# CVEs published 2007-02-27

69 CVEs were published on February 27, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2006-7065](https://cve.now/CVE-2006-7065.md): Microsoft Internet Explorer allows remote attackers to cause a denial of service (crash) via an IFRAME with a certain XML file and XSL style (no CVSS)
- [CVE-2006-7066](https://cve.now/CVE-2006-7066.md): Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating an object inside an (no CVSS)
- [CVE-2006-7067](https://cve.now/CVE-2006-7067.md): Oracle 10g R2 and possibly other versions allows remote attackers to trigger internal errors, and possibly have other impacts, via an "alter (no CVSS)
- [CVE-2006-7068](https://cve.now/CVE-2006-7068.md): PHP remote file inclusion vulnerability in CliServ Web Community 0.65 and earlier allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2006-7069](https://cve.now/CVE-2006-7069.md): PHP remote file inclusion vulnerability in smarty\_config.php in Socketwiz Bookmarks 2.0 and earlier allows remote attackers to execute arbit (no CVSS)
- [CVE-2006-7070](https://cve.now/CVE-2006-7070.md): Unrestricted file upload vulnerability in manager/media/ibrowser/scripts/rfiles.php in Etomite CMS 0.6.1 and earlier allows remote attackers (no CVSS)
- [CVE-2006-7071](https://cve.now/CVE-2006-7071.md): SQL injection vulnerability in classes/class\_session.php in Invision Power Board (IPB) 2.1 up to 2.1.6 allows remote attackers to execute ar (no CVSS)
- [CVE-2006-7072](https://cve.now/CVE-2006-7072.md): Cross-site scripting (XSS) vulnerability in GeoClassifieds Enterprise 2.0.5.2 and earlier allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2006-7073](https://cve.now/CVE-2006-7073.md): Cross-site scripting (XSS) vulnerability in Opentools Attachment Mod before 2.4.5 allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2006-7074](https://cve.now/CVE-2006-7074.md): admin.php in SmartSiteCMS 1.0 allows remote attackers to bypass authentication and gain administrator privileges by setting the userName coo (no CVSS)
- [CVE-2006-7075](https://cve.now/CVE-2006-7075.md): Buffer overflow in the meta\_read\_flac function in meta\_decoder.c for Aqualung 0.9beta5 and earlier, and CVS 0.193.2 and earlier, allows user (no CVSS)
- [CVE-2006-7076](https://cve.now/CVE-2006-7076.md): Cross-site scripting (XSS) vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2006-7077](https://cve.now/CVE-2006-7077.md): SQL injection vulnerability in guestbook.php in Advanced Guestbook 2.4 for phpBB allows remote attackers to execute arbitrary SQl commands v (no CVSS)
- [CVE-2006-7078](https://cve.now/CVE-2006-7078.md): Multiple cross-site scripting (XSS) vulnerabilities in Professional Home Page Tools Login Script, as of July 2006, allow remote attackers to (no CVSS)
- [CVE-2006-7079](https://cve.now/CVE-2006-7079.md): Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite arbitrary program v (no CVSS)
- [CVE-2006-7080](https://cve.now/CVE-2006-7080.md): Directory traversal vulnerability in the avatar upload feature in exV2 2.0.4.3 and earlier allows remote attackers to delete arbitrary files (no CVSS)
- [CVE-2006-7081](https://cve.now/CVE-2006-7081.md): Multiple PHP remote file inclusion vulnerabilities in PhpNews 1.0 allow remote attackers to execute arbitrary PHP code via the Include param (no CVSS)
- [CVE-2006-7082](https://cve.now/CVE-2006-7082.md): Rigter Portal System (RPS) 1.0, 2.0, and 3.0 allows remote attackers to bypass authentication and upload arbitrary files via direct requests (no CVSS)
- [CVE-2006-7083](https://cve.now/CVE-2006-7083.md): Directory traversal vulnerability in index.php in Rigter Portal System (RPS) 1.0, 2.0, and 3.0 allows remote attackers to read arbitrary fil (no CVSS)
- [CVE-2006-7085](https://cve.now/CVE-2006-7085.md): Rigter Portal System (RPS) 1.0, 2.0, and 3.0 allows remote attackers to add arbitrary content and conduct XSS attacks via a direct request t (no CVSS)
- [CVE-2007-1134](https://cve.now/CVE-2007-1134.md): Unspecified vulnerability in Watchtower (WT) before 0.12 has unknown impact and attack vectors, related to "unauthorized accounts." (no CVSS)
- [CVE-2007-1135](https://cve.now/CVE-2007-1135.md): Multiple SQL injection vulnerabilities in WebMplayer before 0.6.1-Alpha allow remote attackers to execute arbitrary SQL commands via the (1) (no CVSS)
- [CVE-2007-1136](https://cve.now/CVE-2007-1136.md): index.php in WebMplayer before 0.6.1-Alpha allows remote attackers to execute arbitrary code via shell metacharacters in an exec function ca (no CVSS)
