# CVEs published 2007-02-08

34 CVEs were published on February 8, 2007: 1 critical, 0 high. Days are UTC.

- [CVE-2007-0446](https://cve.now/CVE-2007-0446.md): Stack-based buffer overflow in magentproc.exe for Hewlett-Packard Mercury LoadRunner Agent 8.0 and 8.1, Performance Center Agent 8.0 and 8.1 (no CVSS)
- [CVE-2007-0669](https://cve.now/CVE-2007-0669.md): Unspecified vulnerability in Twiki 4.0.0 through 4.1.0 allows local users to execute arbitrary Perl code via unknown vectors related to CGI (no CVSS)
- [CVE-2006-6979](https://cve.now/CVE-2006-6979.md): The ruby handlers in the Magnatune component in Amarok do not properly quote text in certain contexts, probably including construction of an (no CVSS)
- [CVE-2006-6980](https://cve.now/CVE-2006-6980.md): The magnatune.com album browser in Amarok allows attackers to cause a denial of service (application crash) via unspecified vectors. (no CVSS)
- [CVE-2006-6981](https://cve.now/CVE-2006-6981.md): 3proxy 0.5 to 0.5.2, when NT-encoded passwords are being used, allows remote attackers to cause a denial of service (blocked account) via un (no CVSS)
- [CVE-2006-6982](https://cve.now/CVE-2006-6982.md): 3proxy 0.5 to 0.5.2 does not offer NTLM authentication before basic authentication, which might cause browsers with incomplete RFC2616/RFC26 (no CVSS)
- [CVE-2007-0819](https://cve.now/CVE-2007-0819.md): HP Network Node Manager (NNM) Remote Console 7.50, 7.51, and 7.53 assigns Everyone Full Control permission for the %PROGRAMFILES%\\HP OpenVie (no CVSS)
- [CVE-2007-0845](https://cve.now/CVE-2007-0845.md): admin/index.php in Advanced Poll 2.0.0 through 2.0.5-dev allows remote attackers to bypass authentication and gain administrator privileges (no CVSS)
- [CVE-2007-0846](https://cve.now/CVE-2007-0846.md): Cross-site scripting (XSS) vulnerability in forum.php in Open Tibia Server CMS (OTSCMS) 2.1.5 and earlier allows remote attackers to inject (no CVSS)
- [CVE-2007-0847](https://cve.now/CVE-2007-0847.md): SQL injection vulnerability in mod/PM/reply.php in Open Tibia Server CMS (OTSCMS) 2.1.5 and earlier allows remote attackers to execute arbit (no CVSS)
- [CVE-2007-0848](https://cve.now/CVE-2007-0848.md): PHP remote file inclusion vulnerability in classes/class\_mail.inc.php in Maian Recipe 1.0 allows remote attackers to execute arbitrary PHP c (no CVSS)
- [CVE-2007-0849](https://cve.now/CVE-2007-0849.md): scripts/cronscript.php in SysCP 1.2.15 and earlier does not properly quote pathnames in user home directories, which allows local users to g (no CVSS)
- [CVE-2007-0850](https://cve.now/CVE-2007-0850.md): scripts/cronscript.php in SysCP 1.2.15 and earlier includes and executes arbitrary PHP scripts that are referenced by the panel\_cronscript t (no CVSS)
- [CVE-2007-0851](https://cve.now/CVE-2007-0851.md): Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber C (no CVSS)
- [CVE-2007-0852](https://cve.now/CVE-2007-0852.md): Cross-site scripting (XSS) vulnerability in DevTrack 6.x allows remote attackers to inject arbitrary web script or HTML via the "Keyword sea (no CVSS)
- [CVE-2007-0853](https://cve.now/CVE-2007-0853.md): SQL injection vulnerability in DevTrack 6.0.3 allows remote attackers to execute arbitrary SQL commands via the Username form field. (no CVSS)
- [CVE-2007-0854](https://cve.now/CVE-2007-0854.md): Remote file inclusion vulnerability in scripts2/objcache in cPanel WebHost Manager (WHM) allows remote attackers to execute arbitrary code v (no CVSS)
