# CVEs published 2007-04-02

35 CVEs were published on April 2, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-1800](https://cve.now/CVE-2007-1800.md): Cisco Secure ACS does not require authentication when Cisco Trust Agent (CTA) transmits posture information, which might allow remote attack (no CVSS)
- [CVE-2007-1801](https://cve.now/CVE-2007-1801.md): Directory traversal vulnerability in inc/lang.php in sBLOG 0.7.3 Beta allows remote attackers to include and execute arbitrary local files v (no CVSS)
- [CVE-2007-1802](https://cve.now/CVE-2007-1802.md): Cross-site scripting (XSS) vulnerability in MailDwarf 3.01 and earlier allows remote attackers to inject arbitrary web script or HTML via un (no CVSS)
- [CVE-2007-1803](https://cve.now/CVE-2007-1803.md): Unspecified vulnerability in MailDwarf 3.01 and earlier allows remote attackers to send e-mail to addresses different from the configured ad (no CVSS)
- [CVE-2007-1804](https://cve.now/CVE-2007-1804.md): PulseAudio 0.9.5 allows remote attackers to cause a denial of service (daemon crash) via (1) a PA\_PSTREAM\_DESCRIPTOR\_LENGTH value of FRAME\_S (no CVSS)
- [CVE-2007-1805](https://cve.now/CVE-2007-1805.md): SQL injection vulnerability in genre.php in the debaser 0.92 and earlier module for Xoops allows remote attackers to execute arbitrary SQL c (no CVSS)
- [CVE-2007-1806](https://cve.now/CVE-2007-1806.md): SQL injection vulnerability in categos.php in the RM+Soft Gallery (rmgallery) 1.0 module for Xoops allows remote attackers to execute arbitr (no CVSS)
- [CVE-2007-1807](https://cve.now/CVE-2007-1807.md): SQL injection vulnerability in modules/myalbum/viewcat.php in the myAlbum-P 2.0 and earlier module for Xoops allows remote attackers to exec (no CVSS)
- [CVE-2007-1808](https://cve.now/CVE-2007-1808.md): SQL injection vulnerability in show.php in the Camportail 1.1 and earlier module for Xoops allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2007-1809](https://cve.now/CVE-2007-1809.md): Multiple PHP remote file inclusion vulnerabilities in GraFX Company WebSite Builder (CWB) PRO 1.5 allow remote attackers to execute arbitrar (no CVSS)
- [CVE-2007-1810](https://cve.now/CVE-2007-1810.md): SQL injection vulnerability in product\_details.php in the Kshop 1.17 and earlier module for Xoops allows remote attackers to execute arbitra (no CVSS)
- [CVE-2007-1811](https://cve.now/CVE-2007-1811.md): SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 and earlier module for Xoops allows remote attackers to execute (no CVSS)
- [CVE-2007-1812](https://cve.now/CVE-2007-1812.md): PHP remote file inclusion vulnerability in utilitaires/gestion\_sondage.php in BT-Sondage 112 allows remote attackers to execute arbitrary PH (no CVSS)
- [CVE-2007-1813](https://cve.now/CVE-2007-1813.md): SQL injection vulnerability in display.php in the eCal 2.24 and earlier module for Xoops allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2007-1814](https://cve.now/CVE-2007-1814.md): SQL injection vulnerability in viewcat.php in the Core module for Xoops allows remote attackers to execute arbitrary SQL commands via the ci (no CVSS)
- [CVE-2007-1815](https://cve.now/CVE-2007-1815.md): SQL injection vulnerability in viewcat.php in the Library module for Xoops allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2007-1816](https://cve.now/CVE-2007-1816.md): SQL injection vulnerability in viewcat.php in the Tutoriais module for Xoops allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2007-1817](https://cve.now/CVE-2007-1817.md): SQL injection vulnerability in index.php in the Lykos Reviews (lykos\_reviews) 1.00 module for Xoops allows remote attackers to execute arbit (no CVSS)
