# CVEs published 2007-02-13 29 CVEs were published on February 13, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-0219](https://cve.now/CVE-2007-0219.md): Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from (1) Msb1fren.dll, (2) Htmlmm.ocx, and (3) Blnmgrps.dll as ActiveX c (no CVSS) - [CVE-2007-0905](https://cve.now/CVE-2007-0905.md): PHP before 5.2.1 allows attackers to bypass safe\_mode and open\_basedir restrictions via unspecified vectors in the session extension. (no CVSS) - [CVE-2007-0906](https://cve.now/CVE-2007-0906.md): Multiple buffer overflows in PHP before 5.2.1 allow attackers to cause a denial of service and possibly execute arbitrary code via unspecifi (no CVSS) - [CVE-2007-0907](https://cve.now/CVE-2007-0907.md): Buffer underflow in PHP before 5.2.1 allows attackers to cause a denial of service via unspecified vectors involving the sapi\_header\_op func (no CVSS) - [CVE-2007-0908](https://cve.now/CVE-2007-0908.md): The WDDX deserializer in the wddx extension in PHP 5 before 5.2.1 and PHP 4 before 4.4.5 does not properly initialize the key\_length variabl (no CVSS) - [CVE-2007-0909](https://cve.now/CVE-2007-0909.md): Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to ( (no CVSS) - [CVE-2007-0910](https://cve.now/CVE-2007-0910.md): Unspecified vulnerability in PHP before 5.2.1 allows attackers to "clobber" certain super-global variables via unspecified vectors. (no CVSS) - [CVE-2007-0911](https://cve.now/CVE-2007-0911.md): Off-by-one error in the str\_ireplace function in PHP 5.2.1 might allow context-dependent attackers to cause a denial of service (crash). (no CVSS) - [CVE-2007-0912](https://cve.now/CVE-2007-0912.md): Cross-Site Request Forgery (CSRF) vulnerability in admin/admin.adm.php in Jportal 2.3.1, and possibly earlier, allows remote attackers to pe (no CVSS) - [CVE-2006-4697](https://cve.now/CVE-2006-4697.md): Microsoft Internet Explorer 5.01, 6, and 7 uses certain COM objects from Imjpcksid.dll as ActiveX controls, which allows remote attackers to (no CVSS) - [CVE-2007-0217](https://cve.now/CVE-2007-0217.md): The wininet.dll FTP client code in Microsoft Internet Explorer 5.01 and 6 might allow remote attackers to execute arbitrary code via an FTP (no CVSS) - [CVE-2007-0208](https://cve.now/CVE-2007-0208.md): Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac does not correctly check the p (no CVSS) - [CVE-2007-0209](https://cve.now/CVE-2007-0209.md): Microsoft Word in Office 2000 SP3, XP SP3, Office 2003 SP2, Works Suite 2004 to 2006, and Office 2004 for Mac allows user-assisted remote at (no CVSS) - [CVE-2006-1311](https://cve.now/CVE-2006-1311.md): The RichEdit component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1; Office 2000 SP3, XP SP3, 2003 SP2, and Office 2004 for Mac; and (no CVSS) - [CVE-2006-3448](https://cve.now/CVE-2006-3448.md): Buffer overflow in the Step-by-Step Interactive Training in Microsoft Windows 2000 SP4, XP SP2 and Professional, and Server 2003 SP1 allows (no CVSS) - [CVE-2006-5270](https://cve.now/CVE-2006-5270.md): Integer overflow in the Microsoft Malware Protection Engine (mpengine.dll), as used by Windows Live OneCare, Antigen, Defender, and Forefron (no CVSS) - [CVE-2007-0025](https://cve.now/CVE-2007-0025.md): The MFC component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 and Visual Studio .NET 2000, 2002 SP1, 2003, and 2003 SP1 allows user- (no CVSS) - [CVE-2007-0026](https://cve.now/CVE-2007-0026.md): The OLE Dialog component in Microsoft Windows 2000 SP4, XP SP2, and 2003 SP1 allows user-assisted remote attackers to execute arbitrary code (no CVSS) - [CVE-2007-0210](https://cve.now/CVE-2007-0210.md): The Window Image Acquisition (WIA) Service in Microsoft Windows XP SP2 allows local users to gain privileges via unspecified vectors involvi (no CVSS) - [CVE-2007-0211](https://cve.now/CVE-2007-0211.md): The hardware detection functionality in the Windows Shell in Microsoft Windows XP SP2 and Professional, and Server 2003 SP1 allows local use (no CVSS) - [CVE-2007-0214](https://cve.now/CVE-2007-0214.md): The HTML Help ActiveX control (Hhctrl.ocx) in Microsoft Windows 2000 SP3, XP SP2 and Professional, 2003 SP1 allows remote attackers to execu (no CVSS) - [CVE-2007-0900](https://cve.now/CVE-2007-0900.md): Multiple PHP remote file inclusion vulnerabilities in TagIt! Tagboard 2.1.B Build 2 and earlier, when register\_globals is enabled, allow rem (no CVSS) - [CVE-2007-0901](https://cve.now/CVE-2007-0901.md): Multiple cross-site scripting (XSS) vulnerabilities in Info pages in MoinMoin 1.5.7 allow remote attackers to inject arbitrary web script or (no CVSS, moin) - [CVE-2007-0902](https://cve.now/CVE-2007-0902.md): Unspecified vulnerability in the "Show debugging information" feature in MoinMoin 1.5.7 allows remote attackers to obtain sensitive informat (no CVSS, moin) - [CVE-2007-0903](https://cve.now/CVE-2007-0903.md): Unspecified vulnerability in the mod\_roster\_odbc module in ejabberd before 1.1.3 has unknown impact and attack vectors. (no CVSS) - [CVE-2007-0904](https://cve.now/CVE-2007-0904.md): SQL injection vulnerability in projects.php in LightRO CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the ID paramete (no CVSS) - [CVE-2007-0842](https://cve.now/CVE-2007-0842.md): The 64-bit versions of Microsoft Visual C++ 8.0 standard library (MSVCR80.DLL) time functions, including (1) localtime, (2) localtime\_s, (3) (no CVSS) - [CVE-2007-0896](https://cve.now/CVE-2007-0896.md): Cross-site scripting (XSS) vulnerability in the (1) Sage before 1.3.10, and (2) Sage++ extensions for Firefox, allows remote attackers to in (no CVSS) - [CVE-2007-0895](https://cve.now/CVE-2007-0895.md): Race condition in recursive directory deletion with the (1) -r or (2) -R option in rm in Solaris 8 through 10 before 20070208 allows local u (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-02-13 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.