# CVEs published 2007-02-20

7 CVEs were published on February 20, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-0325](https://cve.now/CVE-2007-0325.md): Multiple buffer overflows in the Trend Micro OfficeScan Web-Deployment SetupINICtrl ActiveX control in OfficeScanSetupINI.dll, as used in Of (no CVSS)
- [CVE-2007-0772](https://cve.now/CVE-2007-0772.md): The Linux kernel 2.6.13 and other versions before 2.6.20.1 allows remote attackers to cause a denial of service (oops) via a crafted NFSACL (no CVSS)
- [CVE-2007-0988](https://cve.now/CVE-2007-0988.md): The zend\_hash\_init function in PHP 5 before 5.2.1 and PHP 4 before 4.4.5, when running on a 64-bit platform, allows context-dependent attack (no CVSS)
- [CVE-2007-1007](https://cve.now/CVE-2007-1007.md): Format string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a denial of service (crash) and possibly exec (no CVSS)
- [CVE-2006-5276](https://cve.now/CVE-2006-5276.md): Stack-based buffer overflow in the DCE/RPC preprocessor in Snort before 2.6.1.3, and 2.7 before beta 2; and Sourcefire Intrusion Sensor; all (no CVSS)
- [CVE-2007-1006](https://cve.now/CVE-2007-1006.md): Multiple format string vulnerabilities in the gm\_main\_window\_flash\_message function in Ekiga before 2.0.5 allow attackers to cause a denial (no CVSS)
- [CVE-2007-1008](https://cve.now/CVE-2007-1008.md): Apple iTunes 7.0.2 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted XML list of radio st (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-02-20
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.