# CVEs published 2007-02-06

38 CVEs were published on February 6, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2006-1167](https://cve.now/CVE-2006-1167.md): SGI ProPack 3 SP6 kernel displays the frame buffer contents of the last session after a reboot, which might allow local users to obtain sens (no CVSS)
- [CVE-2007-0006](https://cve.now/CVE-2007-0006.md): The key serial number collision avoidance code in the key\_alloc\_serial function in Linux kernel 2.6.9 up to 2.6.20 allows local users to cau (no CVSS)
- [CVE-2007-0785](https://cve.now/CVE-2007-0785.md): PHP remote file inclusion vulnerability in previewtheme.php in Flipsource Flip 2.01-final 1.0 and earlier allows remote attackers to execute (no CVSS)
- [CVE-2007-0786](https://cve.now/CVE-2007-0786.md): SQL injection vulnerability in view.php in Noname Media Photo Galerie Standard 1.1.1 and earlier allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2007-0787](https://cve.now/CVE-2007-0787.md): PHP remote file inclusion vulnerability in controller.php in Simple Invoices before 20070202 allows remote attackers to execute arbitrary PH (no CVSS)
- [CVE-2007-0788](https://cve.now/CVE-2007-0788.md): Cross-site scripting (XSS) vulnerability in MediaWiki 1.9.x before 1.9.2 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2007-0789](https://cve.now/CVE-2007-0789.md): SQL injection vulnerability in Mambo before 4.5.5 allows remote attackers to execute arbitrary SQL commands via unspecified vectors in cance (no CVSS)
- [CVE-2007-0790](https://cve.now/CVE-2007-0790.md): Heap-based buffer overflow in SmartFTP 2.0.1002 allows remote FTP servers to execute arbitrary code via a large banner. (no CVSS)
- [CVE-2007-0791](https://cve.now/CVE-2007-0791.md): Cross-site scripting (XSS) vulnerability in Atom feeds in Bugzilla 2.20.3, 2.22.1, and 2.23.3, and earlier versions down to 2.20.1, allows r (no CVSS)
- [CVE-2007-0792](https://cve.now/CVE-2007-0792.md): The mod\_perl initialization script in Bugzilla 2.23.3 does not set the Bugzilla Apache configuration to allow .htaccess permissions to overr (no CVSS)
- [CVE-2007-0793](https://cve.now/CVE-2007-0793.md): PHP remote file inclusion vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2007-0794](https://cve.now/CVE-2007-0794.md): SQL injection vulnerability in inc/common.php in GlobalMegaCorp dvddb 0.6 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2007-0795](https://cve.now/CVE-2007-0795.md): Multiple PHP remote file inclusion vulnerabilities in Wap Portal Server 1.x allow remote attackers to execute arbitrary PHP code via a URL i (no CVSS)
- [CVE-2007-0796](https://cve.now/CVE-2007-0796.md): Blue Coat Systems WinProxy 6.1a and 6.0 r1c, and possibly earlier, allows remote attackers to cause a denial of service (daemon crash) or po (no CVSS)
- [CVE-2007-0797](https://cve.now/CVE-2007-0797.md): PHP remote file inclusion vulnerability in theme/settings.php in bluevirus-design SMA-DB 0.3.9 and earlier allows remote attackers to execut (no CVSS)
- [CVE-2007-0798](https://cve.now/CVE-2007-0798.md): Multiple cross-site scripting (XSS) vulnerabilities in Ublog Reload 1.0.5 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2007-0799](https://cve.now/CVE-2007-0799.md): SQL injection vulnerability in badword.asp in Ublog Reload 1.0.5 allows remote attackers to execute arbitrary SQL commands via unspecified v (no CVSS)
- [CVE-2007-0784](https://cve.now/CVE-2007-0784.md): SQL injection vulnerability in login.asp for tPassword in the Raymond BERTHOU script collection (aka RBL - ASP) allows remote attackers to e (no CVSS)
- [CVE-2006-6968](https://cve.now/CVE-2006-6968.md): Cross-site scripting (XSS) vulnerability in the group moderation control center page in Phorum before 5.1.19 might allow remote attackers to (no CVSS)
