# CVEs published 2007-05-11

47 CVEs were published on May 11, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-2624](https://cve.now/CVE-2007-2624.md): Dynamic variable evaluation vulnerability in shared/config/cp\_config.php in All In One Control Panel (AIOCP) before 1.3.016 allows remote at (no CVSS)
- [CVE-2007-2625](https://cve.now/CVE-2007-2625.md): Cross-site scripting (XSS) vulnerability in shared/code/cp\_authorization.php in All In One Control Panel (AIOCP) before 1.3.016 allows remot (no CVSS)
- [CVE-2007-2626](https://cve.now/CVE-2007-2626.md): SQL injection vulnerability in admin.php in SchoolBoard allows remote attackers to execute arbitrary SQL commands via the (1) username and ( (no CVSS)
- [CVE-2007-2627](https://cve.now/CVE-2007-2627.md): Cross-site scripting (XSS) vulnerability in sidebar.php in WordPress, when custom 404 pages that call get\_sidebar are used, allows remote at (no CVSS)
- [CVE-2007-2628](https://cve.now/CVE-2007-2628.md): PHP remote file inclusion vulnerability in include/logout.php in Justin Koivisto SecurityAdmin for PHP (aka PHPSecurityAdmin, PSA) 4.0.2 all (no CVSS)
- [CVE-2007-2629](https://cve.now/CVE-2007-2629.md): Bradford CampusManager Network Control Application Server 3.1(6) allows remote attackers to obtain sensitive information (backup, log, and c (no CVSS)
- [CVE-2007-2630](https://cve.now/CVE-2007-2630.md): Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in the FCKeditor module, as used in ActiveCampai (no CVSS)
- [CVE-2007-2616](https://cve.now/CVE-2007-2616.md): Stack-based buffer overflow in the SSL version of the NMDMC.EXE service in Novell NetMail 3.52e FTF2 and probably earlier allows remote atta (no CVSS)
- [CVE-2007-2617](https://cve.now/CVE-2007-2617.md): srsexec in Sun Remote Services (SRS) Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when openin (no CVSS)
- [CVE-2007-2618](https://cve.now/CVE-2007-2618.md): CRLF injection vulnerability in index.php in Drake CMS 0.4.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP respo (no CVSS)
- [CVE-2007-2619](https://cve.now/CVE-2007-2619.md): Symantec pcAnywhere 11.5.x and 12.0.x retains unencrypted login credentials for the most recent login within process memory, which allows lo (no CVSS)
- [CVE-2007-2620](https://cve.now/CVE-2007-2620.md): PHP remote file inclusion vulnerability in inc/config.inc.php in Jakub Steiner (aka jimmac) original 0.11 allows remote attackers to execute (no CVSS)
- [CVE-2007-2621](https://cve.now/CVE-2007-2621.md): SQL injection vulnerability in event\_view.php in Thyme Calendar 1.3 allows remote attackers to execute arbitrary SQL commands via the eid pa (no CVSS)
- [CVE-2007-2622](https://cve.now/CVE-2007-2622.md): Multiple SQL injection vulnerabilities in TaskDriver 1.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the us (no CVSS)
- [CVE-2007-2623](https://cve.now/CVE-2007-2623.md): Multiple buffer overflows in RControl.dll in Remote Display Dev kit 1.2.1.0 allow remote attackers to cause a denial of service (Internet Ex (no CVSS)
- [CVE-2006-3456](https://cve.now/CVE-2006-3456.md): The Symantec NAVOPTS.DLL ActiveX control (aka Symantec.Norton.AntiVirus.NAVOptions) 12.2.0.13, as used in Norton AntiVirus, Internet Securit (no CVSS)
- [CVE-2007-2594](https://cve.now/CVE-2007-2594.md): PHP remote file inclusion vulnerability in inc/articles.inc.php in phpMyPortal 3.0.0 RC3 allows remote attackers to execute arbitrary PHP co (no CVSS)
- [CVE-2007-2595](https://cve.now/CVE-2007-2595.md): RSAuction 2.73.1.3 allows remote authenticated users to move their own account status from Suspended to Active via a direct request for the (no CVSS)
- [CVE-2007-2596](https://cve.now/CVE-2007-2596.md): PHP remote file inclusion vulnerability in common/func.php in aForum 1.32 and earlier allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2007-2597](https://cve.now/CVE-2007-2597.md): Multiple PHP remote file inclusion vulnerabilities in telltarget CMS 1.3.3 allow remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2007-2598](https://cve.now/CVE-2007-2598.md): SQL injection vulnerability in print.php in SimpleNews 1.0.0 FINAL allows remote attackers to execute arbitrary SQL commands via the news\_id (no CVSS)
- [CVE-2007-2599](https://cve.now/CVE-2007-2599.md): Multiple SQL injection vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2007-2600](https://cve.now/CVE-2007-2600.md): Multiple cross-site scripting (XSS) vulnerabilities in TutorialCMS (aka Photoshop Tutorials) 1.00 and earlier allow remote attackers to inje (no CVSS)
- [CVE-2007-2601](https://cve.now/CVE-2007-2601.md): Buffer overflow in a certain ActiveX control in the GDivX Zenith Player AviFixer class in fix.dll 1.0.0.1 allows remote attackers to execute (no CVSS)