- [CVE-2007-1818](https://cve.now/CVE-2007-1818.md): PHP remote file inclusion vulnerability in MOD\_forum\_fields\_parse.php in the Forum picture and META tags 1.7 module for phpBB allows remote (no CVSS)
- [CVE-2007-1819](https://cve.now/CVE-2007-1819.md): Stack-based buffer overflow in the SPIDERLib.Loader ActiveX control (Spider90.ocx) 9.1.0.4353 in TestDirector (TD) for Mercury Quality Cente (no CVSS)
- [CVE-2007-1820](https://cve.now/CVE-2007-1820.md): Nortel Networks CallPilot and Meridian Mail voicemail systems, when a mailbox has auto logon enabled, allow remote attackers to retrieve or (no CVSS)
- [CVE-2007-1821](https://cve.now/CVE-2007-1821.md): Sprint Nextel Sprint voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling (no CVSS)
- [CVE-2007-1822](https://cve.now/CVE-2007-1822.md): Alcatel-Lucent Lucent Technologies voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by sp (no CVSS)
- [CVE-2007-1823](https://cve.now/CVE-2007-1823.md): T-Mobile voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Iden (no CVSS)
- [CVE-2007-1824](https://cve.now/CVE-2007-1824.md): Buffer overflow in the php\_stream\_filter\_create function in PHP 5 before 5.2.1 allows remote attackers to cause a denial of service (applica (no CVSS)
- [CVE-2007-1825](https://cve.now/CVE-2007-1825.md): Buffer overflow in the imap\_mail\_compose function in PHP 5 before 5.2.1, and PHP 4 before 4.4.5, allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2007-1826](https://cve.now/CVE-2007-1826.md): Unspecified vulnerability in the IPSec Manager Service for Cisco Unified CallManager (CUCM) 5.0 before 5.0(4a)SU1 and Cisco Unified Presence (no CVSS)
- [CVE-2006-5820](https://cve.now/CVE-2006-5820.md): The LinkSBIcons method in the SuperBuddy ActiveX control (Sb.SuperBuddy.1) in America Online 9.0 Security Edition dereferences an arbitrary (no CVSS)
- [CVE-2007-1793](https://cve.now/CVE-2007-1793.md): SPBBCDrv.sys in Symantec Norton Personal Firewall 2006 9.1.0.33 and 9.1.1.7 does not validate certain arguments before being passed to hooke (no CVSS)
- [CVE-2007-1794](https://cve.now/CVE-2007-1794.md): The Javascript engine in Mozilla 1.7 and earlier on Sun Solaris 8, 9, and 10 might allow remote attackers to execute arbitrary code via vect (no CVSS)
- [CVE-2007-1795](https://cve.now/CVE-2007-1795.md): JCcorp URLshrink 1.3.1 allows remote attackers to execute arbitrary PHP code via the email address field in an HTML link. (no CVSS)
- [CVE-2007-1796](https://cve.now/CVE-2007-1796.md): Multiple unspecified vulnerabilities in JCcorp URLshrink before 1.3.2 have unspecified attack vectors and impact. (no CVSS)
- [CVE-2007-1797](https://cve.now/CVE-2007-1797.md): Multiple integer overflows in ImageMagick before 6.3.3-5 allow remote attackers to execute arbitrary code via (1) a crafted DCM image, which (no CVSS)
- [CVE-2007-1798](https://cve.now/CVE-2007-1798.md): Buffer overflow in the drmgr command in IBM AIX 5.2 and 5.3 allows local users to cause a denial of service (crash) and possibly execute arb (no CVSS)
- [CVE-2007-1799](https://cve.now/CVE-2007-1799.md): Directory traversal vulnerability in torrent.cpp in KTorrent before 2.1.3 only checks for the ".." string, which allows remote attackers to (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-04-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.