# CVEs published 2007-05-14

41 CVEs were published on May 14, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-2656](https://cve.now/CVE-2007-2656.md): Stack-based buffer overflow in the Hewlett-Packard (HP) Magview ActiveX control in hpqvwocx.dll 1.0.0.309 allows remote attackers to cause a (no CVSS)
- [CVE-2007-2657](https://cve.now/CVE-2007-2657.md): Unspecified vulnerability in the PrecisionID Barcode 1.3 ActiveX control in PrecisionID\_DataMatrix.DLL allows remote attackers to cause a de (no CVSS)
- [CVE-2007-2658](https://cve.now/CVE-2007-2658.md): Unspecified vulnerability in the ID Automation Linear Barcode 1.6.0.5 ActiveX control in IDAutomationLinear6.dll allows remote attackers to (no CVSS)
- [CVE-2007-2659](https://cve.now/CVE-2007-2659.md): Directory traversal vulnerability in index.php in PHP Advanced Transfer Manager (phpATM) 1.30 allows remote attackers to read arbitrary file (no CVSS)
- [CVE-2007-2660](https://cve.now/CVE-2007-2660.md): PHP remote file inclusion vulnerability in pcltrace.lib.php in the PclTar module in Vincent Blavet PhpConcept Library, as used in CJG EXPLOR (no CVSS)
- [CVE-2007-2661](https://cve.now/CVE-2007-2661.md): SQL injection vulnerability in archshow.asp in BlogMe 3.0 allows remote attackers to execute arbitrary SQL commands via the var parameter, a (no CVSS)
- [CVE-2007-2662](https://cve.now/CVE-2007-2662.md): SQL injection vulnerability in EfesTECH Haber 5.0 allows remote attackers to execute arbitrary SQL commands via the id parameter to the top- (no CVSS)
- [CVE-2007-2663](https://cve.now/CVE-2007-2663.md): PHP remote file inclusion vulnerability in language/1/splash.lang.php in Beacon 0.2.0 allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2007-2664](https://cve.now/CVE-2007-2664.md): PHP remote file inclusion vulnerability in includes/common.php in Yaap 1.5 and earlier allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2007-2665](https://cve.now/CVE-2007-2665.md): PHP remote file inclusion vulnerability in block.php in PhpFirstPost 0.1 allows remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2007-2666](https://cve.now/CVE-2007-2666.md): Stack-based buffer overflow in LexRuby.cxx (SciLexer.dll) in Scintilla 1.73, as used by notepad++ 4.1.1 and earlier, allows user-assisted re (no CVSS)
- [CVE-2007-2667](https://cve.now/CVE-2007-2667.md): Buffer overflow in the DB Software Laboratory VImpX ActiveX control in VImpX.ocx 4.7.3 allows remote attackers to execute arbitrary code via (no CVSS)
- [CVE-2007-2668](https://cve.now/CVE-2007-2668.md): Buffer overflow in webdesproxy 0.0.1 allows remote attackers to execute arbitrary code via a long URL, possibly involving the process\_connec (no CVSS)
- [CVE-2007-2669](https://cve.now/CVE-2007-2669.md): Multiple cross-site scripting (XSS) vulnerabilities in PHPChain 1.0 and earlier allow remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2007-2670](https://cve.now/CVE-2007-2670.md): PHPChain 1.0 and earlier allows remote attackers to obtain the installation path via invalid values of the catid parameter to (1) settings.p (no CVSS)
- [CVE-2007-2671](https://cve.now/CVE-2007-2671.md): Mozilla Firefox 2.0.0.3 allows remote attackers to cause a denial of service (application crash) via a long hostname in an HREF attribute in (no CVSS)
- [CVE-2007-2672](https://cve.now/CVE-2007-2672.md): SQL injection vulnerability in index.php in PHP Coupon Script 3.0 allows remote attackers to execute arbitrary SQL commands via the bus para (no CVSS)
- [CVE-2007-2673](https://cve.now/CVE-2007-2673.md): SQL injection vulnerability in includes/funcs\_vendors.php in Censura 1.15.04, and other versions before 1.16.04, allows remote attackers to (no CVSS)
- [CVE-2007-2674](https://cve.now/CVE-2007-2674.md): SQL injection vulnerability in detail.php in Pre Shopping Mall 1.0 allows remote attackers to execute arbitrary SQL commands via the prodid (no CVSS)
- [CVE-2007-2675](https://cve.now/CVE-2007-2675.md): SQL injection vulnerability in search.php in Pre Classifieds Listings 1.0 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2007-2676](https://cve.now/CVE-2007-2676.md): PHP remote file inclusion vulnerability in skins/header.php in Open Translation Engine (OTE) 0.7.8 allows remote attackers to execute arbitr (no CVSS)
