# CVEs published 2007-05-08 24 CVEs were published on May 8, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-0039](https://cve.now/CVE-2007-0039.md): The Exchange Collaboration Data Objects (EXCDO) functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remot (no CVSS) - [CVE-2007-0213](https://cve.now/CVE-2007-0213.md): Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, which allows remote at (no CVSS) - [CVE-2007-0220](https://cve.now/CVE-2007-0220.md): Cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) in Microsoft Exchange Server 2000 SP3, and 2003 SP1 and SP2 allows remo (no CVSS) - [CVE-2007-0221](https://cve.now/CVE-2007-0221.md): Integer overflow in the IMAP (IMAP4) support in Microsoft Exchange Server 2000 SP3 allows remote attackers to cause a denial of service (ser (no CVSS) - [CVE-2007-0323](https://cve.now/CVE-2007-0323.md): Buffer overflow in the SetLanguage function in Research In Motion (RIM) TeamOn Import Object ActiveX control (TOImport.dll) allows remote at (no CVSS) - [CVE-2007-0940](https://cve.now/CVE-2007-0940.md): Unspecified vulnerability in the Cryptographic API Component Object Model Certificates ActiveX control (CAPICOM.dll) in Microsoft CAPICOM an (no CVSS) - [CVE-2007-0942](https://cve.now/CVE-2007-0942.md): Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 o (no CVSS) - [CVE-2007-0944](https://cve.now/CVE-2007-0944.md): Unspecified vulnerability in the CTableCol::OnPropertyChange method in Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Wi (no CVSS) - [CVE-2007-0945](https://cve.now/CVE-2007-0945.md): Microsoft Internet Explorer 6 SP1 on Windows 2000 SP4; 6 and 7 on Windows XP SP2, or Windows Server 2003 SP1 or SP2; and 7 on Windows Vista (no CVSS) - [CVE-2007-0946](https://cve.now/CVE-2007-0946.md): Unspecified vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows remote (no CVSS) - [CVE-2007-0947](https://cve.now/CVE-2007-0947.md): Use-after-free vulnerability in Microsoft Internet Explorer 7 on Windows XP SP2, Windows Server 2003 SP1 or SP2, or Windows Vista allows rem (no CVSS) - [CVE-2007-1202](https://cve.now/CVE-2007-1202.md): Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly p (no CVSS) - [CVE-2007-1747](https://cve.now/CVE-2007-1747.md): Unspecified vulnerability in MSO.dll in Microsoft Office 2000 SP3, 2002 SP3, 2003 SP2, 2004 for Mac, and 2007 allows user-assisted remote at (no CVSS) - [CVE-2007-2221](https://cve.now/CVE-2007-2221.md): Unspecified vulnerability in the mdsauth.dll COM object in Microsoft Windows Media Server in the Microsoft Internet Explorer 5.01 SP4 on Win (no CVSS) - [CVE-2007-2508](https://cve.now/CVE-2007-2508.md): Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute (no CVSS) - [CVE-2007-2524](https://cve.now/CVE-2007-2524.md): Cross-site scripting (XSS) vulnerability in index.pl in Open Ticket Request System (OTRS) 2.0.x allows remote attackers to inject arbitrary (no CVSS) - [CVE-2007-2525](https://cve.now/CVE-2007-2525.md): Memory leak in the PPP over Ethernet (PPPoE) socket implementation in the Linux kernel before 2.6.21-git8 allows local users to cause a deni (no CVSS) - [CVE-2007-2526](https://cve.now/CVE-2007-2526.md): Heap-based buffer overflow in the ConnectAsyncEx function in VNC Viewer ActiveX control (scvncctrl.dll) in the SmartCode VNC Manager 3.6 all (no CVSS) - [CVE-2007-2527](https://cve.now/CVE-2007-2527.md): Multiple PHP remote file inclusion vulnerabilities in DynamicPAD before 1.03.31 allow remote attackers to execute arbitrary PHP code via a U (no CVSS) - [CVE-2007-2528](https://cve.now/CVE-2007-2528.md): Buffer overflow in AgRpcCln.dll for Trend Micro ServerProtect 5.58 for Windows before Security Patch 3 Build 1176 allows remote attackers to (no CVSS) - [CVE-2007-0035](https://cve.now/CVE-2007-0035.md): Word (or Word Viewer) in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, 2004 for Mac, and Works Suite 2004, 2005, and 2006 does not properly h (no CVSS) - [CVE-2007-1203](https://cve.now/CVE-2007-1203.md): Unspecified vulnerability in Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, 2004 for Mac, and 2007 allows user-assisted remote a (no CVSS) - [CVE-2007-1214](https://cve.now/CVE-2007-1214.md): Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and 2004 for Mac allows user-assisted remote attackers to execute arbitrary code (no CVSS) - [CVE-2007-2521](https://cve.now/CVE-2007-2521.md): PHP remote file inclusion vulnerability in common.php in E-GADS! before 2.2.7 allows remote attackers to execute arbitrary PHP code via a UR (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-05-08 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.