# CVEs published 2007-03-28

24 CVEs were published on March 28, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-1733](https://cve.now/CVE-2007-1733.md): Buffer overflow in InterVations NaviCOPA HTTP Server 2.01 allows remote attackers to execute arbitrary code via a long (1) /cgi-bin/ or (2) (no CVSS)
- [CVE-2007-1734](https://cve.now/CVE-2007-1734.md): The DCCP support in the do\_dccp\_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later does not verify the upper bounds of (no CVSS)
- [CVE-2007-1735](https://cve.now/CVE-2007-1735.md): Stack-based buffer overflow in Corel WordPerfect Office X3 (13.0.0.565) allows user-assisted remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2007-1736](https://cve.now/CVE-2007-1736.md): Mozilla Firefox 2.0.0.3 does not check URLs embedded in (1) object or (2) iframe HTML tags against the phishing site blacklist, which allows (no CVSS)
- [CVE-2007-1737](https://cve.now/CVE-2007-1737.md): Opera 9.10 does not check URLs embedded in (1) object or (2) iframe HTML tags against the phishing site blacklist, which allows remote attac (no CVSS)
- [CVE-2007-1738](https://cve.now/CVE-2007-1738.md): TrueCrypt 4.3, when installed setuid root, allows local users to cause a denial of service (filesystem unavailability) or gain privileges by (no CVSS)
- [CVE-2007-1739](https://cve.now/CVE-2007-1739.md): Heap-based buffer overflow in the LDAP server in IBM Lotus Domino before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to cause a d (no CVSS)
- [CVE-2007-1675](https://cve.now/CVE-2007-1675.md): Buffer overflow in the CRAM-MD5 authentication mechanism in the IMAP server (nimap.exe) in IBM Lotus Domino before 6.5.6 and 7.x before 7.0. (no CVSS)
- [CVE-2007-1732](https://cve.now/CVE-2007-1732.md): Cross-site scripting (XSS) vulnerability in an mt import in wp-admin/admin.php in WordPress 2.1.2 allows remote authenticated administrators (no CVSS)
- [CVE-2007-1725](https://cve.now/CVE-2007-1725.md): SQL injection vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to execute arbitrary SQL commands via the filena (no CVSS)
- [CVE-2007-1726](https://cve.now/CVE-2007-1726.md): Unrestricted file upload vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to upload arbitrary files via the ava (no CVSS)
- [CVE-2007-1727](https://cve.now/CVE-2007-1727.md): Unspecified vulnerability in HP OpenView Network Node Manager (OV NNM) 6.20, 6.4x, 7.01, 7.50, and 7.51 allows remote authenticated users to (no CVSS)
- [CVE-2007-1728](https://cve.now/CVE-2007-1728.md): The Remote Play feature in Sony Playstation 3 (PS3) 1.60 and Playstation Portable (PSP) 3.10 OE-A allows remote attackers to cause a denial (no CVSS)
- [CVE-2007-1729](https://cve.now/CVE-2007-1729.md): SQL injection vulnerability in includes/start.php in Flexbb 1.0.0 10005 Beta Release 1 allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2007-1730](https://cve.now/CVE-2007-1730.md): Integer signedness error in the DCCP support in the do\_dccp\_getsockopt function in net/dccp/proto.c in Linux kernel 2.6.20 and later allows (no CVSS)
- [CVE-2007-1731](https://cve.now/CVE-2007-1731.md): Multiple stack-based buffer overflows in High Performance Anonymous FTP Server (hpaftpd) 1.01 allow remote attackers to execute arbitrary co (no CVSS)
- [CVE-2007-1717](https://cve.now/CVE-2007-1717.md): The mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 truncates e-mail messages at the first ASCIIZ ('\\0') byte, which might (no CVSS)
- [CVE-2007-1718](https://cve.now/CVE-2007-1718.md): CRLF injection vulnerability in the mail function in PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows remote attackers to inject arbit (no CVSS)
- [CVE-2007-1719](https://cve.now/CVE-2007-1719.md): Buffer overflow in eject.c in Jason W. (no CVSS)
- [CVE-2007-1720](https://cve.now/CVE-2007-1720.md): Directory traversal vulnerability in addressbook.php in the Addressbook 1.2 module for PHP-Nuke allows remote attackers to include and execu (no CVSS)
- [CVE-2007-1721](https://cve.now/CVE-2007-1721.md): Multiple PHP remote file inclusion vulnerabilities in C-Arbre 0.6PR7 and earlier allow remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2007-1722](https://cve.now/CVE-2007-1722.md): Buffer overflow in the DownloadCertificateExt function in SignKorea SKCommAX ActiveX control module 7.2.0.2 and 3280 6.6.0.1 allows remote a (no CVSS)
- [CVE-2007-1723](https://cve.now/CVE-2007-1723.md): Multiple cross-site scripting (XSS) vulnerabilities in the administration console in Secure Computing CipherTrust IronMail 6.1.1 allow remot (no CVSS)
- [CVE-2007-1724](https://cve.now/CVE-2007-1724.md): Unspecified vulnerability in ReactOS 0.3.1 has unknown impact and attack vectors, related to a fix for "dozens of win32k bugs and failures," (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-03-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.