# CVEs published 2007-03-09

4 CVEs were published on March 9, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-1367](https://cve.now/CVE-2007-1367.md): Cross-site scripting (XSS) vulnerability in the login page in Avaya Communications Manager (CM) S87XX, S8500, and S8300 products before 3.1. (no CVSS)
- [CVE-2007-1368](https://cve.now/CVE-2007-1368.md): The Project issue tracking module before 4.7.x-1.3, 4.7.x-2.\* before 4.7.x-2.3, and 5 before 5.x-0.2-beta for Drupal allows remote authentic (no CVSS)
- [CVE-2007-1369](https://cve.now/CVE-2007-1369.md): ini\_modifier (sgid-zendtech) in Zend Platform 2.2.3 and earlier allows local users to modify the system php.ini file by editing a copy of ph (no CVSS)
- [CVE-2007-1370](https://cve.now/CVE-2007-1370.md): Zend Platform 2.2.3 and earlier has incorrect ownership for scd.sh and certain other files, which allows local users to gain root privileges (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-03-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.