# CVEs published 2007-04-16 26 CVEs were published on April 16, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-1558](https://cve.now/CVE-2007-1558.md): The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafte (no CVSS) - [CVE-2007-2042](https://cve.now/CVE-2007-2042.md): Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite 1.0.6 and earlier module for Mambo allow remot (no CVSS) - [CVE-2007-2043](https://cve.now/CVE-2007-2043.md): Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia (com\_mosmedia) 1.08 and earlier module for Mambo an (no CVSS) - [CVE-2007-2044](https://cve.now/CVE-2007-2044.md): PHP remote file inclusion vulnerability in mod\_weather.php in the Antonis Ventouris Weather module for Mambo and Joomla! allows remote attac (no CVSS) - [CVE-2007-2045](https://cve.now/CVE-2007-2045.md): Unspecified vulnerability in the IP implementation in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (CPU consumpt (no CVSS) - [CVE-2007-2046](https://cve.now/CVE-2007-2046.md): Multiple CRLF injection vulnerabilities in adclick.php in (a) Openads (phpAdsNew) 2.0.11 and earlier and (b) Openads for PostgreSQL (phpPgAd (no CVSS) - [CVE-2007-2047](https://cve.now/CVE-2007-2047.md): CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 (aka Max Media Manager, MMM) before 0.3.31-alpha-pr3 allows remote attack (no CVSS) - [CVE-2007-2048](https://cve.now/CVE-2007-2048.md): Directory traversal vulnerability in /console in the Management Console in webMethods Glue 6.5.1 and earlier allows remote attackers to read (no CVSS) - [CVE-2007-2049](https://cve.now/CVE-2007-2049.md): Multiple PHP remote file inclusion vulnerabilities in the Calendar Module (com\_calendar) 1.5.5 for Mambo allow remote attackers to execute a (no CVSS) - [CVE-2007-2050](https://cve.now/CVE-2007-2050.md): Multiple directory traversal vulnerabilities in header.php in RicarGBooK 1.2.1 allow remote attackers to include and execute arbitrary local (no CVSS) - [CVE-2007-2051](https://cve.now/CVE-2007-2051.md): Buffer overflow in the parsecmd function in bftpd before 1.8 has unknown impact and attack vectors related to the confstr variable. (no CVSS) - [CVE-2007-2052](https://cve.now/CVE-2007-2052.md): Off-by-one error in the PyLocale\_strxfrm function in Modules/\_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be us (no CVSS) - [CVE-2007-1745](https://cve.now/CVE-2007-1745.md): The chm\_decompress\_stream function in libclamav/chmunpack.c in Clam AntiVirus (ClamAV) before 0.90.2 leaks file descriptors, which has unkno (no CVSS) - [CVE-2007-1997](https://cve.now/CVE-2007-1997.md): Integer signedness error in the (1) cab\_unstore and (2) cab\_extract functions in libclamav/cab.c in Clam AntiVirus (ClamAV) before 0.90.2 al (no CVSS) - [CVE-2007-2031](https://cve.now/CVE-2007-2031.md): Buffer overflow in the HTTP proxy service for 3proxy 0.5 to 0.5.3g, and 0.6b-devel before 20070413, might allow remote attackers to execute (no CVSS) - [CVE-2007-2032](https://cve.now/CVE-2007-2032.md): Cisco Wireless Control System (WCS) before 4.0.96.0 has a hard-coded FTP username and password for backup operations, which allows remote at (no CVSS) - [CVE-2007-2033](https://cve.now/CVE-2007-2033.md): Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.81.0 allows remote authenticated users to read any configuration (no CVSS) - [CVE-2007-2034](https://cve.now/CVE-2007-2034.md): Unspecified vulnerability in Cisco Wireless Control System (WCS) before 4.0.87.0 allows remote authenticated users to gain the privileges of (no CVSS) - [CVE-2007-2035](https://cve.now/CVE-2007-2035.md): Cisco Wireless Control System (WCS) before 4.0.66.0 stores sensitive information under the web root with insufficient access control, which (no CVSS) - [CVE-2007-2036](https://cve.now/CVE-2007-2036.md): The SNMP implementation in the Cisco Wireless LAN Controller (WLC) before 20070419 uses the default read-only community public, and the defa (no CVSS) - [CVE-2007-2037](https://cve.now/CVE-2007-2037.md): Cisco Wireless LAN Controller (WLC) before 3.2.116.21, and 4.0.x before 4.0.155.0, allows remote attackers on a local network to cause a den (no CVSS) - [CVE-2007-2038](https://cve.now/CVE-2007-2038.md): The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.193.5, 4.0.x before 4.0.206.0, and 4.1.x allows remo (no CVSS) - [CVE-2007-2039](https://cve.now/CVE-2007-2039.md): The Network Processing Unit (NPU) in the Cisco Wireless LAN Controller (WLC) before 3.2.171.5, 4.0.x before 4.0.206.0, and 4.1.x allows remo (no CVSS) - [CVE-2007-2040](https://cve.now/CVE-2007-2040.md): Cisco Aironet 1000 Series and 1500 Series Lightweight Access Points before 3.2.185.0, and 4.0.x before 4.0.206.0, have a hard-coded password (no CVSS) - [CVE-2007-2041](https://cve.now/CVE-2007-2041.md): Cisco Wireless LAN Controller (WLC) before 4.0.206.0 saves the WLAN ACL configuration with an invalid checksum, which prevents WLAN ACLs fro (no CVSS) - [CVE-2007-2030](https://cve.now/CVE-2007-2030.md): lharc.c in lha does not securely create temporary files, which might allow local users to read or write files by creating a file before LHA (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-04-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.