# CVEs published 2007-02-22 24 CVEs were published on February 22, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-1076](https://cve.now/CVE-2007-1076.md): Multiple directory traversal vulnerabilities in phpTrafficA 1.4.1, and possibly earlier, allow remote attackers to include arbitrary local f (no CVSS) - [CVE-2007-1077](https://cve.now/CVE-2007-1077.md): SQL injection vulnerability in page.asp in Design4Online UserPages2 2.0 allows remote attackers to execute arbitrary SQL commands via the ar (no CVSS) - [CVE-2007-1078](https://cve.now/CVE-2007-1078.md): PHP remote file inclusion vulnerability in index.php in FlashGameScript 1.5.4 allows remote attackers to execute arbitrary PHP code via a UR (no CVSS) - [CVE-2007-1079](https://cve.now/CVE-2007-1079.md): Stack-based buffer overflow in Rhino Software, Inc. (no CVSS) - [CVE-2007-1080](https://cve.now/CVE-2007-1080.md): Multiple heap-based buffer overflows in TurboFTP 5.30 Build 572 allow remote servers to cause a denial of service via (1) long filename in a (no CVSS) - [CVE-2007-1081](https://cve.now/CVE-2007-1081.md): The start function in class.t3lib\_formmail.php in TYPO3 before 4.0.5, 4.1beta, and 4.1RC1 allows attackers to inject arbitrary email headers (no CVSS) - [CVE-2007-1082](https://cve.now/CVE-2007-1082.md): FTP Explorer 1.0.1 Build 047, and other versions before 1.0.1.52, allows remote servers to cause a denial of service (CPU consumption) via a (no CVSS) - [CVE-2004-2677](https://cve.now/CVE-2004-2677.md): Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code (no CVSS) - [CVE-2007-1071](https://cve.now/CVE-2007-1071.md): Integer overflow in the gifGetBandProc function in ImageIO in Apple Mac OS X 10.4.8 allows remote attackers to cause a denial of service (se (no CVSS) - [CVE-2007-1072](https://cve.now/CVE-2007-1072.md): The command line interface (CLI) in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier (no CVSS) - [CVE-2007-1073](https://cve.now/CVE-2007-1073.md): Static code injection vulnerability in install.php in mcRefer allows remote attackers to execute arbitrary PHP code via the bgcolor paramete (no CVSS) - [CVE-2007-1074](https://cve.now/CVE-2007-1074.md): Multiple buffer overflows in NewsBin Pro 5.33 and NewsBin Pro 4.x allow user-assisted remote attackers to execute arbitrary code via a long (no CVSS) - [CVE-2007-1075](https://cve.now/CVE-2007-1075.md): TurboFTP 5.30 Build 572 allows remote servers to cause a denial of service (CPU consumption) via a response with a large number of newline c (no CVSS) - [CVE-2006-6490](https://cve.now/CVE-2006-6490.md): Multiple buffer overflows in the SupportSoft (1) SmartIssue (tgctlsi.dll) and (2) ScriptRunner (tgctlsr.dll) ActiveX controls, as used by Sy (no CVSS) - [CVE-2007-1062](https://cve.now/CVE-2007-1062.md): The Cisco Unified IP Conference Station 7935 3.2(15) and earlier, and Station 7936 3.3(12) and earlier does not properly handle administrato (no CVSS) - [CVE-2007-1063](https://cve.now/CVE-2007-1063.md): The SSH server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G, with firmware 8.0(4)SR1 and earlier, uses a hard-code (no CVSS) - [CVE-2007-1064](https://cve.now/CVE-2007-1064.md): Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has (no CVSS) - [CVE-2007-1065](https://cve.now/CVE-2007-1065.md): Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has (no CVSS) - [CVE-2007-1066](https://cve.now/CVE-2007-1066.md): Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has (no CVSS) - [CVE-2007-1067](https://cve.now/CVE-2007-1067.md): Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has (no CVSS) - [CVE-2007-1068](https://cve.now/CVE-2007-1068.md): The (1) TTLS CHAP, (2) TTLS MSCHAP, (3) TTLS MSCHAPv2, (4) TTLS PAP, (5) MD5, (6) GTC, (7) LEAP, (8) PEAP MSCHAPv2, (9) PEAP GTC, and (10) F (no CVSS) - [CVE-2007-1059](https://cve.now/CVE-2007-1059.md): PHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote attackers to execute arbitrary PHP code via (no CVSS) - [CVE-2007-1060](https://cve.now/CVE-2007-1060.md): Multiple PHP remote file inclusion vulnerabilities in Interspire SendStudio 2004.14 and earlier, when register\_globals and allow\_fopenurl ar (no CVSS) - [CVE-2007-1061](https://cve.now/CVE-2007-1061.md): SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" block is enabled, allow (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-02-22 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.