# CVEs published 2007-02-09

20 CVEs were published on February 9, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-0867](https://cve.now/CVE-2007-0867.md): PHP remote file inclusion vulnerability in classes/menu.php in Site-Assistant 0990 and earlier allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2007-0868](https://cve.now/CVE-2007-0868.md): Unspecified vulnerability in the Chat Room functionality in Yahoo! Messenger 8.1.0.239 and earlier allows remote attackers to cause a denial (no CVSS)
- [CVE-2007-0869](https://cve.now/CVE-2007-0869.md): Cross-site scripting (XSS) vulnerability in the Attachment Manager (admincp/attachment.php) in Jelsoft vBulletin 3.6.4 allows remote attacke (no CVSS)
- [CVE-2006-6983](https://cve.now/CVE-2006-6983.md): Cross-domain vulnerability in MYweb4net Browser 3.8.8.0 allows remote attackers to access restricted information from other domains via an o (no CVSS)
- [CVE-2006-6984](https://cve.now/CVE-2006-6984.md): Cross-domain vulnerability in GreenBrowser 3.4.0622 allows remote attackers to access restricted information from other domains via an objec (no CVSS)
- [CVE-2006-6985](https://cve.now/CVE-2006-6985.md): Cross-domain vulnerability in Maxthon 1.5.6 build 42 allows remote attackers to access restricted information from other domains via an obje (no CVSS)
- [CVE-2006-6986](https://cve.now/CVE-2006-6986.md): Cross-domain vulnerability in PhaseOut 5.4.4 allows remote attackers to access restricted information from other domains via an object tag w (no CVSS)
- [CVE-2006-6987](https://cve.now/CVE-2006-6987.md): Cross-domain vulnerability in FineBrowser Freeware 3.2.2 allows remote attackers to access restricted information from other domains via an (no CVSS)
- [CVE-2006-6988](https://cve.now/CVE-2006-6988.md): Cross-domain vulnerability in Slim Browser 4.07 build 100 allows remote attackers to access restricted information from other domains via an (no CVSS)
- [CVE-2006-6989](https://cve.now/CVE-2006-6989.md): Cross-domain vulnerability in NetCaptor 4.5.7 Personal Edition allows remote attackers to access restricted information from other domains v (no CVSS)
- [CVE-2006-6990](https://cve.now/CVE-2006-6990.md): Cross-domain vulnerability in Enigma Browser 3.8.8 allows remote attackers to access restricted information from other domains via an object (no CVSS)
- [CVE-2006-6991](https://cve.now/CVE-2006-6991.md): Cross-domain vulnerability in Fast Browser Pro 8.1 allows remote attackers to access restricted information from other domains via an object (no CVSS)
- [CVE-2006-6992](https://cve.now/CVE-2006-6992.md): Cross-domain vulnerability in GoSuRF Browser 2.62 allows remote attackers to access restricted information from other domains via an object (no CVSS)
- [CVE-2007-0860](https://cve.now/CVE-2007-0860.md): Multiple PHP remote file inclusion vulnerabilities in local Calendar System 1.1 allow remote attackers to execute arbitrary PHP code via a U (no CVSS)
- [CVE-2007-0861](https://cve.now/CVE-2007-0861.md): PHP remote file inclusion vulnerability in modules/mail/index.php in phpCOIN RC-1 and earlier allows remote attackers to execute arbitrary P (no CVSS)
- [CVE-2007-0862](https://cve.now/CVE-2007-0862.md): PHP remote file inclusion vulnerability in index.php in gnopaste 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2007-0863](https://cve.now/CVE-2007-0863.md): PHP remote file inclusion vulnerability in Trevorchan 0.7 and earlier allows remote attackers to execute arbitrary code via the tc\_config\[ro (no CVSS)
- [CVE-2007-0864](https://cve.now/CVE-2007-0864.md): SQL injection vulnerability in register.php in LushiWarPlaner 1.0 allows remote attackers to inject arbitrary SQL commands via the id parame (no CVSS)
- [CVE-2007-0865](https://cve.now/CVE-2007-0865.md): SQL injection vulnerability in comments.php in LushiNews 1.01 and earlier allows remote authenticated users to inject arbitrary SQL commands (no CVSS)
- [CVE-2007-0866](https://cve.now/CVE-2007-0866.md): Unspecified vulnerability in HP OpenView Storage Data Protector on HP-UX B.11.00, B.11.11, or B.11.23 allows local users to execute arbitrar (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-02-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.