# CVEs published 2007-03-31

8 CVEs were published on March 31, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-1786](https://cve.now/CVE-2007-1786.md): SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Po (no CVSS)
- [CVE-2007-1787](https://cve.now/CVE-2007-1787.md): Multiple PHP remote file inclusion vulnerabilities in lib/timesheet.class.php in Softerra Time-Assistant 6.2 and earlier, when register\_glob (no CVSS)
- [CVE-2007-1788](https://cve.now/CVE-2007-1788.md): Flyspray 0.9.9, when output\_buffering is disabled or "set to a low value," allows remote attackers to bypass authentication via a crafted po (no CVSS)
- [CVE-2007-1789](https://cve.now/CVE-2007-1789.md): Flyspray 0.9.9 allows remote attackers to obtain sensitive information (private project summaries) via direct requests. (no CVSS)
- [CVE-2007-1790](https://cve.now/CVE-2007-1790.md): Multiple PHP remote file inclusion vulnerabilities in Kaqoo Auction Software Free Edition allow remote attackers to execute arbitrary PHP co (no CVSS)
- [CVE-2007-1791](https://cve.now/CVE-2007-1791.md): SQL injection vulnerability in wall.php in Picture-Engine 1.2.0 and earlier allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2007-1784](https://cve.now/CVE-2007-1784.md): The JNILoader ActiveX control (STJNILoader.ocx) 3.1.0.26 in IBM Lotus Notes Sametime before 7.5 allows remote attackers to load arbitrary DL (no CVSS)
- [CVE-2007-1785](https://cve.now/CVE-2007-1785.md): The RPC service in mediasvr.exe in CA BrightStor ARCserve Backup 11.5 SP2 build 4237 allows remote attackers to execute arbitrary code via c (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-03-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.