# CVEs published 2007-03-08

12 CVEs were published on March 8, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-1359](https://cve.now/CVE-2007-1359.md): Interpretation conflict in ModSecurity (mod\_security) 2.1.0 and earlier allows remote attackers to bypass request rules via application/x-ww (no CVSS)
- [CVE-2007-1360](https://cve.now/CVE-2007-1360.md): Unspecified vulnerability in the Nodefamily module for Drupal 5.x before 5.x-1.0 allows remote authenticated users to access and modify othe (no CVSS)
- [CVE-2007-1361](https://cve.now/CVE-2007-1361.md): Cross-site scripting (XSS) vulnerability in virtuemart\_parser.php in VirtueMart before 20070213 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2007-1346](https://cve.now/CVE-2007-1346.md): Unspecified vulnerability in ipmitool for Sun Fire X2100M2 and X2200M2 allows local users to gain privileges and reset or turn off the serve (no CVSS)
- [CVE-2007-1347](https://cve.now/CVE-2007-1347.md): Microsoft Windows Explorer on Windows 2000 SP4 FR and XP SP2 FR, and possibly other versions and platforms, allows remote attackers to cause (no CVSS)
- [CVE-2007-1339](https://cve.now/CVE-2007-1339.md): SQL injection vulnerability in index.php in Links Management Application 1.0 allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2007-1340](https://cve.now/CVE-2007-1340.md): PHP remote file inclusion vulnerability in eintrag.php in Weltennetz News-Letterman 1.1 allows remote attackers to execute arbitrary PHP cod (no CVSS)
- [CVE-2007-1341](https://cve.now/CVE-2007-1341.md): include/auth/auth.php in Simple Invoices before 2007 03 05 does not use the login system to protect print preview pages for invoices, which (no CVSS)
- [CVE-2007-1342](https://cve.now/CVE-2007-1342.md): Cross-site scripting (XSS) vulnerability in admincp/index.php in Jelsoft vBulletin 3.6.5 and earlier allows remote attackers to inject arbit (no CVSS)
- [CVE-2007-1343](https://cve.now/CVE-2007-1343.md): includes/functions.php in Craig Knudsen WebCalendar before 1.0.5 does not protect the noSet variable from external modification, which allow (no CVSS)
- [CVE-2007-1344](https://cve.now/CVE-2007-1344.md): Multiple buffer overflows in src/ezstream.c in Ezstream before 0.3.0 allow remote attackers to execute arbitrary code via a crafted XML conf (no CVSS)
- [CVE-2007-1350](https://cve.now/CVE-2007-1350.md): Stack-based buffer overflow in webadmin.exe in Novell NetMail 3.5.2 allows remote attackers to execute arbitrary code via a long username du (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-03-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.