# CVEs published 2007-03-30

35 CVEs were published on March 30, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2006-7183](https://cve.now/CVE-2006-7183.md): PHP remote file inclusion vulnerability in styles.php in Exhibit Engine (EE) 1.22 and earlier allows remote attackers to execute arbitrary P (no CVSS)
- [CVE-2006-7184](https://cve.now/CVE-2006-7184.md): Multiple PHP remote file inclusion vulnerabilities in Exhibit Engine (EE) 1.22, and possibly earlier, allow remote attackers to execute arbi (no CVSS)
- [CVE-2006-7185](https://cve.now/CVE-2006-7185.md): PHP remote file inclusion vulnerability in includes/user\_standard.php in CMSmelborp Beta allows remote attackers to execute arbitrary PHP co (no CVSS)
- [CVE-2007-0038](https://cve.now/CVE-2007-0038.md): Stack-based buffer overflow in the animated cursor code in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbit (no CVSS)
- [CVE-2006-7181](https://cve.now/CVE-2006-7181.md): Multiple PHP remote file inclusion vulnerabilities in Morcego CMS 0.9.6 and earlier allow remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2006-7182](https://cve.now/CVE-2006-7182.md): PHP remote file inclusion vulnerability in noticias.php in MNews 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2007-1780](https://cve.now/CVE-2007-1780.md): Cross-site scripting (XSS) vulnerability in the DHT shell (owdhtshell) in Overlay Weaver 0.5.9 to 0.5.11, when invoked with the -x option, a (no CVSS)
- [CVE-2007-1781](https://cve.now/CVE-2007-1781.md): Minna De Office 1.x and 2.x does not properly restrict user access to certain privileged actions, which allows local users to change the con (no CVSS)
- [CVE-2007-1782](https://cve.now/CVE-2007-1782.md): CruiseWorks 1.09e and earlier does not properly restrict user access to certain privileged actions, which allows local users to change the c (no CVSS)
- [CVE-2003-1323](https://cve.now/CVE-2003-1323.md): Elm ME+ 2.4 before PL109S, when installed setgid mail and the operating system lacks POSIX saved ID support, allows local users to read and (no CVSS)
- [CVE-2003-1324](https://cve.now/CVE-2003-1324.md): Race condition in the can\_open function in Elm ME+ 2.4, when installed setgid mail and the operating system lacks POSIX saved ID support, al (no CVSS)
- [CVE-2005-4835](https://cve.now/CVE-2005-4835.md): The ath\_rate\_sample function in the ath\_rate/sample/sample.c sample code in MadWifi before 0.9.3 allows remote attackers to cause a denial o (no CVSS)
- [CVE-2006-7177](https://cve.now/CVE-2006-7177.md): MadWifi, when Ad-Hoc mode is used, allows remote attackers to cause a denial of service (system crash) via unspecified vectors that lead to (no CVSS)
- [CVE-2006-7178](https://cve.now/CVE-2006-7178.md): MadWifi before 0.9.3 does not properly handle reception of an AUTH frame by an IBSS node, which allows remote attackers to cause a denial of (no CVSS)
- [CVE-2006-7179](https://cve.now/CVE-2006-7179.md): ieee80211\_input.c in MadWifi before 0.9.3 does not properly process Channel Switch Announcement Information Elements (CSA IEs), which allows (no CVSS)
- [CVE-2006-7180](https://cve.now/CVE-2006-7180.md): ieee80211\_output.c in MadWifi before 0.9.3 sends unencrypted packets before WPA authentication succeeds, which allows remote attackers to ob (no CVSS)
- [CVE-2007-1768](https://cve.now/CVE-2007-1768.md): Cross-site scripting (XSS) vulnerability in app/helpers/application\_helper.rb in Mephisto 0.7.3 and Mephisto Edge 20070325 allows remote att (no CVSS)
- [CVE-2007-1770](https://cve.now/CVE-2007-1770.md): Buffer overflow in the ArcSDE service (giomgr) in Environmental Systems Research Institute (ESRI) ArcGIS before 9.2 Service Pack 2, when usi (no CVSS)
