# CVEs published 2007-03-12

10 CVEs were published on March 12, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-1000](https://cve.now/CVE-2007-1000.md): The ipv6\_getsockopt\_sticky function in net/ipv6/ipv6\_sockglue.c in the Linux kernel before 2.6.20.2 allows local users to read arbitrary ker (no CVSS)
- [CVE-2007-1412](https://cve.now/CVE-2007-1412.md): The cpdf\_open function in the ClibPDF (cpdf) extension in PHP 4.4.6 allows context-dependent attackers to obtain sensitive information (scri (no CVSS)
- [CVE-2007-1413](https://cve.now/CVE-2007-1413.md): Buffer overflow in the snmpget function in the snmp extension in PHP 5.2.3 and earlier, including PHP 4.4.6 and probably other PHP 4 version (no CVSS)
- [CVE-2007-1414](https://cve.now/CVE-2007-1414.md): Multiple PHP remote file inclusion vulnerabilities in Coppermine Photo Gallery (CPG) allow remote attackers to execute arbitrary PHP code vi (no CVSS)
- [CVE-2007-1415](https://cve.now/CVE-2007-1415.md): Multiple PHP remote file inclusion vulnerabilities in PMB Services 3.0.13 and earlier allow remote attackers to execute arbitrary PHP code v (no CVSS)
- [CVE-2007-1416](https://cve.now/CVE-2007-1416.md): PHP remote file inclusion vulnerability in createurl.php in JCcorp (aka James Coyle) URLshrink allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2007-1417](https://cve.now/CVE-2007-1417.md): SQL injection vulnerability in index.php in HC NEWSSYSTEM 1.0-4 allows remote attackers to execute arbitrary SQL commands via the ID paramet (no CVSS)
- [CVE-2007-1418](https://cve.now/CVE-2007-1418.md): Cross-site scripting (XSS) vulnerability in skins/ace/popup-notopic.php in MindTouch OpenGarden DekiWiki before Gooseberry++ allows remote a (no CVSS)
- [CVE-2007-1419](https://cve.now/CVE-2007-1419.md): The Java Management Extensions Remote API Remote Method Invocation over Internet Inter-ORB Protocol (JMX RMI-IIOP) API in Java Dynamic Manag (no CVSS)
- [CVE-2007-1420](https://cve.now/CVE-2007-1420.md): MySQL 5.x before 5.0.36 allows local users to cause a denial of service (database crash) by performing information\_schema table subselects a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-03-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.