- [CVE-2007-1137](https://cve.now/CVE-2007-1137.md): putmail.py in Putmail before 1.4 does not detect when a user attempts to use TLS with a server that does not support it, which causes putmai (no CVSS)
- [CVE-2007-1138](https://cve.now/CVE-2007-1138.md): Absolute path traversal vulnerability in list\_main\_pages.php in Cromosoft Simple Plantilla PHP (SPP) allows remote attackers to list arbitra (no CVSS)
- [CVE-2007-1139](https://cve.now/CVE-2007-1139.md): Unrestricted file upload vulnerability in Cromosoft Simple Plantilla PHP (SPP) allows remote attackers to upload arbitrary scripts via a fil (no CVSS)
- [CVE-2007-1140](https://cve.now/CVE-2007-1140.md): Directory traversal vulnerability in edit.php in pheap allows remote attackers to read and modify arbitrary files via a .. (no CVSS)
- [CVE-2007-1141](https://cve.now/CVE-2007-1141.md): PHP remote file inclusion vulnerability in preview.php in Magic News Plus 1.0.2 allows remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2007-1142](https://cve.now/CVE-2007-1142.md): Cross-site scripting (XSS) vulnerability in Magic News Plus 1.0.2 allows remote attackers to inject arbitrary web script or HTML via the lin (no CVSS)
- [CVE-2007-1143](https://cve.now/CVE-2007-1143.md): Directory traversal vulnerability in pn-menu.php in J-Web Pics Navigator 1.0 allows remote attackers to list arbitrary directories via a .. (no CVSS)
- [CVE-2007-1144](https://cve.now/CVE-2007-1144.md): Directory traversal vulnerability in jwpn-photos.php in J-Web Pics Navigator 2.0 allows remote attackers to list arbitrary directories via a (no CVSS)
- [CVE-2007-1145](https://cve.now/CVE-2007-1145.md): Multiple cross-site scripting (XSS) vulnerabilities in Kayako SupportSuite - ESupport 3.00.13 and 3.04.10 allow remote attackers to inject a (no CVSS)
- [CVE-2007-1146](https://cve.now/CVE-2007-1146.md): PHP remote file inclusion vulnerability in function.php in arabhost allows remote attackers to execute arbitrary PHP code via a URL in the a (no CVSS)
- [CVE-2007-1147](https://cve.now/CVE-2007-1147.md): PHP remote file inclusion vulnerability in view.php in hbm allows remote attackers to execute arbitrary PHP code via a URL in the hbmpath pa (no CVSS)
- [CVE-2007-1148](https://cve.now/CVE-2007-1148.md): PHP remote file inclusion vulnerability in install/index.php in LoveCMS 1.4 allows remote attackers to execute arbitrary PHP code via a URL (no CVSS)
- [CVE-2007-1149](https://cve.now/CVE-2007-1149.md): Multiple directory traversal vulnerabilities in LoveCMS 1.4 allow remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2007-1150](https://cve.now/CVE-2007-1150.md): Unrestricted file upload vulnerability in LoveCMS 1.4 allows remote authenticated administrators to upload arbitrary files to /modules/conte (no CVSS)
- [CVE-2007-1151](https://cve.now/CVE-2007-1151.md): Cross-site scripting (XSS) vulnerability in LoveCMS 1.4 allows remote attackers to inject arbitrary web script or HTML via the id parameter (no CVSS)
- [CVE-2007-1152](https://cve.now/CVE-2007-1152.md): Multiple directory traversal vulnerabilities in Pyrophobia 2.1.3.1 allow remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2007-1153](https://cve.now/CVE-2007-1153.md): Multiple PHP remote file inclusion vulnerabilities in CutePHP CuteNews 1.3.6 allow remote attackers to execute arbitrary PHP code via unspec (no CVSS)
- [CVE-2007-1154](https://cve.now/CVE-2007-1154.md): SQL injection vulnerability in webSPELL allows remote attackers to execute arbitrary SQL commands via a ws\_auth cookie, a different vulnerab (no CVSS)
- [CVE-2007-1155](https://cve.now/CVE-2007-1155.md): Unrestricted file upload vulnerability in webSPELL allows remote authenticated administrators to upload and execute arbitrary PHP code via t (no CVSS)
- [CVE-2007-1156](https://cve.now/CVE-2007-1156.md): JBrowser allows remote attackers to bypass authentication and access certain administrative capabilities via a direct request for \_admin/. (no CVSS)
- [CVE-2007-1157](https://cve.now/CVE-2007-1157.md): Cross-site request forgery (CSRF) vulnerability in jmx-console/HtmlAdaptor in JBoss allows remote attackers to perform privileged actions as (no CVSS)
- [CVE-2002-2222](https://cve.now/CVE-2002-2222.md): isakmpd/message.c in isakmpd in FreeBSD before isakmpd-20020403\_1, and in OpenBSD 3.1, allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2002-2223](https://cve.now/CVE-2002-2223.md): Buffer overflow in NetScreen-Remote 8.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted (no CVSS)