- [CVE-2007-2602](https://cve.now/CVE-2007-2602.md): Buffer overflow in MIBEXTRA.EXE in Ipswitch WhatsUp Gold 11 allows attackers to cause a denial of service (application crash) or execute arb (no CVSS)
- [CVE-2007-2603](https://cve.now/CVE-2007-2603.md): Unspecified vulnerability in the Init function in the Audio CD Ripper OCX (AudioCDRipperOCX.ocx) 1.0 ActiveX control allows remote attackers (no CVSS)
- [CVE-2007-2604](https://cve.now/CVE-2007-2604.md): Unspecified vulnerability in the FlexLabel ActiveX control allows remote attackers to cause a denial of service (unstable behavior) via an i (no CVSS)
- [CVE-2007-2605](https://cve.now/CVE-2007-2605.md): Unspecified vulnerability in the GetPropertyById function in ISoftomateObj in SoftomateLib in BRUJULA4.NET.DLL in the Brujula Toolbar (Bruju (no CVSS)
- [CVE-2007-2606](https://cve.now/CVE-2007-2606.md): Multiple buffer overflows in Firebird 2.1 allow attackers to trigger memory corruption and possibly have other unspecified impact via certai (no CVSS)
- [CVE-2007-2607](https://cve.now/CVE-2007-2607.md): PHP remote file inclusion vulnerability in views/print/printbar.php in LaVague 0.3 and earlier allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2007-2608](https://cve.now/CVE-2007-2608.md): PHP remote file inclusion vulnerability in lib/smarty/SmartyFU.class.php in Miplex2 Alpha 1 allows remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2007-2609](https://cve.now/CVE-2007-2609.md): Multiple PHP remote file inclusion vulnerabilities in gnuedu 1.3b2 allow remote attackers to execute arbitrary PHP code via a URL in the (a) (no CVSS)
- [CVE-2007-2610](https://cve.now/CVE-2007-2610.md): Cross-site scripting (XSS) vulnerability in OpenLD before 1.1.9, and 1.1-modified before 1.1-modified3, allows remote attackers to inject ar (no CVSS)
- [CVE-2007-2611](https://cve.now/CVE-2007-2611.md): Multiple PHP remote file inclusion vulnerabilities in CGX 20050314 allow remote attackers to execute arbitrary PHP code via a URL in the pat (no CVSS)
- [CVE-2007-2612](https://cve.now/CVE-2007-2612.md): SQL injection vulnerability in libs/Wakka.class.php in WikkaWiki (Wikka Wiki) before 1.1.6.3 allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2007-2613](https://cve.now/CVE-2007-2613.md): WikkaWiki (Wikka Wiki) before 1.1.6.3 allows attackers in a shared virtual host server environment to upload and execute an arbitrary config (no CVSS)
- [CVE-2007-2614](https://cve.now/CVE-2007-2614.md): PHP remote file inclusion vulnerability in examples/widget8.php in phpHtmlLib 2.4.0 and earlier allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2007-2615](https://cve.now/CVE-2007-2615.md): Multiple PHP remote file inclusion vulnerabilities in Crie seu PHPLojaFacil 0.1.5 allow remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2007-0244](https://cve.now/CVE-2007-0244.md): pptpgre.c in PoPToP Point to Point Tunneling Server (pptpd) before 1.3.4 allows remote attackers to cause a denial of service (PPTP connecti (no CVSS)
- [CVE-2007-1262](https://cve.now/CVE-2007-1262.md): Multiple cross-site scripting (XSS) vulnerabilities in the HTML filter in SquirrelMail 1.4.0 through 1.4.9a allow remote attackers to inject (no CVSS)
- [CVE-2007-2522](https://cve.now/CVE-2007-2522.md): Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Ent (no CVSS)
- [CVE-2007-2523](https://cve.now/CVE-2007-2523.md): CA Anti-Virus for the Enterprise r8 and Threat Manager r8 before 20070510 use weak permissions (NULL security descriptor) for the Task Servi (no CVSS)
- [CVE-2007-2589](https://cve.now/CVE-2007-2589.md): Cross-site request forgery (CSRF) vulnerability in compose.php in SquirrelMail 1.4.0 through 1.4.9a allows remote attackers to send e-mails (no CVSS)
- [CVE-2007-2590](https://cve.now/CVE-2007-2590.md): Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server and Nokia Intellisync Wir (no CVSS)
- [CVE-2007-2591](https://cve.now/CVE-2007-2591.md): usrmgr/userList.asp in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving Novell Groupwise Mobile Server an (no CVSS)
- [CVE-2007-2592](https://cve.now/CVE-2007-2592.md): Multiple cross-site scripting (XSS) vulnerabilities in Nokia Intellisync Mobile Suite 6.4.31.2, 6.6.0.107, and 6.6.2.2, possibly involving N (no CVSS)
- [CVE-2007-2593](https://cve.now/CVE-2007-2593.md): The Terminal Server in Microsoft Windows 2003 Server, when using TLS, allows remote attackers to bypass SSL and self-signed certificate requ (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-05-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.