# CVEs published 2007-04-18

85 CVEs were published on April 18, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-2108](https://cve.now/CVE-2007-2108.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.0.1.5, 9.2.0.8, 10.1.0.5, and 10.2.0.2 on Windows allows remote a (no CVSS)
- [CVE-2007-2109](https://cve.now/CVE-2007-2109.md): Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 have unknown impact and remote authenticated attack vectors related to (1) (no CVSS)
- [CVE-2007-2110](https://cve.now/CVE-2007-2110.md): Unspecified vulnerability in the Core RDBMS component for Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.4 on Windows systems has unknown imp (no CVSS)
- [CVE-2007-2111](https://cve.now/CVE-2007-2111.md): SQL injection vulnerability in the SYS.DBMS\_AQADM\_SYS package in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 allows remote authenticated (no CVSS)
- [CVE-2007-2112](https://cve.now/CVE-2007-2112.md): Unspecified vulnerability in the Authentication component for Oracle Database 10.1.0.5 and 10.2.0.3 has unknown impact and attack vectors, a (no CVSS)
- [CVE-2007-2113](https://cve.now/CVE-2007-2113.md): SQL injection vulnerability in the Upgrade/Downgrade component (DBMS\_UPGRADE\_INTERNAL) for Oracle Database 10.1.0.5 allows remote authentica (no CVSS)
- [CVE-2007-2114](https://cve.now/CVE-2007-2114.md): Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.2 have unknown impact and remote authenticated attack vectors, r (no CVSS)
- [CVE-2007-2115](https://cve.now/CVE-2007-2115.md): Unspecified vulnerability in the Change Data Capture (CDC) component in Oracle Database 9.2.0.7, 10.1.0.5, and 10.2.0.2 has unknown impact a (no CVSS)
- [CVE-2007-2116](https://cve.now/CVE-2007-2116.md): Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 has unknown impact and at (no CVSS)
- [CVE-2007-2117](https://cve.now/CVE-2007-2117.md): Unspecified vulnerability in the Oracle Text component in Oracle Database 9.0.1.5+ and 9.2.0.5 has unknown impact and attack vectors, aka DB (no CVSS)
- [CVE-2007-2118](https://cve.now/CVE-2007-2118.md): Unspecified vulnerability in the Upgrade/Downgrade component of Oracle Database 9.0.1.5 and 9.2.0.7 has unknown impact and attack vectors, a (no CVSS)
- [CVE-2007-2119](https://cve.now/CVE-2007-2119.md): Cross-site scripting (XSS) vulnerability in boundary\_rules.jsp in the Administration Front End for Oracle Enterprise (Ultra) Search, as used (no CVSS)
- [CVE-2007-2120](https://cve.now/CVE-2007-2120.md): The Oracle Discoverer servlet in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2.0 allows remote attackers to shut down an Oracl (no CVSS)
- [CVE-2007-2121](https://cve.now/CVE-2007-2121.md): Unspecified vulnerability in the COREid Access component in Oracle Application Server 7.0.4.4 has unknown impact and attack vectors, aka AS0 (no CVSS)
- [CVE-2007-2122](https://cve.now/CVE-2007-2122.md): Unspecified vulnerability in the Wireless component in Oracle Application Server 9.0.4.3 has unknown impact and attack vectors, aka AS03. (no CVSS)
- [CVE-2007-2123](https://cve.now/CVE-2007-2123.md): Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.3 up to 10.1.3.2.0, 10.1.2 up to 10.1.2.2.0, and 9.0.4.3 (no CVSS)
- [CVE-2007-2124](https://cve.now/CVE-2007-2124.md): Unspecified vulnerability in the Portal component in Oracle Application Server 10.1.4.1.0 has unknown impact and remote attack vectors, aka (no CVSS)
- [CVE-2007-2125](https://cve.now/CVE-2007-2125.md): Unspecified vulnerability in Collaborative Workspace in Oracle Collaboration Suite 10.1.2 has unknown impact and attack vectors, aka OCS01. (no CVSS)
- [CVE-2007-2126](https://cve.now/CVE-2007-2126.md): Unspecified vulnerability in Oracle E-Business Suite 11.5.10CU2 has unknown impact and remote attack vectors in the (1) Common Applications (no CVSS)
- [CVE-2007-2127](https://cve.now/CVE-2007-2127.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.0 have unknown impact and remote attack vectors via (1) Application Obj (no CVSS)
- [CVE-2007-2128](https://cve.now/CVE-2007-2128.md): Unspecified vulnerability in the Sales Online component for Oracle E-Business Suite 11.5.10 has unknown impact and remote authenticated atta (no CVSS)