- [CVE-2007-1771](https://cve.now/CVE-2007-1771.md): PHP remote file inclusion vulnerability in manage/javascript/formjavascript.php in Ay System Solutions Web Content System (WCS) 2.7.1 allows (no CVSS)
- [CVE-2007-1772](https://cve.now/CVE-2007-1772.md): The FTP service in HP JetDirect print servers allows remote attackers to cause a denial of service (engine crash) via a RETR command with a (no CVSS)
- [CVE-2007-1773](https://cve.now/CVE-2007-1773.md): Multiple directory traversal vulnerabilities in aBitWhizzy allow remote attackers to list arbitrary directories via a .. (no CVSS)
- [CVE-2007-1774](https://cve.now/CVE-2007-1774.md): Multiple cross-site scripting (XSS) vulnerabilities in aBitWhizzy allow remote attackers to inject arbitrary web script or HTML via the d pa (no CVSS)
- [CVE-2007-1775](https://cve.now/CVE-2007-1775.md): Unrestricted file upload vulnerability in upload.php3 in JBrowser 2.4 and earlier allows remote attackers to upload and execute arbitrary PH (no CVSS)
- [CVE-2007-1776](https://cve.now/CVE-2007-1776.md): SQL injection vulnerability in index.php in the DesignForJoomla.com D4J eZine (com\_ezine) 2.8 and earlier component for Joomla! allows remot (no CVSS)
- [CVE-2007-1777](https://cve.now/CVE-2007-1777.md): Integer overflow in the zip\_read\_entry function in PHP 4 before 4.4.5 allows remote attackers to execute arbitrary code via a ZIP archive th (no CVSS)
- [CVE-2007-1778](https://cve.now/CVE-2007-1778.md): PHP remote file inclusion vulnerability in db/mysql.php in the Eve-Nuke 0.1 (EN-Forums) module for PHP-Nuke allows remote attackers to execu (no CVSS)
- [CVE-2007-1779](https://cve.now/CVE-2007-1779.md): Multiple SQL injection vulnerabilities in the MySQL back-end in Advanced Website Creator (AWC) before 1.9.0 might allow remote attackers to (no CVSS)
- [CVE-2007-1349](https://cve.now/CVE-2007-1349.md): PerlRun.pm in Apache mod\_perl before 1.30, and RegistryCooker.pm in mod\_perl 2.x, does not properly escape PATH\_INFO before use in a regular (no CVSS)
- [CVE-2007-1677](https://cve.now/CVE-2007-1677.md): Multiple buffer overflows in the ISO network protocol support in the NetBSD kernel 2.0 through 4.0\_BETA2, and NetBSD-current before 20070329 (no CVSS)
- [CVE-2007-1762](https://cve.now/CVE-2007-1762.md): Mozilla Firefox 2.0.0.1 through 2.0.0.3 does not canonicalize URLs before checking them against the phishing site blacklist, which allows re (no CVSS)
- [CVE-2007-1763](https://cve.now/CVE-2007-1763.md): The ATI kernel driver (atikmdag.sys) in Microsoft Windows Vista allows user-assisted remote attackers to cause a denial of service (crash) v (no CVSS)
- [CVE-2007-1764](https://cve.now/CVE-2007-1764.md): Stack-based buffer overflow in FastStone Image Viewer 2.8 allows user-assisted remote attackers to execute arbitrary code via a crafted JPG (no CVSS)
- [CVE-2007-1765](https://cve.now/CVE-2007-1765.md): Unspecified vulnerability in Microsoft Windows 2000 SP4 through Vista allows remote attackers to execute arbitrary code or cause a denial of (no CVSS)
- [CVE-2007-1766](https://cve.now/CVE-2007-1766.md): PHP remote file inclusion vulnerability in login/engine/db/profiledit.php in Advanced Login 0.76 and earlier allows remote attackers to exec (no CVSS)
- [CVE-2007-1767](https://cve.now/CVE-2007-1767.md): Unspecified vulnerability in (1) Deskbar.dll and (2) Toolbar.dll in AOL 9.0 before February 2007 allows remote attackers to cause a denial o (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-03-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.