- [CVE-2007-0452](https://cve.now/CVE-2007-0452.md): smbd in Samba 3.0.6 through 3.0.23d allows remote authenticated users to cause a denial of service (memory and CPU exhaustion) by renaming a (no CVSS)
- [CVE-2007-0453](https://cve.now/CVE-2007-0453.md): Buffer overflow in the nss\_winbind.so.1 library in Samba 3.0.21 through 3.0.23d, as used in the winbindd daemon on Solaris, allows attackers (no CVSS)
- [CVE-2007-0454](https://cve.now/CVE-2007-0454.md): Format string vulnerability in the afsacl.so VFS module in Samba 3.0.6 through 3.0.23d allows context-dependent attackers to execute arbitra (no CVSS)
- [CVE-2007-0756](https://cve.now/CVE-2007-0756.md): Chicken of the VNC (cotv) 2.0 allows remote attackers to cause a denial of service (application crash) via a large computer-name size value (no CVSS)
- [CVE-2007-0757](https://cve.now/CVE-2007-0757.md): PHP remote file inclusion vulnerability in index.php in Miguel Nunes Call of Duty 2 (CoD2) DreamStats System 4.2 and earlier allows remote a (no CVSS)
- [CVE-2007-0758](https://cve.now/CVE-2007-0758.md): PHP remote file inclusion vulnerability in lang.php in PHPProbid 5.24 allows remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2007-0759](https://cve.now/CVE-2007-0759.md): Multiple SQL injection vulnerabilities in EasyMoblog 0.5.1 allow remote attackers to execute arbitrary SQL commands via the (1) i or (2) pos (no CVSS)
- [CVE-2007-0760](https://cve.now/CVE-2007-0760.md): EQdkp 1.3.1 and earlier authenticates administrative requests by verifying that the HTTP Referer header specifies an admin/ URL, which allow (no CVSS)
- [CVE-2007-0761](https://cve.now/CVE-2007-0761.md): PHP remote file inclusion vulnerability in config.php in phpBB ezBoard converter (ezconvert) 0.2 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2007-0762](https://cve.now/CVE-2007-0762.md): PHP remote file inclusion vulnerability in includes/functions.php in phpBB++ Build 100 allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2007-0763](https://cve.now/CVE-2007-0763.md): Cross-site scripting (XSS) vulnerability in the news comment functionality in F3Site 2.1 and earlier allows remote attackers to inject arbit (no CVSS)
- [CVE-2007-0764](https://cve.now/CVE-2007-0764.md): Unrestricted file upload vulnerability in F3Site 2.1 and earlier allows remote authenticated administrators to upload and execute arbitrary (no CVSS)
- [CVE-2007-0765](https://cve.now/CVE-2007-0765.md): SQL injection vulnerability in news.php in dB Masters Curium CMS 1.03 and earlier allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2007-0766](https://cve.now/CVE-2007-0766.md): Stack-based buffer overflow in Remotesoft .NET Explorer 2.0.1 allows user-assisted remote attackers to cause a denial of service (applicatio (no CVSS)
- [CVE-2007-0767](https://cve.now/CVE-2007-0767.md): Cross-site scripting (XSS) vulnerability in the core in Phorum before 5.1.18 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2007-0768](https://cve.now/CVE-2007-0768.md): Multiple cross-site scripting (XSS) vulnerabilities in the Contact Details functionality in Yahoo! Messenger 8.1.0.209 and earlier allow use (no CVSS)
- [CVE-2007-0769](https://cve.now/CVE-2007-0769.md): Cross-site scripting (XSS) vulnerability in register.php in Phorum 5.1.18 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2007-0555](https://cve.now/CVE-2007-0555.md): PostgreSQL 7.3 before 7.3.13, 7.4 before 7.4.16, 8.0 before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 allows attackers to disable certa (no CVSS)
- [CVE-2007-0556](https://cve.now/CVE-2007-0556.md): The query planner in PostgreSQL before 8.0.11, 8.1 before 8.1.7, and 8.2 before 8.2.2 does not verify that a table is compatible with a "pre (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-02-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.