# CVEs published 2007-03-24 20 CVEs were published on March 24, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-1667](https://cve.now/CVE-2007-1667.md): Multiple integer overflows in (1) the XGetPixel function in ImUtil.c in X.Org libx11 before 1.0.3, and (2) XInitImage function in xwd.c for (no CVSS) - [CVE-2007-1465](https://cve.now/CVE-2007-1465.md): Stack-based buffer overflow in dproxy.c for dproxy 0.1 through 0.5 allows remote attackers to execute arbitrary code via a long DNS query pa (no CVSS) - [CVE-2007-1666](https://cve.now/CVE-2007-1666.md): The processor\_request function in the debugger server for DataRescue IDA Pro 5.0 and 5.1 does not verify that authentication has taken place (no CVSS) - [CVE-2007-1658](https://cve.now/CVE-2007-1658.md): Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a (1) local fil (no CVSS) - [CVE-2007-1657](https://cve.now/CVE-2007-1657.md): Stack-based buffer overflow in the file\_compress function in minigzip (Modules/zlib) in Python 2.5 allows context-dependent attackers to exe (no CVSS) - [CVE-2007-1642](https://cve.now/CVE-2007-1642.md): Unspecified vulnerability in ManageEngine Firewall Analyzer allows remote authenticated users to "access any common file" via a direct URL r (no CVSS) - [CVE-2007-1643](https://cve.now/CVE-2007-1643.md): Multiple PHP remote file inclusion vulnerabilities in LAN Management System (LMS) 1.8.9 Vala and earlier allow remote attackers to execute a (no CVSS) - [CVE-2007-1644](https://cve.now/CVE-2007-1644.md): The dynamic DNS update mechanism in the DNS Server service on Microsoft Windows does not properly authenticate clients in certain deployment (no CVSS) - [CVE-2007-1645](https://cve.now/CVE-2007-1645.md): Buffer overflow in FutureSoft TFTP Server 2000 on Microsoft Windows 2000 SP4 allows remote attackers to execute arbitrary code via a long re (no CVSS) - [CVE-2007-1646](https://cve.now/CVE-2007-1646.md): Multiple cross-site scripting (XSS) vulnerabilities in SubHub 2.3.0 allow remote attackers to inject arbitrary web script or HTML via (1) th (no CVSS) - [CVE-2007-1647](https://cve.now/CVE-2007-1647.md): Moodle 1.5.2 and earlier stores sensitive information under the web root with insufficient access control, and provides directory listings, (no CVSS) - [CVE-2007-1648](https://cve.now/CVE-2007-1648.md): 0irc 1345 build 20060823 allows remote attackers to cause a denial of service (application crash) by operating an IRC server that sends a lo (no CVSS) - [CVE-2007-1649](https://cve.now/CVE-2007-1649.md): PHP 5.2.1 allows context-dependent attackers to read portions of heap memory by executing certain scripts with a serialized data input strin (no CVSS) - [CVE-2007-1650](https://cve.now/CVE-2007-1650.md): pcapsipdump.cpp in pcapsipdump before 0.1.3 allows remote attackers to cause a denial of service (application crash) via a malformed SIP pac (no CVSS) - [CVE-2007-1651](https://cve.now/CVE-2007-1651.md): Cross-site request forgery (CSRF) vulnerability in OpenID allows remote attackers to restore the login session of a user on an OpenID enable (no CVSS) - [CVE-2007-1652](https://cve.now/CVE-2007-1652.md): OpenID allows remote attackers to forcibly log a user into an OpenID enabled site, divulge the user's personal information to this site, and (no CVSS) - [CVE-2007-1653](https://cve.now/CVE-2007-1653.md): GlowWorm FW before 1.5.3b4 allows remote attackers to cause a denial of service (kernel panic) via certain DNS responses that trigger infini (no CVSS) - [CVE-2007-1654](https://cve.now/CVE-2007-1654.md): Buffer overflow in the Ne7sshSftp::addOpenHandle function in ne7ssh\_sftp.cpp in NetSieben SSH Library (ne7ssh) before 1.2.1 allows user-assi (no CVSS) - [CVE-2007-1655](https://cve.now/CVE-2007-1655.md): Buffer overflow in the fun\_ladd function in funmath.cpp in TinyMUX before 20070126 might allow remote attackers to cause a denial of service (no CVSS) - [CVE-2007-1656](https://cve.now/CVE-2007-1656.md): Multiple SQL injection vulnerabilities in index.php in Katalog Plyt Audio 1.0 and earlier allow remote attackers to execute arbitrary SQL co (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-03-24 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.