- [CVE-2007-2677](https://cve.now/CVE-2007-2677.md): Multiple PHP remote file inclusion vulnerabilities in phpChess Community Edition 2.0 allow remote attackers to execute arbitrary PHP code vi (no CVSS)
- [CVE-2007-0689](https://cve.now/CVE-2007-0689.md): MyBB 1.2.4 allows remote attackers to obtain sensitive information via the (1) action\[\] parameter to member.php, (2) imagehash\[\] parameter t (no CVSS)
- [CVE-2007-0754](https://cve.now/CVE-2007-0754.md): Heap-based buffer overflow in Apple QuickTime before 7.1.3 allows user-assisted remote attackers to execute arbitrary code via a crafted Sam (no CVSS)
- [CVE-2007-1901](https://cve.now/CVE-2007-1901.md): SonicBB 1.0 allows remote attackers to obtain sensitive information via the (1) by\[\] parameter to search.php, (2) p\[\] parameter to viewforum (no CVSS)
- [CVE-2007-1902](https://cve.now/CVE-2007-1902.md): Multiple SQL injection vulnerabilities in SonicBB 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) part and (2) by p (no CVSS)
- [CVE-2007-1903](https://cve.now/CVE-2007-1903.md): Cross-site scripting (XSS) vulnerability in search.php in SonicBB 1.0 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2007-2444](https://cve.now/CVE-2007-2444.md): Logic error in the SID/Name translation functionality in smbd in Samba 3.0.23d through 3.0.25pre2 allows local users to gain temporary privi (no CVSS)
- [CVE-2007-2446](https://cve.now/CVE-2007-2446.md): Multiple heap-based buffer overflows in the NDR parsing in smbd in Samba 3.0.0 through 3.0.25rc3 allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2007-2447](https://cve.now/CVE-2007-2447.md): The MS-RPC functionality in smbd in Samba 3.0.0 through 3.0.25rc3 allows remote attackers to execute arbitrary commands via shell metacharac (no CVSS)
- [CVE-2007-2645](https://cve.now/CVE-2007-2645.md): Integer overflow in the exif\_data\_load\_data\_entry function in exif-data.c in libexif before 0.6.14 allows user-assisted remote attackers to (no CVSS)
- [CVE-2007-2646](https://cve.now/CVE-2007-2646.md): Heap-based buffer overflow in yEnc32 1.0.7.207 allows user-assisted remote attackers to execute arbitrary code via a long filename in an NTX (no CVSS)
- [CVE-2007-2647](https://cve.now/CVE-2007-2647.md): Static code injection vulnerability in admin/admin\_configuration.php in Monalbum 0.8.7 allows remote authenticated users to inject arbitrary (no CVSS)
- [CVE-2007-2648](https://cve.now/CVE-2007-2648.md): Stack-based buffer overflow in the Clever Database Comparer 2.2 ActiveX control (comparerax.ocx) allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2007-2649](https://cve.now/CVE-2007-2649.md): Deutsche Telekom (T-com) Speedport W 700v uses JavaScript delays for invalid authentication attempts to the CGI script, which allows remote (no CVSS)
- [CVE-2007-2650](https://cve.now/CVE-2007-2650.md): The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file with (no CVSS)
- [CVE-2007-2651](https://cve.now/CVE-2007-2651.md): Multiple off-by-one errors in VooDoo cIRCle before 1.1.beta27 allow remote attackers to cause a denial of service (connection loss) or possi (no CVSS)
- [CVE-2007-2652](https://cve.now/CVE-2007-2652.md): Multiple unspecified vulnerabilities in Free-SA before 1.2.2 allow remote attackers to execute arbitrary code via unspecified vectors involv (no CVSS)
- [CVE-2007-2654](https://cve.now/CVE-2007-2654.md): xfs\_fsr in xfsdump creates a .fsr temporary directory with insecure permissions, which allows local users to read or overwrite arbitrary fil (no CVSS)
- [CVE-2007-2655](https://cve.now/CVE-2007-2655.md): Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vectors, possibly a format (no CVSS)
- [CVE-2006-7203](https://cve.now/CVE-2006-7203.md): The compat\_sys\_mount function in fs/compat.c in Linux kernel 2.6.20 and earlier allows local users to cause a denial of service (NULL pointe (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-05-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.