# CVEs published 2007-03-21

44 CVEs were published on March 21, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1322](https://cve.now/CVE-2003-1322.md): Multiple stack-based buffer overflows in Atrium MERCUR IMAPD in MERCUR Mailserver before 4.2.15.0 allow remote attackers to execute arbitrar (no CVSS)
- [CVE-2007-1577](https://cve.now/CVE-2007-1577.md): Directory traversal vulnerability in index.php in GeBlog 0.1 allows remote attackers to include and execute arbitrary local files via a .. (no CVSS)
- [CVE-2007-1578](https://cve.now/CVE-2007-1578.md): Multiple integer signedness errors in the NTLM implementation in Atrium MERCUR IMAPD (mcrimap4.exe) 5.00.14, with SP4, allow remote attacker (no CVSS)
- [CVE-2007-1579](https://cve.now/CVE-2007-1579.md): Stack-based buffer overflow in Atrium MERCUR IMAPD allows remote attackers to have an unknown impact via a certain SUBSCRIBE command. (no CVSS)
- [CVE-2007-1580](https://cve.now/CVE-2007-1580.md): FTPDMIN 0.96 allows remote attackers to cause a denial of service (daemon crash) via a LIST command for a Windows drive letter, as demonstra (no CVSS)
- [CVE-2007-1581](https://cve.now/CVE-2007-1581.md): The resource system in PHP 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by interrupting the hash\_update\_ (no CVSS)
- [CVE-2007-1582](https://cve.now/CVE-2007-1582.md): The resource system in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to execute arbitrary code by inter (no CVSS)
- [CVE-2007-1583](https://cve.now/CVE-2007-1583.md): The mb\_parse\_str function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 sets the internal register\_globals flag and does not disable it (no CVSS)
- [CVE-2007-1584](https://cve.now/CVE-2007-1584.md): Buffer underflow in the header function in PHP 5.2.0 allows context-dependent attackers to execute arbitrary code by passing an all-whitespa (no CVSS)
- [CVE-2007-1585](https://cve.now/CVE-2007-1585.md): The Linksys WAG200G with firmware 1.01.01, WRT54GC 2 with firmware 1.00.7, and WRT54GC 1 with firmware 1.03.0 and earlier allow remote attac (no CVSS)
- [CVE-2007-1586](https://cve.now/CVE-2007-1586.md): ZynOS 3.40 allows remote attackers to cause a denial of service (link restart) by sending a request for the name \\M via the SMB Mail Slot Pr (no CVSS)
- [CVE-2007-1587](https://cve.now/CVE-2007-1587.md): templates/config/mail.tpl in Tim Soderstrom StatsDawg 0.92 allows remote attackers to execute arbitrary programs by specifying the program n (no CVSS)
- [CVE-2007-1588](https://cve.now/CVE-2007-1588.md): server.cpp in MyServer 0.8.5 calls Process::setuid before calling Process::setgid and thus does not properly drop privileges, which might al (no CVSS)
- [CVE-2007-1589](https://cve.now/CVE-2007-1589.md): TrueCrypt before 4.3, when set-euid mode is used on Linux, allows local users to cause a denial of service (filesystem unavailability) by di (no CVSS)
- [CVE-2007-1590](https://cve.now/CVE-2007-1590.md): The Grandstream BudgeTone 200 IP phone, with program 1.1.1.14 and bootloader 1.1.1.5, allows remote attackers to cause a denial of service ( (no CVSS)
- [CVE-2007-0653](https://cve.now/CVE-2007-0653.md): Integer overflow in X MultiMedia System (xmms) 1.2.10, and possibly other versions, allows user-assisted remote attackers to execute arbitra (no CVSS)
- [CVE-2007-0654](https://cve.now/CVE-2007-0654.md): Integer underflow in X MultiMedia System (xmms) 1.2.10 allows user-assisted remote attackers to execute arbitrary code via crafted header in (no CVSS)
- [CVE-2007-1002](https://cve.now/CVE-2007-1002.md): Format string vulnerability in the write\_html function in calendar/gui/e-cal-component-memo-preview.c in Evolution Shared Memo 2.8.2.1, and (no CVSS)
- [CVE-2006-7174](https://cve.now/CVE-2006-7174.md): PHP remote file inclusion vulnerability in includes/functions.php in the Dimension module of phpBB allows remote attackers to execute arbitr (no CVSS)
- [CVE-2007-1567](https://cve.now/CVE-2007-1567.md): Stack-based buffer overflow in War FTP Daemon 1.65, and possibly earlier, allows remote attackers to cause a denial of service or execute ar (no CVSS)
- [CVE-2007-1568](https://cve.now/CVE-2007-1568.md): Stack-based buffer overflow in DaanSystems NewsReactor 20070220.21 allows remote attackers to execute arbitrary code via a yEnc (yEncode) en (no CVSS)
- [CVE-2007-1569](https://cve.now/CVE-2007-1569.md): Stack-based buffer overflow in NewsBin Pro 4.32 allows remote attackers to cause a denial of service or execute arbitrary code via a yEnc (y (no CVSS)