- [CVE-2002-2224](https://cve.now/CVE-2002-2224.md): Buffer overflow in PGPFreeware 7.03 running on Windows NT 4.0 SP6 allows remote attackers to cause a denial of service and possibly execute (no CVSS)
- [CVE-2002-2225](https://cve.now/CVE-2002-2225.md): SafeNet VPN client allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Internet Key Exchang (no CVSS)
- [CVE-2003-1320](https://cve.now/CVE-2003-1320.md): SonicWALL firmware before 6.4.0.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted Inter (no CVSS)
- [CVE-2004-2678](https://cve.now/CVE-2004-2678.md): Unspecified vulnerability in HP Tru64 UNIX 5.1B PK2(BL22) and PK3(BL24), and 5.1A PK6(BL24), when using IPsec/IKE (Internet Key Exchange) wi (no CVSS)
- [CVE-2004-2679](https://cve.now/CVE-2004-2679.md): Check Point Firewall-1 4.1 up to NG AI R55 allows remote attackers to obtain potentially sensitive information by sending an Internet Key Ex (no CVSS)
- [CVE-2007-0996](https://cve.now/CVE-2007-0996.md): The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8 inherit the default charset from the (no CVSS)
- [CVE-2007-1117](https://cve.now/CVE-2007-1117.md): Unspecified vulnerability in Publisher 2007 in Microsoft Office 2007 allows remote attackers to execute arbitrary code via unspecified vecto (no CVSS)
- [CVE-2007-1118](https://cve.now/CVE-2007-1118.md): Multiple PHP remote file inclusion vulnerabilities in eFiction 3.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2007-1119](https://cve.now/CVE-2007-1119.md): Unspecified vulnerability in Novell ZENworks 7 Desktop Management Support Pack 1 before Hot patch 3 (ZDM7SP1HP3) allows remote attackers to (no CVSS)
- [CVE-2007-1120](https://cve.now/CVE-2007-1120.md): The (1) Import.LoadFromURL and (2) Export.asText.SaveToFile functions in TeeChart Pro ActiveX control (TeeChart7.ocx) allow remote attackers (no CVSS)
- [CVE-2007-1121](https://cve.now/CVE-2007-1121.md): Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) 1.00 allow remote attackers (no CVSS)
- [CVE-2007-1122](https://cve.now/CVE-2007-1122.md): Multiple SQL injection vulnerabilities in Mathis Dirksen-Thedens ZephyrSoft Toolbox Address Book Continued (ABC) 1.00 and 1.01 allow remote (no CVSS)
- [CVE-2007-1123](https://cve.now/CVE-2007-1123.md): Multiple PHP remote file inclusion vulnerabilities in ZPanel 2.0 allow remote attackers to execute arbitrary PHP code via a URL in (1) the b (no CVSS)
- [CVE-2007-1124](https://cve.now/CVE-2007-1124.md): Directory traversal vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2007-1125](https://cve.now/CVE-2007-1125.md): Cross-site scripting (XSS) vulnerability in gallery.php in XeroXer Simple one-file gallery allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2007-1126](https://cve.now/CVE-2007-1126.md): Directory traversal vulnerability in index.php in xtcommerce allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2007-1127](https://cve.now/CVE-2007-1127.md): Directory traversal vulnerability in enc/stylecss.php in shopkitplus allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2007-1128](https://cve.now/CVE-2007-1128.md): shopkitplus allows remote attackers to obtain sensitive information via a request to (1) events.php with a curmonth\[\]=01 query string or (2) (no CVSS)
- [CVE-2007-1129](https://cve.now/CVE-2007-1129.md): Multiple unrestricted file upload vulnerabilities in MTCMS 3.2 allow remote attackers to upload and execute files via (1) an avatar upload i (no CVSS)
- [CVE-2007-1130](https://cve.now/CVE-2007-1130.md): PHP remote file inclusion vulnerability in sinagb.php in Sinapis Gastebuch 2.2 allows remote attackers to execute arbitrary PHP code via a U (no CVSS)
- [CVE-2007-1131](https://cve.now/CVE-2007-1131.md): PHP remote file inclusion vulnerability in sinapis.php in Sinapis Forum 2.2 allows remote attackers to execute arbitrary PHP code via a URL (no CVSS)
- [CVE-2007-1132](https://cve.now/CVE-2007-1132.md): Multiple cross-site scripting (XSS) vulnerabilities in the "Contact Us" functionality in MTCMS 2.2 allow remote attackers to inject arbitrar (no CVSS)
- [CVE-2007-1133](https://cve.now/CVE-2007-1133.md): PHP remote file inclusion vulnerability in fcring.php in FCRing 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the s (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-02-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.