# CVEs published 2007-02-15 25 CVEs were published on February 15, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-0324](https://cve.now/CVE-2007-0324.md): Multiple buffer overflows in the LizardTech DjVu Browser Plug-in before 6.1.1 allow remote attackers to execute arbitrary code via unspecifi (no CVSS) - [CVE-2007-0651](https://cve.now/CVE-2007-0651.md): Multiple cross-site scripting (XSS) vulnerabilities in MailEnable Professional before 2.37 allow remote attackers to inject arbitrary Javasc (no CVSS) - [CVE-2007-0652](https://cve.now/CVE-2007-0652.md): Cross-site request forgery (CSRF) vulnerability in MailEnable Professional before 2.37 allows remote attackers to modify arbitrary configura (no CVSS) - [CVE-2007-0958](https://cve.now/CVE-2007-0958.md): Linux kernel 2.6.x before 2.6.20 allows local users to read unreadable binaries by using the interpreter (PT\_INTERP) functionality and trigg (no CVSS) - [CVE-2006-7011](https://cve.now/CVE-2006-7011.md): PHP remote file inclusion vulnerability in adminips.php in Develooping Flash Chat allows remote attackers to execute arbitrary PHP code via (no CVSS) - [CVE-2006-7012](https://cve.now/CVE-2006-7012.md): scart.cgi in SCart 2.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter of a show\_text a (no CVSS) - [CVE-2006-7013](https://cve.now/CVE-2006-7013.md): QueryString.php in Simple Machines Forum (SMF) 1.0.7 and earlier, and 1.1rc2 and earlier, allows remote attackers to more easily spoof the I (no CVSS) - [CVE-2006-7014](https://cve.now/CVE-2006-7014.md): admin.php in BloggIT 1.01 and earlier does not properly establish a user session, which allows remote attackers to gain privileges via a dir (no CVSS) - [CVE-2006-7015](https://cve.now/CVE-2006-7015.md): PHP remote file inclusion vulnerability in admin.jobline.php in Jobline 1.1.1 allows remote attackers to execute arbitrary code via a URL in (no CVSS) - [CVE-2006-7016](https://cve.now/CVE-2006-7016.md): phpjobboard allows remote attackers to bypass authentication and gain administrator privileges via a direct request to admin.php with admino (no CVSS) - [CVE-2006-7017](https://cve.now/CVE-2006-7017.md): Multiple PHP remote file inclusion vulnerabilities in Indexu 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the adm (no CVSS) - [CVE-2006-7018](https://cve.now/CVE-2006-7018.md): phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary code via a crafted argument to the nome\_even (no CVSS) - [CVE-2006-7019](https://cve.now/CVE-2006-7019.md): phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary code via crafted arguments to the (1) text\_e (no CVSS) - [CVE-2006-7020](https://cve.now/CVE-2006-7020.md): CRLF injection vulnerability in (1) include/inc\_act/act\_formmailer.php and possibly (2) sample\_ext\_php/mail\_file\_form.php in phpwcms 1.2.5-D (no CVSS) - [CVE-2006-7021](https://cve.now/CVE-2006-7021.md): PHP remote file inclusion vulnerability in manager/tools/link/dbinstall.php in Plume CMS 1.1.3 allows remote attackers to execute arbitrary (no CVSS) - [CVE-2006-7022](https://cve.now/CVE-2006-7022.md): The Tools module in fx-APP 0.0.8.1 allows remote attackers to misrepresent the contents of a web page via an arbitrary URL in the url parame (no CVSS) - [CVE-2006-7023](https://cve.now/CVE-2006-7023.md): Multiple cross-site scripting (XSS) vulnerabilities in fx-APP 0.0.8.1 allow remote attackers to inject arbitrary HTML or web script via (1) (no CVSS) - [CVE-2006-7024](https://cve.now/CVE-2006-7024.md): Multiple PHP remote file inclusion vulnerabilities in Harpia CMS 1.0.5 and earlier allow remote attackers to execute arbitrary PHP code via (no CVSS) - [CVE-2007-0949](https://cve.now/CVE-2007-0949.md): Stack-based buffer overflow in iTinySoft Studio Total Video Player 1.03, and possibly earlier, allows remote attackers to execute arbitrary (no CVSS) - [CVE-2007-0950](https://cve.now/CVE-2007-0950.md): Cross-site scripting (XSS) vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to inject arbitrary web scr (no CVSS) - [CVE-2007-0951](https://cve.now/CVE-2007-0951.md): SQL injection vulnerability in listmain.asp in Fullaspsite ASP Hosting Site allows remote attackers to execute arbitrary SQL commands via th (no CVSS) - [CVE-2007-0952](https://cve.now/CVE-2007-0952.md): Multiple cross-site scripting (XSS) vulnerabilities in Scriptsez.net Virtual Calendar allow remote attackers to inject arbitrary web script (no CVSS) - [CVE-2007-0953](https://cve.now/CVE-2007-0953.md): Cross-site scripting (XSS) vulnerability in search.pl in @Mail 4.61 and earlier allows remote attackers to inject arbitrary web script or HT (no CVSS) - [CVE-2007-0954](https://cve.now/CVE-2007-0954.md): MOHA Chat 0.1b7 and earlier does not require authentication for use of the plug in API, which has unknown impact and attack vectors. (no CVSS) - [CVE-2007-0955](https://cve.now/CVE-2007-0955.md): The NTLM\_UnPack\_Type3 function in MENTLM.dll in MailEnable Professional 2.35 and earlier allows remote attackers to cause a denial of servic (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-02-15 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.