# CVEs published 2007-03-06

36 CVEs were published on March 6, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-1263](https://cve.now/CVE-2007-1263.md): GnuPG 1.4.6 and earlier and GPGME before 1.1.4, when run from the command line, does not visually distinguish signed and unsigned portions o (no CVSS)
- [CVE-2007-1264](https://cve.now/CVE-2007-1264.md): Enigmail 0.94.2 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Enigmail from visually distin (no CVSS)
- [CVE-2007-1265](https://cve.now/CVE-2007-1265.md): KMail 1.9.5 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents KMail from visually distinguishin (no CVSS)
- [CVE-2007-1266](https://cve.now/CVE-2007-1266.md): Evolution 2.8.1 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Evolution from visually disti (no CVSS)
- [CVE-2007-1267](https://cve.now/CVE-2007-1267.md): Sylpheed 2.2.7 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Sylpheed from visually disting (no CVSS)
- [CVE-2007-1268](https://cve.now/CVE-2007-1268.md): Mutt 1.5.13 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents Mutt from visually distinguishing (no CVSS)
- [CVE-2007-1269](https://cve.now/CVE-2007-1269.md): GNUMail 1.1.2 and earlier does not properly use the --status-fd argument when invoking GnuPG, which prevents GNUMail from visually distingui (no CVSS)
- [CVE-2007-1285](https://cve.now/CVE-2007-1285.md): The Zend Engine in PHP 4.x before 4.4.7, and 5.x before 5.2.2, allows remote attackers to cause a denial of service (stack exhaustion and PH (no CVSS)
- [CVE-2007-1286](https://cve.now/CVE-2007-1286.md): Integer overflow in PHP 4.4.4 and earlier allows remote context-dependent attackers to execute arbitrary code via a long string to the unser (no CVSS)
- [CVE-2007-1287](https://cve.now/CVE-2007-1287.md): A regression error in the phpinfo function in PHP 4.4.3 to 4.4.6, and PHP 6.0 in CVS, allows remote attackers to conduct cross-site scriptin (no CVSS)
- [CVE-2007-1282](https://cve.now/CVE-2007-1282.md): Integer overflow in Mozilla Thunderbird before 1.5.0.10 and SeaMonkey before 1.0.8 allows remote attackers to trigger a buffer overflow and (no CVSS)
- [CVE-2006-7112](https://cve.now/CVE-2006-7112.md): Directory traversal vulnerability in error.php in MD-Pro 1.0.76 and earlier allows remote authenticated users to read and include arbitrary (no CVSS)
- [CVE-2006-7113](https://cve.now/CVE-2006-7113.md): Unrestricted file upload vulnerability in P-News 2.0 allows remote attackers to upload and execute arbitrary files via an avatar file. (no CVSS)
- [CVE-2006-7114](https://cve.now/CVE-2006-7114.md): P-News 2.0 stores db/user.txt under the web document root with insufficient access control, which allows remote attackers to obtain sensitiv (no CVSS)
- [CVE-2006-7115](https://cve.now/CVE-2006-7115.md): SQL injection vulnerability in PHPKit 1.6.1 RC2 allows remote attackers to inject arbitrary SQL commands via the catid parameter to include. (no CVSS)
- [CVE-2006-7116](https://cve.now/CVE-2006-7116.md): SQL injection vulnerability in includes/functions.php in Kubix 0.7 and earlier allows remote attackers to execute arbitrary SQL commands and (no CVSS)
- [CVE-2006-7117](https://cve.now/CVE-2006-7117.md): Multiple directory traversal vulnerabilities in Kubix 0.7 and earlier allow remote attackers to (1) include and execute arbitrary local file (no CVSS)
- [CVE-2006-7118](https://cve.now/CVE-2006-7118.md): SQL injection vulnerability in index.asp in DMXReady Site Engine Manager 1.0 allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2006-7119](https://cve.now/CVE-2006-7119.md): PHP remote file inclusion vulnerability in kernel/system/startup.php in J. (no CVSS)
- [CVE-2006-7120](https://cve.now/CVE-2006-7120.md): PHP remote file inclusion vulnerability in lib/php/phphtmllib-2.5.4/examples/example6.php for maintain 3.0.0-RC2 allows remote attackers to (no CVSS)
- [CVE-2006-7121](https://cve.now/CVE-2006-7121.md): The HTTP server in Linksys SPA-921 VoIP Desktop Phone allows remote attackers to cause a denial of service (reboot) via (1) a long URL, or a (no CVSS)
- [CVE-2006-7122](https://cve.now/CVE-2006-7122.md): Cross-site scripting (XSS) vulnerability in the IP Address Lookup functionality in BSQ Sitestats (component for Joomla) 1.8.0, and possibly (no CVSS)
- [CVE-2006-7123](https://cve.now/CVE-2006-7123.md): Multiple SQL injection vulnerabilities in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allow remote (no CVSS)
- [CVE-2006-7124](https://cve.now/CVE-2006-7124.md): PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions (no CVSS)
- [CVE-2006-7125](https://cve.now/CVE-2006-7125.md): Cross-site scripting (XSS) vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2006-7126](https://cve.now/CVE-2006-7126.md): SQL injection vulnerability in Joomla BSQ Sitestats 1.8.0 and 2.2.1 allows remote attackers to execute arbitrary SQL commands via the query (no CVSS)
- [CVE-2006-7127](https://cve.now/CVE-2006-7127.md): Multiple PHP remote file inclusion vulnerabilities in JAF CMS 4.0 and 4.0 RC2 allow remote attackers to execute arbitrary PHP code via a URL (no CVSS)
- [CVE-2006-7128](https://cve.now/CVE-2006-7128.md): PHP remote file inclusion vulnerability in forum/forum.php JAF CMS 4.0 RC1 allows remote attackers to execute arbitrary PHP code via a URL i (no CVSS)
- [CVE-2006-7129](https://cve.now/CVE-2006-7129.md): ISS BlackICE PC Protection 3.6 cpj and cpu, and possibly earlier versions, allows local users to bypass the protection scheme by using the Z (no CVSS)
- [CVE-2006-7130](https://cve.now/CVE-2006-7130.md): PHP remote file inclusion vulnerability in backend/primitives/cache/media.php in Jinzora 2.1 and earlier allows remote attackers to execute (no CVSS)
- [CVE-2006-7131](https://cve.now/CVE-2006-7131.md): PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6 allows remote attackers to execute arbitrary PHP code via the web\_ro (no CVSS)
- [CVE-2006-7132](https://cve.now/CVE-2006-7132.md): Directory traversal vulnerability in pmd-config.php in PHPMyDesk 1.0beta allows remote attackers to include arbitrary local files via the pm (no CVSS)
- [CVE-2006-7133](https://cve.now/CVE-2006-7133.md): Directory traversal vulnerability in upload/bin/download.php in Upload Tool for PHP 1.0 allows remote attackers to read arbitrary files via (no CVSS)
- [CVE-2006-7134](https://cve.now/CVE-2006-7134.md): Unrestricted file upload vulnerability in main\_user.php in Upload Tool for PHP 1.0 allows remote attackers to upload and execute arbitrary f (no CVSS)
- [CVE-2007-1281](https://cve.now/CVE-2007-1281.md): Kaspersky AntiVirus Engine 6.0.1.411 for Windows and 5.5-10 for Linux allows remote attackers to cause a denial of service (CPU consumption) (no CVSS)
- [CVE-2007-0994](https://cve.now/CVE-2007-0994.md): A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allow (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-03-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.