# CVEs published 2007-05-24

34 CVEs were published on May 24, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-0740](https://cve.now/CVE-2007-0740.md): Alias Manager in Apple Mac OS X 10.3.9 and 10.4.9 does not display files with the same name in mounted disk images that have the same name, (no CVSS)
- [CVE-2007-0750](https://cve.now/CVE-2007-0750.md): Integer overflow in CoreGraphics in Apple Mac OS X 10.4 up to 10.4.9 allows remote user-assisted attackers to cause a denial of service (app (no CVSS)
- [CVE-2007-0751](https://cve.now/CVE-2007-0751.md): A cleanup script in crontabs in Apple Mac OS X 10.3.9 and 10.4.9 might delete filesystems that have been mounted in /tmp, which might allow (no CVSS)
- [CVE-2007-0752](https://cve.now/CVE-2007-0752.md): The PPP daemon (pppd) in Apple Mac OS X 10.4.8 checks ownership of the stdin file descriptor to determine if the invoker has sufficient priv (no CVSS)
- [CVE-2007-0753](https://cve.now/CVE-2007-0753.md): Format string vulnerability in the VPN daemon (vpnd) in Apple Mac OS X 10.3.9 and 10.4.9 allows local users to execute arbitrary code via th (no CVSS)
- [CVE-2007-2386](https://cve.now/CVE-2007-2386.md): Buffer overflow in mDNSResponder in Apple Mac OS X 10.4 up to 10.4.9 allows remote attackers to cause a denial of service (application termi (no CVSS)
- [CVE-2007-2390](https://cve.now/CVE-2007-2390.md): Buffer overflow in iChat in Apple Mac OS X 10.3.9 and 10.4.9 allows remote attackers to cause a denial of service (application termination) (no CVSS)
- [CVE-2007-2852](https://cve.now/CVE-2007-2852.md): Multiple stack-based buffer overflows in ESET NOD32 Antivirus before 2.70.37.0 allow remote attackers to execute arbitrary code during (1) d (no CVSS)
- [CVE-2007-2853](https://cve.now/CVE-2007-2853.md): The VCDAPILibApi ActiveX control in vc9api.DLL 9.0.0.57 in Virtual CD 9.0.0.2 allows remote attackers to execute arbitrary commands via a co (no CVSS)
- [CVE-2007-2854](https://cve.now/CVE-2007-2854.md): Multiple SQL injection vulnerabilities in account\_change.php in BtiTracker 1.4.1 and earlier allow remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2007-2855](https://cve.now/CVE-2007-2855.md): Buffer overflow in a certain ActiveX control in DartZipLite.dll 1.8.5.3 in Dart ZipLite Compression for ActiveX allows user-assisted remote (no CVSS)
- [CVE-2007-2856](https://cve.now/CVE-2007-2856.md): Buffer overflow in the Dart Communications PowerTCP ZIP Compression ActiveX control in DartZip.dll 1.8.5.3, when Internet Explorer 6 is used (no CVSS)
- [CVE-2007-2857](https://cve.now/CVE-2007-2857.md): PHP remote file inclusion vulnerability in sample/xls2mysql in ABC Excel Parser Pro 4.0 allows remote attackers to execute arbitrary PHP cod (no CVSS)
- [CVE-2007-2858](https://cve.now/CVE-2007-2858.md): SQL injection vulnerability in the IP-Search functionality in the IP-Tracking Mod for phpBB 2.0.x allows remote authenticated administrators (no CVSS)
- [CVE-2007-2859](https://cve.now/CVE-2007-2859.md): Multiple PHP remote file inclusion vulnerabilities in SimpGB 1.46.0 allow remote attackers to execute arbitrary PHP code via a URL in the pa (no CVSS)
- [CVE-2007-2860](https://cve.now/CVE-2007-2860.md): user.php in BoastMachine 3.0 platinum allows remote authenticated users to gain privileges via a modified id parameter, as demonstrated by a (no CVSS)
- [CVE-2007-2861](https://cve.now/CVE-2007-2861.md): Multiple PHP remote file inclusion vulnerabilities in Simple Accessible XHTML Online News (SAXON) 4.6 allow remote attackers to execute arbi (no CVSS)
