# CVEs published 2007-03-26

4 CVEs were published on March 26, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2006-4175](https://cve.now/CVE-2006-4175.md): The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote att (no CVSS)
- [CVE-2007-1678](https://cve.now/CVE-2007-1678.md): Cross-site scripting (XSS) vulnerability in the Fizzle 0.5 extension for Firefox allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2007-1679](https://cve.now/CVE-2007-1679.md): Multiple cross-site scripting (XSS) vulnerabilities in Horde Groupware Webmail 1.0 allow remote authenticated users to inject arbitrary web (CVSS 5.4)
- [CVE-2007-1692](https://cve.now/CVE-2007-1692.md): The default configuration of Microsoft Windows uses the Web Proxy Autodiscovery Protocol (WPAD) without static WPAD entries, which might all (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-03-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.