# CVEs published 2007-02-14

22 CVEs were published on February 14, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-0919](https://cve.now/CVE-2007-0919.md): Directory traversal vulnerability in Nickolas Grigoriadis Mini Web server (MiniWebsvr) 0.0.6 allows remote attackers to list the directory i (no CVSS)
- [CVE-2007-0920](https://cve.now/CVE-2007-0920.md): SQL injection vulnerability in philboard\_forum.asp in Philboard 1.14 and earlier allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2007-0921](https://cve.now/CVE-2007-0921.md): Portal Search allows remote attackers to redirect a URL to an arbitrary web site by placing the URL in the query string to the top-level URI (no CVSS)
- [CVE-2007-0922](https://cve.now/CVE-2007-0922.md): Cross-site scripting (XSS) vulnerability in buscador/buscador.htm in Portal Search allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2007-0923](https://cve.now/CVE-2007-0923.md): buscador/buscador.htm in Portal Search allows remote attackers to obtain sensitive information (business logic) via a query string composed (no CVSS)
- [CVE-2007-0924](https://cve.now/CVE-2007-0924.md): Till Gerken phpPolls 1.0.3 allows remote attackers to bypass authentication and perform certain administrative actions via a direct request (no CVSS)
- [CVE-2007-0925](https://cve.now/CVE-2007-0925.md): Cross-site scripting (XSS) vulnerability in search/SearchResults.aspx in Community Server allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2007-0926](https://cve.now/CVE-2007-0926.md): The dologin function in guestbook.php in KvGuestbook 1.0 Beta allows remote attackers to gain administrative privileges, probably via modifi (no CVSS)
- [CVE-2007-0927](https://cve.now/CVE-2007-0927.md): Heap-based buffer overflow in uTorrent 1.6 allows remote attackers to execute arbitrary code via a torrent file with a crafted announce head (no CVSS)
- [CVE-2007-0928](https://cve.now/CVE-2007-0928.md): Virtual Calendar stores sensitive information under the web root with insufficient access control, which allows remote attackers to download (no CVSS)
- [CVE-2007-0929](https://cve.now/CVE-2007-0929.md): Directory traversal vulnerability in php rrd browser before 0.2.1 allows remote attackers to read arbitrary files via ".." sequences in the (no CVSS)
- [CVE-2007-0930](https://cve.now/CVE-2007-0930.md): Variable extract vulnerability in Apache Stats before 0.0.3beta allows attackers to modify arbitrary variables and conduct attacks via unkno (no CVSS)
- [CVE-2007-0931](https://cve.now/CVE-2007-0931.md): Heap-based buffer overflow in the management interfaces in (1) Aruba Mobility Controllers 200, 800, 2400, and 6000 and (2) Alcatel-Lucent Om (no CVSS)
- [CVE-2007-0932](https://cve.now/CVE-2007-0932.md): The (1) Aruba Mobility Controllers 200, 600, 2400, and 6000 and (2) Alcatel-Lucent OmniAccess Wireless 43xx and 6000 do not properly impleme (no CVSS)
- [CVE-2006-5860](https://cve.now/CVE-2006-5860.md): Cross-site scripting (XSS) vulnerability in the administrator console for Adobe JRun 4.0, as used in ColdFusion, allows remote attackers to (no CVSS)
- [CVE-2007-0914](https://cve.now/CVE-2007-0914.md): Race condition in the TCP subsystem for Solaris 10 allows remote attackers to cause a denial of service (system panic) via unknown vectors. (no CVSS)
- [CVE-2007-0915](https://cve.now/CVE-2007-0915.md): Distributed SLS daemon (SLSd) on HP-UX B.11.11 allows remote attackers to overwrite arbitrary files and gain privileges via a crafted RPC re (no CVSS)
- [CVE-2007-0916](https://cve.now/CVE-2007-0916.md): Unspecified vulnerability in the Address and Routing Parameter Area (ARPA) transport functionality in HP-UX B.11.11 and B.11.23 allows local (no CVSS)
- [CVE-2007-0917](https://cve.now/CVE-2007-0917.md): The Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XE to 12.3T allows remote attackers to bypass IPS signatures that use regula (no CVSS)
- [CVE-2007-0918](https://cve.now/CVE-2007-0918.md): The ATOMIC.TCP signature engine in the Intrusion Prevention System (IPS) feature for Cisco IOS 12.4XA, 12.3YA, 12.3T, and other trains allow (no CVSS)
- [CVE-2006-5859](https://cve.now/CVE-2006-5859.md): Cross-site scripting (XSS) vulnerability in Adobe ColdFusion MX 7 7.0 and 7.0.1, when Global Script Protection is not enabled, allows remote (no CVSS)
- [CVE-2007-0913](https://cve.now/CVE-2007-0913.md): Unspecified vulnerability in Microsoft Powerpoint allows remote user-assisted attackers to execute arbitrary code via unknown attack vectors (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-02-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.