- [CVE-2007-2862](https://cve.now/CVE-2007-2862.md): Multiple SQL injection vulnerabilities in CubeCart 3.0.16 might allow remote attackers to execute arbitrary SQL commands via an unspecified (no CVSS)
- [CVE-2007-0448](https://cve.now/CVE-2007-0448.md): The fopen function in PHP 5.2.0 does not properly handle invalid URI handlers, which allows context-dependent attackers to bypass safe\_mode (no CVSS)
- [CVE-2007-2843](https://cve.now/CVE-2007-2843.md): Cross-domain vulnerability in Apple Safari 2.0.4 allows remote attackers to access restricted information from other domains via Javascript, (no CVSS)
- [CVE-2007-2844](https://cve.now/CVE-2007-2844.md): PHP 4.x and 5.x before 5.2.1, when running on multi-threaded systems, does not ensure thread safety for libc crypt function calls using prot (no CVSS)
- [CVE-2007-2845](https://cve.now/CVE-2007-2845.md): Heap-based buffer overflow in the CAB unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to e (no CVSS)
- [CVE-2007-2846](https://cve.now/CVE-2007-2846.md): Heap-based buffer overflow in the SIS unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to e (no CVSS)
- [CVE-2007-2847](https://cve.now/CVE-2007-2847.md): Multiple cross-site scripting (XSS) vulnerabilities in hlstats.php in HLstats 1.35, and possibly earlier, allow remote attackers to inject a (no CVSS)
- [CVE-2007-2848](https://cve.now/CVE-2007-2848.md): Stack-based buffer overflow in the SetPath function in the shComboBox ActiveX control (shcmb80.ocx) in Sky Software Shell MegaPack ActiveX 8 (no CVSS)
- [CVE-2007-2849](https://cve.now/CVE-2007-2849.md): KnowledgeTree Document Management (aka KnowledgeTree Open Source) before STABLE 3.3.7 does not require a password for an unregistered user, (no CVSS)
- [CVE-2007-2850](https://cve.now/CVE-2007-2850.md): The Session Reliability Service (XTE) in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1. (no CVSS)
- [CVE-2007-2851](https://cve.now/CVE-2007-2851.md): A certain ActiveX control in LeadTools Raster Variant Object Library (LTRVR14e.dll) 14.5.0.44 allows remote attackers to overwrite arbitrary (no CVSS)
- [CVE-2006-7205](https://cve.now/CVE-2006-7205.md): The array\_fill function in ext/standard/array.c in PHP 4.4.2 and 5.1.2 allows context-dependent attackers to cause a denial of service (memo (no CVSS)
- [CVE-2007-2687](https://cve.now/CVE-2007-2687.md): Stack-based buffer overflow in the MicroWorld Agent service (MWAGENT.EXE) in MicroWorld Technologies eScan before 9.0.718.1 allows remote at (no CVSS)
- [CVE-2007-2829](https://cve.now/CVE-2007-2829.md): The 802.11 network stack in net80211/ieee80211\_input.c in MadWifi before 0.9.3.1 allows remote attackers to cause a denial of service (syste (no CVSS)
- [CVE-2007-2830](https://cve.now/CVE-2007-2830.md): The ath\_beacon\_config function in if\_ath.c in MadWifi before 0.9.3.1 allows remote attackers to cause a denial of service (system crash) via (no CVSS)
- [CVE-2007-2831](https://cve.now/CVE-2007-2831.md): Array index error in the (1) ieee80211\_ioctl\_getwmmparams and (2) ieee80211\_ioctl\_setwmmparams functions in net80211/ieee80211\_wireless.c in (no CVSS)
- [CVE-2007-2832](https://cve.now/CVE-2007-2832.md): Cross-site scripting (XSS) vulnerability in the web application firewall in Cisco CallManager before 3.3(5)sr3, 4.1 before 4.1(3)sr5, 4.2 be (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-05-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.