- [CVE-2007-0855](https://cve.now/CVE-2007-0855.md): Stack-based buffer overflow in RARLabs Unrar, as packaged in WinRAR and possibly other products, allows user-assisted remote attackers to ex (no CVSS)
- [CVE-2007-0856](https://cve.now/CVE-2007-0856.md): TmComm.sys 1.5.0.1052 in the Trend Micro Anti-Rootkit Common Module (RCM), with the VsapiNI.sys 3.320.0.1003 scan engine, as used in Trend M (no CVSS)
- [CVE-2007-0857](https://cve.now/CVE-2007-0857.md): Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin before 1.5.7 allow remote attackers to inject arbitrary web script or HTML v (no CVSS, moin)
- [CVE-2006-2219](https://cve.now/CVE-2006-2219.md): phpBB 2.0.20 does not verify user-specified input variable types before being passed to type-dependent functions, which allows remote attack (no CVSS)
- [CVE-2006-2220](https://cve.now/CVE-2006-2220.md): phpBB 2.0.20 does not properly verify user-specified input variables used as limits to SQL queries, which allows remote attackers to obtain (no CVSS)
- [CVE-2006-6975](https://cve.now/CVE-2006-6975.md): PHP remote file inclusion vulnerability in centipaid\_class.php in CentiPaid 1.4.3 allows remote attackers to execute arbitrary code via a UR (CVSS 9.8)
- [CVE-2006-6976](https://cve.now/CVE-2006-6976.md): PHP remote file inclusion vulnerability in centipaid\_class.php in CentiPaid 1.4.2 and earlier allows remote attackers to execute arbitrary c (no CVSS)
- [CVE-2006-6977](https://cve.now/CVE-2006-6977.md): Cross-site scripting (XSS) vulnerability in the "Basic Toolbar Selection" in FreeTextBox allows remote attackers to execute arbitrary JavaSc (no CVSS)
- [CVE-2006-6978](https://cve.now/CVE-2006-6978.md): Cross-site scripting (XSS) vulnerability in the "Basic Toolbar Selection" in FCKEditor allows remote attackers to execute arbitrary JavaScri (no CVSS)
- [CVE-2007-0844](https://cve.now/CVE-2007-0844.md): The auth\_via\_key function in pam\_ssh.c in pam\_ssh before 1.92, when the allow\_blank\_passphrase option is disabled, allows remote attackers t (no CVSS)
- [CVE-2007-0840](https://cve.now/CVE-2007-0840.md): Cross-site scripting (XSS) vulnerability in HLstats before 1.35 allows remote attackers to inject arbitrary web script or HTML via unspecifi (no CVSS)
- [CVE-2007-0841](https://cve.now/CVE-2007-0841.md): Multiple unspecified vulnerabilities in vbDrupal before 4.7.6.0 have unknown impact and remote attack vectors. (no CVSS)
- [CVE-2007-0835](https://cve.now/CVE-2007-0835.md): admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to execute arbitrary shell commands vi (no CVSS)
- [CVE-2007-0836](https://cve.now/CVE-2007-0836.md): admin.php in Coppermine Photo Gallery 1.4.10, and possibly earlier, allows remote authenticated users to include arbitrary local and possibl (no CVSS)
- [CVE-2007-0837](https://cve.now/CVE-2007-0837.md): PHP remote file inclusion vulnerability in examples/inc/top.inc.php in AgerMenu 0.03 and earlier allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2007-0838](https://cve.now/CVE-2007-0838.md): FreeProxy before 3.92 Build 1626 allows malicious users to cause a denial of service (infinite loop) via a HOST: header with a hostname and (no CVSS)
- [CVE-2007-0839](https://cve.now/CVE-2007-0839.md): Multiple PHP remote file inclusion vulnerabilities in index/index\_album.php in Valarsoft WebMatic 2.6 allow remote attackers to execute arbi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-02-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.