Darksky RSS bar for Internet Explorer before 1.29, RSS bar for Sleipnir before 1.29, and RSS bar for u (no CVSS)
- [CVE-2007-0707](https://cve.now/CVE-2007-0707.md): Stack-based buffer overflow in GOM Player 2.0.12.3375 allows user-assisted remote attackers to execute arbitrary code via a .ASX file with a (no CVSS)
- [CVE-2007-0708](https://cve.now/CVE-2007-0708.md): cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) before 2.4.16.174 does not validate arguments that originate in user m (no CVSS)
- [CVE-2007-0709](https://cve.now/CVE-2007-0709.md): cmdmon.sys in Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.16.174 and earlier does not validate arguments that originate in u (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-02-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.