# CVEs published 2007-02-23 28 CVEs were published on February 23, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-1086](https://cve.now/CVE-2007-1086.md): Unspecified binaries in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allow local users to create or modify arbitrary files via (no CVSS) - [CVE-2007-1087](https://cve.now/CVE-2007-1087.md): IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 does not properly terminate certain input strings, which allows local users to ex (no CVSS) - [CVE-2007-1088](https://cve.now/CVE-2007-1088.md): Stack-based buffer overflow in IBM DB2 8.x before 8.1 FixPak 15 and 9.1 before Fix Pack 2 allows local users to execute arbitrary code via a (no CVSS) - [CVE-2007-1089](https://cve.now/CVE-2007-1089.md): IBM DB2 Universal Database (UDB) 9.1 GA through 9.1 FP1 allows local users with table SELECT privileges to perform unauthorized UPDATE and D (no CVSS) - [CVE-2006-5877](https://cve.now/CVE-2006-5877.md): The enigmail extension before 0.94.2 does not properly handle large, encrypted file e-mail attachments, which allows remote attackers to cau (no CVSS) - [CVE-2006-7025](https://cve.now/CVE-2006-7025.md): SQL injection vulnerability in admin/config.php in Bookmark4U 2.0 and 2.1 allows remote attackers to inject arbitrary SQL command via the sq (no CVSS) - [CVE-2006-7026](https://cve.now/CVE-2006-7026.md): PHP remote file inclusion vulnerability in sources/join.php in Aardvark Topsites PHP 4.2.2 and earlier, when register\_globals is enabled, al (no CVSS) - [CVE-2006-7027](https://cve.now/CVE-2006-7027.md): Microsoft Internet Security and Acceleration (ISA) Server 2004 logs unusual ASCII characters in the Host header, including the tab, which al (no CVSS) - [CVE-2006-7028](https://cve.now/CVE-2006-7028.md): Single CPU Sun systems running Solaris 7, 8, or 9, such as Netra, allows remote attackers to cause a denial of service (console hang) via a (no CVSS) - [CVE-2006-7029](https://cve.now/CVE-2006-7029.md): Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a frameset with only one fram (no CVSS) - [CVE-2006-7030](https://cve.now/CVE-2006-7030.md): Microsoft Internet Explorer 6 SP2 and earlier allows remote attackers to cause a denial of service (crash) via certain malformed HTML, possi (no CVSS) - [CVE-2006-7031](https://cve.now/CVE-2006-7031.md): Microsoft Internet Explorer 6.0.2900 SP2 and earlier allows remote attackers to cause a denial of service (crash) via a table element with a (CVSS 6.5) - [CVE-2006-7032](https://cve.now/CVE-2006-7032.md): PHP remote file inclusion vulnerability in phpbb/getmsg.php in FlashBB 1.1.5 and earlier allows remote attackers to execute arbitrary code v (no CVSS) - [CVE-2006-7033](https://cve.now/CVE-2006-7033.md): Cross-site scripting (XSS) vulnerability in Super Link Exchange Script 1.0 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS) - [CVE-2006-7034](https://cve.now/CVE-2006-7034.md): SQL injection vulnerability in directory.php in Super Link Exchange Script 1.0 might allow remote attackers to execute arbitrary SQL queries (no CVSS) - [CVE-2006-7035](https://cve.now/CVE-2006-7035.md): Directory traversal vulnerability in make\_thumbnail.php in Super Link Exchange Script 1.0 allows remote attackers to read arbitrary files vi (no CVSS) - [CVE-2006-7036](https://cve.now/CVE-2006-7036.md): PHP remote file inclusion vulnerability in register.php for Andys Chat 4.5 allows remote attackers to execute arbitrary code via the action (no CVSS) - [CVE-2006-7037](https://cve.now/CVE-2006-7037.md): Mathcad 12 through 13.1 allows local users to bypass the security features by directly accessing or editing the XML representation of the wo (no CVSS) - [CVE-2006-7038](https://cve.now/CVE-2006-7038.md): Multiple buffer overflows in MERCUR Messaging 2005 before Service Pack 4 allow remote attackers to cause a denial of service (crash) via (1) (no CVSS) - [CVE-2006-7039](https://cve.now/CVE-2006-7039.md): The IMAP4 service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service (crash) via a message (no CVSS) - [CVE-2006-7040](https://cve.now/CVE-2006-7040.md): Unspecified vulnerability in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service (crash) via a (no CVSS) - [CVE-2006-7041](https://cve.now/CVE-2006-7041.md): The SMTP service in MERCUR Messaging 2005 before Service Pack 4 allows remote attackers to cause a denial of service (infinite loop) via a m (no CVSS) - [CVE-2007-0320](https://cve.now/CVE-2007-0320.md): Multiple buffer overflows in (a) an ActiveX control (iftw.dll) and (b) Netscape plug-in (npiftw32.dll) for Macrovision (formerly InstallShie (no CVSS) - [CVE-2007-0321](https://cve.now/CVE-2007-0321.md): Buffer overflow in the Update Service Agent ActiveX Control in isusweb.dll for Macrovision FLEXnet Connect (formerly InstallShield Update Se (no CVSS) - [CVE-2007-1085](https://cve.now/CVE-2007-1085.md): Cross-site scripting (XSS) vulnerability in Google Desktop allows remote attackers to bypass protection schemes and inject arbitrary web scr (no CVSS) - [CVE-2007-0843](https://cve.now/CVE-2007-0843.md): The ReadDirectoryChangesW API function on Microsoft Windows 2000, XP, Server 2003, and Vista does not check permissions for child objects, w (no CVSS) - [CVE-2007-1083](https://cve.now/CVE-2007-1083.md): Buffer overflow in the Configuration Checker (ConfigChk) ActiveX control in VSCnfChk.dll 2.0.0.2 for Verisign Managed PKI Service, Secure Me (no CVSS) - [CVE-2007-1084](https://cve.now/CVE-2007-1084.md): Mozilla Firefox 2.0.0.1 and earlier does not prompt users before saving bookmarklets, which allows remote attackers to bypass the same-domai (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-02-23 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.