# CVEs published 2007-05-18

12 CVEs were published on May 18, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-2757](https://cve.now/CVE-2007-2757.md): Multiple cross-site scripting (XSS) vulnerabilities in Redoable 1.2 allow remote attackers to inject arbitrary web script or HTML via the s (no CVSS)
- [CVE-2007-2758](https://cve.now/CVE-2007-2758.md): Multiple buffer overflows in WinImage 8.0.8000 allow user-assisted remote attackers to execute arbitrary code via a FAT image that contains (no CVSS)
- [CVE-2007-2759](https://cve.now/CVE-2007-2759.md): Multiple SQL injection vulnerabilities in the insert function in the ValuePreference class (grid/ed/ValuePreference.java) in Adempiere befor (no CVSS)
- [CVE-2007-2760](https://cve.now/CVE-2007-2760.md): The canUpdate function in model/MRole.java in Adempiere before 3.1.6 does not properly validate user roles, which allows remote authenticate (no CVSS)
- [CVE-2007-2761](https://cve.now/CVE-2007-2761.md): Stack-based buffer overflow in MagicISO 5.4 build 239 and earlier allows remote attackers to execute arbitrary code via a long filename in a (no CVSS)
- [CVE-2007-2762](https://cve.now/CVE-2007-2762.md): Multiple PHP remote file inclusion vulnerabilities in Build it Fast (bif3) 0.4.1 allow remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2007-2763](https://cve.now/CVE-2007-2763.md): Buffer overflow in the UnlockSupport function in the LockModules subsystem in a certain ActiveX control in ltmm15.dll in Sienzo Digital Musi (no CVSS)
- [CVE-2007-2764](https://cve.now/CVE-2007-2764.md): The embedded Linux kernel in certain Sun-Brocade SilkWorm switches before 20070516 does not properly handle a situation in which a non-root (no CVSS)
- [CVE-2007-2765](https://cve.now/CVE-2007-2765.md): blockhosts.py in BlockHosts before 2.0.3 does not properly parse daemon log files, which allows remote attackers to add arbitrary deny entri (no CVSS)
- [CVE-2007-2766](https://cve.now/CVE-2007-2766.md): lib/backup-methods.sh in Backup Manager before 0.7.6 provides the MySQL password as a plaintext command line argument, which allows local us (no CVSS)
- [CVE-2007-2682](https://cve.now/CVE-2007-2682.md): The installer for Adobe Version Cue CS3 Server on Apple Mac OS X, as used in Adobe Creative Suite 3 (CS3), does not re-enable the personal f (no CVSS)
- [CVE-2007-2756](https://cve.now/CVE-2007-2756.md): The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service (CPU consumption) via a crafted PNG i (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-05-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.