- [CVE-2007-2129](https://cve.now/CVE-2007-2129.md): Unspecified vulnerability in the Agent component in Oracle Enterprise Manager 9.2.0.8 has unknown impact and remote attack vectors, aka EM01 (no CVSS)
- [CVE-2007-2130](https://cve.now/CVE-2007-2130.md): Unspecified vulnerability in Workflow Cartridge, as used in Oracle Database Server 9.2.0.1, 10.1.0.2, and 10.2.0.1; Application Server 9.0.4 (no CVSS)
- [CVE-2007-2131](https://cve.now/CVE-2007-2131.md): Unspecified vulnerability in PeopleTools in Oracle PeopleSoft Enterprise 8.22.14, 8.47.12, and 8.48.08 has unknown impact and attack vectors (no CVSS)
- [CVE-2007-2132](https://cve.now/CVE-2007-2132.md): Unspecified vulnerability in the PeopleTools component in Oracle PeopleSoft Enterprise 8.47.12 and 8.48.08 has unknown impact and attack vec (no CVSS)
- [CVE-2007-2133](https://cve.now/CVE-2007-2133.md): Unspecified vulnerability in the PeopleSoft Enterprise Human Capital Management component in Oracle PeopleSoft Enterprise 8.9 has unknown im (no CVSS)
- [CVE-2007-2134](https://cve.now/CVE-2007-2134.md): Unspecified vulnerability in the HTML Server in Oracle JD Edwards EnterpriseOne SP23\_Q1 and 8.96.I1 has unknown impact and local attack vect (no CVSS)
- [CVE-2006-7194](https://cve.now/CVE-2006-7194.md): PHP remote file inclusion vulnerability in modules/Mysqlfinder/MysqlfinderAdmin.php in Agora 1.4 RC1, when register\_globals is enabled, allo (no CVSS)
- [CVE-2007-2084](https://cve.now/CVE-2007-2084.md): PHP remote file inclusion vulnerability in MobilePublisherphp 1.1.2 allows remote attackers to execute arbitrary PHP code via a URL in the a (no CVSS)
- [CVE-2007-2085](https://cve.now/CVE-2007-2085.md): Cross-site scripting (XSS) vulnerability in oe2edit.cgi in oe2edit CMS allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2007-2086](https://cve.now/CVE-2007-2086.md): Multiple PHP remote file inclusion vulnerabilities in CNStats 2.9 allow remote attackers to execute arbitrary PHP code via a URL in the bj p (no CVSS)
- [CVE-2007-2087](https://cve.now/CVE-2007-2087.md): Multiple PHP remote file inclusion vulnerabilities in CNStats 2.12, when register\_globals is enabled and .htaccess is not recognized, allow (no CVSS)
- [CVE-2007-2088](https://cve.now/CVE-2007-2088.md): Multiple PHP remote file inclusion vulnerabilities in Sitebar 3.3.5 and earlier allow remote attackers to execute arbitrary PHP code via a U (no CVSS)
- [CVE-2007-2089](https://cve.now/CVE-2007-2089.md): Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo and Joomla! allow remot (no CVSS)
- [CVE-2007-2090](https://cve.now/CVE-2007-2090.md): Cross-site scripting (XSS) vulnerability in index.php in TuMusika Evolution 1.6 allows remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2007-2091](https://cve.now/CVE-2007-2091.md): PHP remote file inclusion vulnerability in blocks/tsdisplay4xoops\_block2.php in tsdisplay4xoops (TSD4XOOPS, aka the TeamSpeak display module (no CVSS)
- [CVE-2007-2092](https://cve.now/CVE-2007-2092.md): Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) allows remote attackers to inject arbitr (no CVSS)
- [CVE-2007-2093](https://cve.now/CVE-2007-2093.md): Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) 1.0 allows remote attackers to inject ar (no CVSS)
- [CVE-2007-2094](https://cve.now/CVE-2007-2094.md): PHP remote file inclusion vulnerability in index.php in Anthologia 0.5.2 allows remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2007-2095](https://cve.now/CVE-2007-2095.md): PHP remote file inclusion vulnerability in chat.php in MySpeach 1.9 allows remote attackers to execute arbitrary PHP code via a URL in the m (no CVSS)
- [CVE-2007-2096](https://cve.now/CVE-2007-2096.md): PHP remote file inclusion vulnerability in common.php in Hinton Design PHPHD Download System (phphd\_downloads) allows remote attackers to ex (no CVSS)
- [CVE-2007-2097](https://cve.now/CVE-2007-2097.md): Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End CMS 0.4.7 allow remote attackers to execute arbitrary PHP code vi (no CVSS)
