# CVEs published 2007-03-02 30 CVEs were published on March 2, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-1219](https://cve.now/CVE-2007-1219.md): PHP remote file inclusion vulnerability in actions/del.php in Admin Phorum 3.3.1a allows remote attackers to execute arbitrary PHP code via (no CVSS) - [CVE-2007-1220](https://cve.now/CVE-2007-1220.md): The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 does not properly verify the parameters passed to the syscall dispatcher, which al (no CVSS) - [CVE-2007-1221](https://cve.now/CVE-2007-1221.md): The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 allows attackers with physical access to force execution of the hypervisor syscall (no CVSS) - [CVE-2007-1222](https://cve.now/CVE-2007-1222.md): Parallels Desktop for Mac before 20070216 implements Drag and Drop by sharing the entire host filesystem as the .psf share, which allows loc (no CVSS) - [CVE-2007-1223](https://cve.now/CVE-2007-1223.md): Unspecified vulnerability in Hitachi OSAS/FT/W before 20070223 allows attackers to cause a denial of service (responder control processing h (no CVSS) - [CVE-2007-1224](https://cve.now/CVE-2007-1224.md): Grok Developments NetProxy 4.03 allows remote attackers to bypass URL filtering via a request that omits "http://" from the URL and specifie (no CVSS) - [CVE-2007-1225](https://cve.now/CVE-2007-1225.md): The connection log file implementation in Grok Developments NetProxy 4.03 does not record requests that omit http:// in a URL, which might a (no CVSS) - [CVE-2007-1226](https://cve.now/CVE-2007-1226.md): McAfee VirusScan for Mac (Virex) before 7.7 patch 1 has weak permissions (0666) for /Library/Application Support/Virex/VShieldExclude.txt, w (no CVSS) - [CVE-2007-1227](https://cve.now/CVE-2007-1227.md): VShieldCheck in McAfee VirusScan for Mac (Virex) before 7.7 patch 1 allow local users to change permissions of arbitrary files via a symlink (no CVSS) - [CVE-2007-1228](https://cve.now/CVE-2007-1228.md): IBM DB2 UDB 8.2 before Fixpak 7 (aka fixpack 14), and DB2 9 before Fix Pack 2, on UNIX allows the "fenced" user to access certain unauthoriz (no CVSS) - [CVE-2007-1229](https://cve.now/CVE-2007-1229.md): Cross-site scripting (XSS) vulnerability in the Nullsoft ShoutcastServer 1.9.7 allows remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2007-1230](https://cve.now/CVE-2007-1230.md): Multiple cross-site scripting (XSS) vulnerabilities in wp-includes/functions.php in WordPress before 2.1.2-alpha allow remote attackers to i (no CVSS) - [CVE-2007-1005](https://cve.now/CVE-2007-1005.md): Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA (formerly Computer Associates) eTrust Intrusion Detection 3.0.5.57 (no CVSS) - [CVE-2007-1218](https://cve.now/CVE-2007-1218.md): Off-by-one buffer overflow in the parse\_elements function in the 802.11 printer code (print-802\_11.c) for tcpdump 3.9.5 and earlier allows r (no CVSS) - [CVE-2006-3892](https://cve.now/CVE-2006-3892.md): The Management Console server in EMC NetWorker (formerly Legato NetWorker) 7.3.2 before Jumbo Update 1 uses weak authentication, which allow (no CVSS) - [CVE-2006-7095](https://cve.now/CVE-2006-7095.md): Integer signedness error in the network\_receive\_packet function in socket.c in dimension 3 engine (dim3) 1.5 and earlier allows remote attac (no CVSS) - [CVE-2006-7096](https://cve.now/CVE-2006-7096.md): Buffer overflow in the network\_host\_handle\_join function in host.c in dimension 3 engine (dim3) 1.5 and earlier allows remote attackers to c (no CVSS) - [CVE-2006-7097](https://cve.now/CVE-2006-7097.md): Multiple unspecified vulnerabilities in TaskFreak! before 0.1.4 have unknown impact and attack vectors. (no CVSS) - [CVE-2007-1189](https://cve.now/CVE-2007-1189.md): Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite certain memory addre (no CVSS) - [CVE-2007-1190](https://cve.now/CVE-2007-1190.md): Unspecified vulnerability in the EmbeddedWB Web Browser ActiveX control allows remote attackers to execute arbitrary code via unspecified ve (no CVSS) - [CVE-2007-1191](https://cve.now/CVE-2007-1191.md): The Social Bookmarks (del.icio.us) plug-in 8F in Quicksilver writes usernames and passwords in plaintext to the /Library/Logs/Console/UID/Co (no CVSS) - [CVE-2007-1192](https://cve.now/CVE-2007-1192.md): Thomas R. (no CVSS) - [CVE-2007-1193](https://cve.now/CVE-2007-1193.md): Multiple unspecified vulnerabilities in the Login page in OrangeHRM before 20070212 have unknown impact and attack vectors. (no CVSS) - [CVE-2007-1194](https://cve.now/CVE-2007-1194.md): Norman SandBox Analyzer does not use the proper range for Interrupt Descriptor Table (IDT) entries, which allows local users to determine th (no CVSS) - [CVE-2007-1195](https://cve.now/CVE-2007-1195.md): Multiple buffer overflows in XM Easy Personal FTP Server 5.3.0 allow remote attackers to execute arbitrary code via unspecified vectors. (no CVSS) - [CVE-2007-1196](https://cve.now/CVE-2007-1196.md): Unspecified vulnerability in Citrix Presentation Server Client for Windows before 10.0 allows remote web sites to execute arbitrary code via (no CVSS) - [CVE-2007-1197](https://cve.now/CVE-2007-1197.md): Multiple unspecified vulnerabilities in Epiware before 4.7.5 have unknown impact and attack vectors, possibly related to cross-site scriptin (no CVSS) - [CVE-2007-1198](https://cve.now/CVE-2007-1198.md): Cross-site scripting (XSS) vulnerability in TaskFreak! before 0.5.7 allows remote attackers to inject arbitrary web script or HTML via unspe (no CVSS) - [CVE-2007-1199](https://cve.now/CVE-2007-1199.md): Adobe Reader and Acrobat Trial allow remote attackers to read arbitrary files via a file:// URI in a PDF document, as demonstrated with \<\