# CVEs published 2007-02-26

35 CVEs were published on February 26, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-1114](https://cve.now/CVE-2007-1114.md): The child frames in Microsoft Internet Explorer 7 inherit the default charset from the parent window when a charset is not specified in an H (no CVSS)
- [CVE-2007-1115](https://cve.now/CVE-2007-1115.md): The child frames in Opera 9 before 9.20 inherit the default charset from the parent window when a charset is not specified in an HTTP Conten (no CVSS)
- [CVE-2007-1116](https://cve.now/CVE-2007-1116.md): The CheckLoadURI function in Mozilla Firefox 1.8 lists the about: URI as a ChromeProtocol and can be loaded via JavaScript, which allows rem (no CVSS)
- [CVE-2007-0008](https://cve.now/CVE-2007-0008.md): Integer underflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x (no CVSS)
- [CVE-2007-0009](https://cve.now/CVE-2007-0009.md): Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.1 (no CVSS)
- [CVE-2007-0778](https://cve.now/CVE-2007-0778.md): The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 can generate hash collisions th (no CVSS)
- [CVE-2007-0779](https://cve.now/CVE-2007-0779.md): GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 allows remote attacker (no CVSS)
- [CVE-2007-0780](https://cve.now/CVE-2007-0780.md): browser.js in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 uses the requesting URI to identify c (no CVSS)
- [CVE-2007-0775](https://cve.now/CVE-2007-0775.md): Multiple unspecified vulnerabilities in the layout engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5. (no CVSS)
- [CVE-2007-0776](https://cve.now/CVE-2007-0776.md): Heap-based buffer overflow in the \_cairo\_pen\_init function in Mozilla Firefox 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey (no CVSS)
- [CVE-2007-0777](https://cve.now/CVE-2007-0777.md): The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 all (no CVSS)
- [CVE-2007-0995](https://cve.now/CVE-2007-0995.md): Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 ignores trailing invalid HTML characters in attribute nam (no CVSS)
- [CVE-2005-4829](https://cve.now/CVE-2005-4829.md): VirtueMart before 1.0.1 does not properly handle errors when a user is forbidden to read a requested page, which has unknown impact and remo (no CVSS)
- [CVE-2007-1092](https://cve.now/CVE-2007-1092.md): Mozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey before 1.0.8 allow remote attackers to execute arbitrary code via JavaScript onUnload han (no CVSS)
- [CVE-2007-1093](https://cve.now/CVE-2007-1093.md): Multiple unspecified vulnerabilities in JP1/Cm2/Network Node Manager (NNM) before 07-10-05, and before 08-00-02 in the 08-x series, allow re (no CVSS)
- [CVE-2007-1094](https://cve.now/CVE-2007-1094.md): Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (NULL dereference and application crash) via JavaScript o (no CVSS)
- [CVE-2007-1095](https://cve.now/CVE-2007-1095.md): Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript onUnload handlers, which allows remote attack (no CVSS)
- [CVE-2007-1096](https://cve.now/CVE-2007-1096.md): Cross-site scripting (XSS) vulnerability in ps\_cart.php in VirtueMart before 20070116 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2007-1097](https://cve.now/CVE-2007-1097.md): Unrestricted file upload vulnerability in the onAttachFiles function in the upload tool (inc/lib/attachment.lib.php) in Wiclear before 0.11. (no CVSS)
- [CVE-2007-1098](https://cve.now/CVE-2007-1098.md): Multiple unspecified vulnerabilities in ScryMUD before 2.1.11 have unknown impact and attack vectors, possibly related to denial of service (no CVSS)
- [CVE-2007-1099](https://cve.now/CVE-2007-1099.md): dbclient in Dropbear SSH client before 0.49 does not sufficiently warn the user when it detects a hostkey mismatch, which might allow remote (no CVSS)
- [CVE-2007-1100](https://cve.now/CVE-2007-1100.md): Directory traversal vulnerability in download.php in Ahmet Sacan Pickle before 20070301 allows remote attackers to read arbitrary files via (no CVSS)
- [CVE-2007-1101](https://cve.now/CVE-2007-1101.md): Multiple cross-site scripting (XSS) vulnerabilities in Photostand 1.2.0 allow remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2007-1102](https://cve.now/CVE-2007-1102.md): Photostand 1.2.0 allows remote attackers to obtain sensitive information via a ' (quote) character in (1) a PHPSESSID cookie or (2) the id p (no CVSS)
- [CVE-2007-1103](https://cve.now/CVE-2007-1103.md): Tor does not verify a node's uptime and bandwidth advertisements, which allows remote attackers who operate a low resource node to make fals (no CVSS)
- [CVE-2007-1104](https://cve.now/CVE-2007-1104.md): PHP remote file inclusion vulnerability in top.php in PHP Module Implementation (PHP-MIP) 0.1 allows remote attackers to execute arbitrary P (no CVSS)
- [CVE-2007-1105](https://cve.now/CVE-2007-1105.md): PHP remote file inclusion vulnerability in functions.php in Extreme phpBB (aka phpBB Extreme) 3.0.1 allows remote attackers to execute arbit (no CVSS)
- [CVE-2007-1106](https://cve.now/CVE-2007-1106.md): PHP remote file inclusion vulnerability in includes/functions\_nomoketos\_rules.php in the NoMoKeTos Rules 0.0.1 module for phpBB allows remot (no CVSS)
- [CVE-2007-1107](https://cve.now/CVE-2007-1107.md): SQL injection vulnerability in thumbnails.php in Coppermine Photo Gallery (CPG) 1.3.x allows remote authenticated users to execute arbitrary (no CVSS)
- [CVE-2007-1108](https://cve.now/CVE-2007-1108.md): PHP remote file inclusion vulnerability in index.php in Christian Schneider CS-Gallery 2.0 and earlier allows remote attackers to execute ar (no CVSS)
- [CVE-2007-1109](https://cve.now/CVE-2007-1109.md): Multiple cross-site scripting (XSS) vulnerabilities in Phpwebgallery 1.4.1 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2007-1110](https://cve.now/CVE-2007-1110.md): Directory traversal vulnerability in data/showcode.php in ActiveCalendar 1.2.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2007-1111](https://cve.now/CVE-2007-1111.md): Multiple cross-site scripting (XSS) vulnerabilities in ActiveCalendar 1.2.0 allow remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2007-1090](https://cve.now/CVE-2007-1090.md): Microsoft Windows Explorer on Windows XP and 2003 allows remote user-assisted attackers to cause a denial of service (crash) via a malformed (no CVSS)
- [CVE-2007-1091](https://cve.now/CVE-2007-1091.md): Microsoft Internet Explorer 7 allows remote attackers to prevent users from leaving a site, spoof the address bar, and conduct phishing and (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-02-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.