- [CVE-2007-2098](https://cve.now/CVE-2007-2098.md): Multiple cross-site scripting (XSS) vulnerabilities in showpic.php in Wabbit PHP Gallery 0.9 allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2007-2099](https://cve.now/CVE-2007-2099.md): Cross-site scripting (XSS) vulnerability in htdocs/php.php in OpenConcept Back-End CMS 0.4.7 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2007-2100](https://cve.now/CVE-2007-2100.md): FAC Guestbook 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloa (no CVSS)
- [CVE-2007-2101](https://cve.now/CVE-2007-2101.md): FAC Guestbook 3.01 stores sensitive information under the web root with insufficient access control, which allows remote attackers to downlo (no CVSS)
- [CVE-2007-2102](https://cve.now/CVE-2007-2102.md): Cross-site scripting (XSS) vulnerability in weblog.php in my little weblog allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2007-2103](https://cve.now/CVE-2007-2103.md): Multiple PHP remote file inclusion vulnerabilities in my little forum 1.7 allow remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2007-2104](https://cve.now/CVE-2007-2104.md): Multiple directory traversal vulnerabilities in iXon CMS 0.30 allow remote attackers to include and execute arbitrary local files via a .. (no CVSS)
- [CVE-2007-2105](https://cve.now/CVE-2007-2105.md): Directory traversal vulnerability in admin/index.php in Monkey CMS 0.0.3 allows remote attackers to include and execute arbitrary local file (no CVSS)
- [CVE-2007-2106](https://cve.now/CVE-2007-2106.md): Directory traversal vulnerability in index.php in Kai Content Management System (K-CMS) 1.0 allows remote attackers to include and execute a (no CVSS)
- [CVE-2007-2107](https://cve.now/CVE-2007-2107.md): SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS allows remote attackers to execute arbit (no CVSS)
- [CVE-2007-1674](https://cve.now/CVE-2007-1674.md): Stack-based buffer overflow in the Alert Service (aolnsrvr.exe) in LANDesk Management Suite 8.7 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2007-1856](https://cve.now/CVE-2007-1856.md): Vixie Cron before 4.1-r10 on Gentoo Linux is installed with insecure permissions, which allows local users to cause a denial of service (cro (no CVSS)
- [CVE-2007-1869](https://cve.now/CVE-2007-1869.md): lighttpd 1.4.12 and 1.4.13 allows remote attackers to cause a denial of service (cpu and resource consumption) by disconnecting while lightt (no CVSS)
- [CVE-2007-1870](https://cve.now/CVE-2007-1870.md): lighttpd before 1.4.14 allows attackers to cause a denial of service (crash) via a request to a file whose mtime is 0, which results in a NU (no CVSS)
- [CVE-2007-1891](https://cve.now/CVE-2007-1891.md): Stack-based buffer overflow in the GetPrivateProfileSectionW function in Akamai Technologies Download Manager ActiveX Control (DownloadManag (no CVSS)
- [CVE-2007-1892](https://cve.now/CVE-2007-1892.md): Stack-based buffer overflow in Akamai Technologies Download Manager ActiveX Control (DownloadManagerV2.ocx) before 2.2.1.0 allows remote att (no CVSS)
- [CVE-2007-2057](https://cve.now/CVE-2007-2057.md): Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authenticati (no CVSS)
- [CVE-2007-2058](https://cve.now/CVE-2007-2058.md): Directory traversal vulnerability in Acubix PicoZip 4.02 allows user-assisted remote attackers to overwrite arbitrary files via a .. (no CVSS)
- [CVE-2007-2059](https://cve.now/CVE-2007-2059.md): Multiple buffer overflows in the ESA protocol implementation in eIQnetworks Enterprise Security Analyzer (ESA) 2.5 allow remote attackers to (no CVSS)
- [CVE-2007-2060](https://cve.now/CVE-2007-2060.md): Cross-zone scripting vulnerability in the Wizz RSS Reader before 2.1.9 extension to Mozilla Firefox allows remote attackers to execute arbit (no CVSS)
- [CVE-2007-2061](https://cve.now/CVE-2007-2061.md): Cross-site scripting (XSS) vulnerability in check\_login.asp in AfterLogic MailBee WebMail Pro 3.4 allows remote attackers to inject arbitrar (no CVSS)
- [CVE-2007-2062](https://cve.now/CVE-2007-2062.md): Stack-based buffer overflow in VCDGear 3.55 and 3.56 BETA allows user-assisted remote attackers to execute arbitrary code via a long FILE ar (no CVSS)