- [CVE-2007-1571](https://cve.now/CVE-2007-1571.md): PHP remote file inclusion vulnerability in includes/base.php in Radical Designs Activist Mobilization Platform (AMP) 3.2, when register\_glob (no CVSS)
- [CVE-2007-1572](https://cve.now/CVE-2007-1572.md): SQL injection vulnerability in search.asp in JGBBS 3.0 Beta 1 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2007-1573](https://cve.now/CVE-2007-1573.md): SQL injection vulnerability in admincp/attachment.php in Jelsoft vBulletin 3.6.5 allows remote authenticated administrators to execute arbit (no CVSS)
- [CVE-2007-1574](https://cve.now/CVE-2007-1574.md): CARE2X 2.2, and possibly earlier, allows remote attackers to obtain configuration information via a direct request to phpinfo.php, which cal (no CVSS)
- [CVE-2007-1575](https://cve.now/CVE-2007-1575.md): Multiple SQL injection vulnerabilities in PHProjekt 5.2.0, when magic\_quotes\_gpc is disabled, allow remote authenticated users to execute ar (no CVSS)
- [CVE-2007-1576](https://cve.now/CVE-2007-1576.md): Multiple cross-site scripting (XSS) vulnerabilities in PHProjekt 5.2.0, when magic\_quotes\_gpc is disabled, allow remote authenticated users (no CVSS)
- [CVE-2007-0238](https://cve.now/CVE-2007-0238.md): Stack-based buffer overflow in filter\\starcalc\\scflt.cxx in the StarCalc parser in OpenOffice.org (OOo) Office Suite before 2.2, and 1.x bef (no CVSS)
- [CVE-2007-0239](https://cve.now/CVE-2007-0239.md): OpenOffice.org (OOo) Office Suite allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a prepared (no CVSS)
- [CVE-2007-0348](https://cve.now/CVE-2007-0348.md): Stack-based buffer overflow in the IASystemInfo.dll ActiveX control in (1) InterActual Player 2.60.12.0717, (2) Roxio CinePlayer 3.2, (3) Wi (no CVSS)
- [CVE-2007-0606](https://cve.now/CVE-2007-0606.md): w-agora 4.2.1 allows remote attackers to obtain sensitive information by via the (1) bn\[\] array parameter to index.php, which expects a stri (no CVSS)
- [CVE-2007-1313](https://cve.now/CVE-2007-1313.md): NETxAutomation NETxEIB OPC Server before 3.0.1300 does not properly validate OLE for Process Control (OPC) server handles, which allows atta (no CVSS)
- [CVE-2007-1463](https://cve.now/CVE-2007-1463.md): Format string vulnerability in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arbitrary code via format string spec (no CVSS)
- [CVE-2007-1464](https://cve.now/CVE-2007-1464.md): Format string vulnerability in the whiteboard Jabber protocol in Inkscape before 0.45.1 allows user-assisted remote attackers to execute arb (no CVSS)
- [CVE-2007-1561](https://cve.now/CVE-2007-1561.md): The channel driver in Asterisk before 1.2.17 and 1.4.x before 1.4.2 allows remote attackers to cause a denial of service (crash) via a SIP I (no CVSS)
- [CVE-2007-1562](https://cve.now/CVE-2007-1562.md): The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to con (no CVSS)
- [CVE-2007-1563](https://cve.now/CVE-2007-1563.md): The FTP protocol implementation in Opera 9.10 allows remote attackers to allows remote servers to force the client to connect to other serve (no CVSS)
- [CVE-2007-1564](https://cve.now/CVE-2007-1564.md): The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other servers, perform a proxied (no CVSS)
- [CVE-2007-1565](https://cve.now/CVE-2007-1565.md): Konqueror 3.5.5 allows remote attackers to cause a denial of service (crash) by using JavaScript to read a child iframe having an ftp:// URI (no CVSS)
- [CVE-2007-1566](https://cve.now/CVE-2007-1566.md): SQL injection vulnerability in News/page.asp in NetVIOS Portal allows remote attackers to execute arbitrary SQL commands via the NewsID para (no CVSS)
- [CVE-2007-1560](https://cve.now/CVE-2007-1560.md): The clientProcessRequest() function in src/client\_side.c in Squid 2.6 before 2.6.STABLE12 allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2007-1556](https://cve.now/CVE-2007-1556.md): SQL injection vulnerability in kommentare.php in Creative Files 1.2 allows remote attackers to execute arbitrary SQL commands via the dlid p (no CVSS)
- [CVE-2007-1557](https://cve.now/CVE-2007-1557.md): Format string vulnerability in F-Secure Anti-Virus Client Security 6.02 allows local users to cause a denial of service and possibly gain pr (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-03-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.