# CVEs published 2007-04-19

23 CVEs were published on April 19, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-1009](https://cve.now/CVE-2007-1009.md): Macrovision InstallAnywhere Enterprise before 8.0.1 uses the InstallScript.iap\_xml configuration file without integrity protection to verify (no CVSS)
- [CVE-2007-1681](https://cve.now/CVE-2007-1681.md): Format string vulnerability in libwebconsole\_services.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a deni (no CVSS)
- [CVE-2007-1690](https://cve.now/CVE-2007-1690.md): Multiple stack-based buffer overflows in Second Sight Software ActiveGS ActiveX control (ActiveGS.ocx) allow remote attackers to execute arb (no CVSS)
- [CVE-2007-1691](https://cve.now/CVE-2007-1691.md): Stack-based buffer overflow in Second Sight Software ActiveMod ActiveX control (ActiveMod.ocx) allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2007-2140](https://cve.now/CVE-2007-2140.md): PHP remote file inclusion vulnerability in everything.php in Franklin Huang Flip (aka Flip-search-add-on) 2.0 allows remote attackers to exe (no CVSS)
- [CVE-2007-2141](https://cve.now/CVE-2007-2141.md): Direct static code injection vulnerability in shoutbox.php in ShoutPro 1.5.2 allows remote attackers to inject arbitrary PHP code into shout (no CVSS)
- [CVE-2007-2142](https://cve.now/CVE-2007-2142.md): Multiple PHP remote file inclusion vulnerabilities in AjPortal2Php allow remote attackers to execute arbitrary PHP code via a URL in the Pag (no CVSS)
- [CVE-2007-2143](https://cve.now/CVE-2007-2143.md): PHP remote file inclusion vulnerability in index.php in the Be2004-2 template for Joomla! allows remote attackers to execute arbitrary PHP c (no CVSS)
- [CVE-2007-2144](https://cve.now/CVE-2007-2144.md): PHP remote file inclusion vulnerability in includes/CAltInstaller.php in the JoomlaPack (com\_jpack) 1.0.4a2 RE component for Joomla! allows (no CVSS)
- [CVE-2007-2145](https://cve.now/CVE-2007-2145.md): The imagecomments function in classes.php in MiniGal b13 allows remote attackers to inject arbitrary PHP code into a file in the thumbs/ dir (no CVSS)
- [CVE-2007-2146](https://cve.now/CVE-2007-2146.md): The imagecomments function in classes.php in MiniGal b13 allow remote attackers to inject arbitrary PHP code into a file in the thumbs/ dire (no CVSS)
- [CVE-2007-2147](https://cve.now/CVE-2007-2147.md): admin/options.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier does not check for administrative credentials, which allows re (no CVSS)
- [CVE-2007-2148](https://cve.now/CVE-2007-2148.md): Direct static code injection vulnerability in admin/save.php in Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier allows remote authe (no CVSS)
- [CVE-2007-2149](https://cve.now/CVE-2007-2149.md): Stephen Craton (aka WiredPHP) Chatness 2.5.3 and earlier stores usernames and unencrypted passwords in (1) classes/vars.php and (2) classes/ (no CVSS)
- [CVE-2007-2150](https://cve.now/CVE-2007-2150.md): BlueArc-FTPD in BlueArc Titan 2x00 devices with firmware 4.2.944b allows remote attackers to redirect traffic to other sites (aka FTP bounce (no CVSS)
- [CVE-2007-2151](https://cve.now/CVE-2007-2151.md): The administration server in McAfee e-Business Server before 8.1.1 and 8.5.x before 8.5.2 allows remote attackers to cause a denial of servi (no CVSS)
- [CVE-2007-2152](https://cve.now/CVE-2007-2152.md): Buffer overflow in the On-Access Scanner in McAfee VirusScan Enterprise before 8.0i Patch 12 allows user-assisted remote attackers to execut (no CVSS)
- [CVE-2007-2153](https://cve.now/CVE-2007-2153.md): Cross-site scripting (XSS) vulnerability in atmail.php in @Mail 5.0 allows remote attackers to inject arbitrary web script or HTML via the u (no CVSS)
- [CVE-2007-2154](https://cve.now/CVE-2007-2154.md): PHP remote file inclusion vulnerability in services/samples/inclusionService.php in Cabron Connector 1.1.0 allows remote attackers to execut (no CVSS)
- [CVE-2007-2155](https://cve.now/CVE-2007-2155.md): Directory traversal vulnerability in template.php in in phpFaber TopSites 3 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2007-2156](https://cve.now/CVE-2007-2156.md): Multiple PHP remote file inclusion vulnerabilities in Rezervi Generic 0.9 allow remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2007-2157](https://cve.now/CVE-2007-2157.md): Directory traversal vulnerability in upload/force\_download.php in Zomplog 3.8 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2007-2158](https://cve.now/CVE-2007-2158.md): PHP remote file inclusion vulnerability in index.php in jGallery 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-04-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.