- [CVE-2007-2063](https://cve.now/CVE-2007-2063.md): SSH Tectia Server for IBM z/OS before 5.4.0 uses insecure world-writable permissions for (1) the server pid file, which allows local users t (no CVSS)
- [CVE-2007-2064](https://cve.now/CVE-2007-2064.md): Multiple PHP remote file inclusion vulnerabilities in Robert Ladstaetter ActionPoll 1.1.0, and possibly 1.1.1, allow remote attackers to exe (no CVSS)
- [CVE-2007-2065](https://cve.now/CVE-2007-2065.md): PHP remote file inclusion vulnerability in db/PollDB.php in Robert Ladstaetter ActionPoll 1.1.1 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2007-2066](https://cve.now/CVE-2007-2066.md): UseBB before 1.0.6 allows remote attackers to obtain sensitive information via a request with unspecified GET or POST parameters to an unspe (no CVSS)
- [CVE-2007-2067](https://cve.now/CVE-2007-2067.md): Multiple PHP remote file inclusion vulnerabilities in Marco Antonio Islas Cruz Web Slider (WebSlider) 0.6 allow remote attackers to execute (no CVSS)
- [CVE-2007-2068](https://cve.now/CVE-2007-2068.md): Multiple PHP remote file inclusion vulnerabilities in the StoreFront mods for Gallery allow remote attackers to execute arbitrary PHP code v (no CVSS)
- [CVE-2007-2069](https://cve.now/CVE-2007-2069.md): Directory traversal vulnerability in scr/soustab.php in openMairie 1.11 and earlier allows remote attackers to include and execute arbitrary (no CVSS)
- [CVE-2007-2070](https://cve.now/CVE-2007-2070.md): Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart before 3.5.1 allow remote attackers to execute (no CVSS)
- [CVE-2007-2071](https://cve.now/CVE-2007-2071.md): Multiple cross-site scripting (XSS) vulnerabilities in Open-gorotto 2.0a 2006/02/08 edition, 2006/03/19 edition, and 2006/04/07 edition befo (no CVSS)
- [CVE-2007-2072](https://cve.now/CVE-2007-2072.md): PHP remote file inclusion vulnerability in index.php in Ivan Gallery Script 0.1 allows remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2007-2073](https://cve.now/CVE-2007-2073.md): PHP remote file inclusion vulnerability in index.php in Ivan Gallery Script 0.3 allows remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2007-2074](https://cve.now/CVE-2007-2074.md): Certain programs in containers in ScramDisk 4 Linux before 1.0-1 execute with SUID permissions, which allows local users to gain privileges (no CVSS)
- [CVE-2007-2075](https://cve.now/CVE-2007-2075.md): ScramDisk 4 Linux before 1.0-1 does not perform permission checks on mount points, which allows local users to gain privileges by using a sy (no CVSS)
- [CVE-2007-2076](https://cve.now/CVE-2007-2076.md): PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2007-2077](https://cve.now/CVE-2007-2077.md): PHP remote file inclusion vulnerability in search.php in Maian Search 1.1 allows remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2007-2078](https://cve.now/CVE-2007-2078.md): PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2007-2079](https://cve.now/CVE-2007-2079.md): The ADONewConnection Connect function in adodb.php in XAMPP 1.6.0a and earlier for Windows uses untrusted input for the database server host (no CVSS)
- [CVE-2007-2080](https://cve.now/CVE-2007-2080.md): Multiple SQL injection vulnerabilities in XAMPP 1.6.0a for Windows allow remote attackers to execute arbitrary SQL commands via unspecified (no CVSS)
- [CVE-2007-2081](https://cve.now/CVE-2007-2081.md): MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication requirements via the admin cookie parameter to certain admin files (no CVSS)
- [CVE-2007-2082](https://cve.now/CVE-2007-2082.md): Direct static code injection vulnerability in admin/settings.php in MyBlog 0.9.8 and earlier allows remote authenticated admin users to inje (no CVSS)
- [CVE-2007-2083](https://cve.now/CVE-2007-2083.md): vsdatant.sys in Check Point Zone Labs ZoneAlarm Pro before 7.0.302.000 does not validate certain arguments before being passed to hooked SSD (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-04-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.