# CVEs published 2007-04-06

26 CVEs were published on April 6, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-0956](https://cve.now/CVE-2007-0956.md): The telnet daemon (telnetd) in MIT krb5 before 1.6.1 allows remote attackers to bypass authentication and gain system access via a username (no CVSS)
- [CVE-2007-0957](https://cve.now/CVE-2007-0957.md): Stack-based buffer overflow in the krb5\_klog\_syslog function in the kadm5 library, as used by the Kerberos administration daemon (kadmind) a (no CVSS)
- [CVE-2007-1003](https://cve.now/CVE-2007-1003.md): Integer overflow in ALLOCATE\_LOCAL in the ProcXCMiscGetXIDList function in the XC-MISC extension in the X.Org X11 server (xserver) 7.1-1.1.0 (no CVSS)
- [CVE-2007-1216](https://cve.now/CVE-2007-1216.md): Double free vulnerability in the GSS-API library (lib/gssapi/krb5/k5unseal.c), as used by the Kerberos administration daemon (kadmind) in MI (no CVSS)
- [CVE-2007-1351](https://cve.now/CVE-2007-1351.md): Integer overflow in the bdfReadCharacters function in bdfread.c in (1) X.Org libXfont before 20070403 and (2) freetype 2.3.2 and earlier all (no CVSS)
- [CVE-2007-1352](https://cve.now/CVE-2007-1352.md): Integer overflow in the FontFileInitTable function in X.Org libXfont before 20070403 allows remote authenticated users to execute arbitrary (no CVSS)
- [CVE-2007-1680](https://cve.now/CVE-2007-1680.md): Stack-based buffer overflow in the createAndJoinConference function in the AudioConf ActiveX control (yacscom.dll) in Yahoo! Messenger befor (no CVSS)
- [CVE-2007-1684](https://cve.now/CVE-2007-1684.md): The Run function in SolidWorks sldimdownload ActiveX control in sldimdownload.dll before 16.0.0.6 allows remote attackers to execute arbitra (no CVSS)
- [CVE-2007-1882](https://cve.now/CVE-2007-1882.md): qcbin/servlet/tdservlet/TDAPI\_GeneralWebTreatment in HP Mercury Quality Center 9.0 build 9.1.0.4352 allows remote authenticated users to exe (no CVSS)
- [CVE-2007-1883](https://cve.now/CVE-2007-1883.md): PHP 4.0.0 through 4.4.6 and 5.0.0 through 5.2.1 allows context-dependent attackers to read arbitrary memory locations via an interruption th (no CVSS)
- [CVE-2007-1884](https://cve.now/CVE-2007-1884.md): Multiple integer signedness errors in the printf function family in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 on 64 bit machines allow conte (no CVSS)
- [CVE-2007-1885](https://cve.now/CVE-2007-1885.md): Integer overflow in the str\_replace function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows context-dependent attackers to execute arbi (no CVSS)
- [CVE-2007-1886](https://cve.now/CVE-2007-1886.md): Integer overflow in the str\_replace function in PHP 4.4.5 and PHP 5.2.1 allows context-dependent attackers to have an unknown impact via a s (no CVSS)
- [CVE-2007-1887](https://cve.now/CVE-2007-1887.md): Buffer overflow in the sqlite\_decode\_binary function in the bundled sqlite library in PHP 4 before 4.4.5 and PHP 5 before 5.2.1 allows conte (no CVSS)
- [CVE-2007-1888](https://cve.now/CVE-2007-1888.md): Buffer overflow in the sqlite\_decode\_binary function in src/encode.c in SQLite 2, as used by PHP 4.x through 5.x and other applications, all (no CVSS)
- [CVE-2007-1889](https://cve.now/CVE-2007-1889.md): Integer signedness error in the \_zend\_mm\_alloc\_int function in the Zend Memory Manager in PHP 5.2.0 allows remote attackers to execute arbit (no CVSS)
- [CVE-2007-1890](https://cve.now/CVE-2007-1890.md): Integer overflow in the msg\_receive function in PHP 4 before 4.4.5 and PHP 5 before 5.2.1, on FreeBSD and possibly other platforms, allows c (no CVSS)
- [CVE-2007-0445](https://cve.now/CVE-2007-0445.md): Heap-based buffer overflow in the arj.ppl module in the OnDemand Scanner in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Viru (no CVSS)
- [CVE-2007-1001](https://cve.now/CVE-2007-1001.md): Multiple integer overflows in the (1) createwbmp and (2) readwbmp functions in wbmp.c in the GD library (libgd) in PHP 4.0.0 through 4.4.6 a (no CVSS)
- [CVE-2007-1112](https://cve.now/CVE-2007-1112.md): Kaspersky Anti-Virus 6.0 and Internet Security 6.0 exposes unsafe methods in the (a) AXKLPROD60Lib.KAV60Info (AxKLProd60.dll) and (b) AXKLSY (no CVSS)
- [CVE-2007-1270](https://cve.now/CVE-2007-1270.md): Double free vulnerability in VMware ESX Server 3.0.0 and 3.0.1 allows attackers to cause a denial of service (crash), obtain sensitive infor (no CVSS)
- [CVE-2007-1271](https://cve.now/CVE-2007-1271.md): Buffer overflow in VMware ESX Server 3.0.0 and 3.0.1 might allow attackers to gain privileges or cause a denial of service (application cras (no CVSS)
- [CVE-2007-1878](https://cve.now/CVE-2007-1878.md): Cross-zone scripting vulnerability in the DOM templates (domplates) used by the console.log function in the Firebug extension before 1.03 fo (no CVSS)
- [CVE-2007-1879](https://cve.now/CVE-2007-1879.md): The StartUploading function in KL.SysInfo ActiveX control (AxKLSysInfo.dll) in Kaspersky Anti-Virus 6.0 and Internet Security 6.0 before Mai (no CVSS)
- [CVE-2007-1880](https://cve.now/CVE-2007-1880.md): Integer overflow in the \_NtSetValueKey function in klif.sys in Kaspersky Anti-Virus, Anti-Virus for Workstations, Anti-Virus for File Server (no CVSS)
- [CVE-2007-1881](https://cve.now/CVE-2007-1881.md): Unspecified vulnerability in KLIF (klif.sys) in Kaspersky Anti-Virus, Anti-Virus for Workstations, and Anti-Virus for File Servers 6.0, and (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-04-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.