# CVEs published 2007-07-03

46 CVEs were published on July 3, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2006-7215](https://cve.now/CVE-2006-7215.md): The Intel Core 2 Extreme processor X6800 and Core 2 Duo desktop processor E6000 and E4000 incorrectly set the memory page Access (A) bit for (no CVSS)
- [CVE-2007-3508](https://cve.now/CVE-2007-3508.md): Integer overflow in the process\_envvars function in elf/rtld.c in glibc before 2.5-rc4 might allow local users to execute arbitrary code via (no CVSS)
- [CVE-2007-3548](https://cve.now/CVE-2007-3548.md): Stack-based buffer overflow in W3Filer 2.1.3 allows remote FTP servers to cause a denial of service (application hang or crash) and possibly (no CVSS)
- [CVE-2007-3549](https://cve.now/CVE-2007-3549.md): SQL injection vulnerability in view\_sub\_cat.php in Buddy Zone 1.5 allows remote attackers to execute arbitrary SQL commands via the cat\_id p (no CVSS)
- [CVE-2007-3550](https://cve.now/CVE-2007-3550.md): Microsoft Internet Explorer 6.0 and 7.0 allows remote attackers to fill Zones with arbitrary domains using certain metacharacters such as wi (no CVSS)
- [CVE-2007-3551](https://cve.now/CVE-2007-3551.md): Buffer overflow in bbs100 before 3.2 allows remote attackers to cause a denial of service (crash) by attempting to login as the Guest user w (no CVSS)
- [CVE-2007-3552](https://cve.now/CVE-2007-3552.md): Multiple unspecified vulnerabilities in bbs100 before 3.2 allow remote attackers to cause a denial of service (crash) via unspecified vector (no CVSS)
- [CVE-2007-3553](https://cve.now/CVE-2007-3553.md): Cross-site scripting (XSS) vulnerability in Rapid Install Web Server in Oracle Application Server 11i allows remote attackers to inject arbi (no CVSS)
- [CVE-2007-3533](https://cve.now/CVE-2007-3533.md): The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers to cause a denial of service (reboot and reporting outage) via a loo (no CVSS)
- [CVE-2007-3534](https://cve.now/CVE-2007-3534.md): SQL injection vulnerability in login.php in WebChat 0.78 allows remote attackers to execute arbitrary SQL commands via the rid parameter. (no CVSS)
- [CVE-2007-3535](https://cve.now/CVE-2007-3535.md): Multiple directory traversal vulnerabilities in GL-SH Deaf Forum 6.4.4 and earlier allow remote attackers to include and execute arbitrary l (no CVSS)
- [CVE-2007-3536](https://cve.now/CVE-2007-3536.md): Multiple buffer overflows in the AMX NetLinx VNC (AmxVnc) ActiveX control in AmxVnc.dll 1.0.13.0 allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2007-3537](https://cve.now/CVE-2007-3537.md): IBM OS/400 (aka i5/OS) V4R2M0 through V5R3M0 on iSeries machines sends responses to TCP SYN-FIN packets, which allows remote attackers to ob (no CVSS)
- [CVE-2007-3538](https://cve.now/CVE-2007-3538.md): SQL injection vulnerability in qtg\_msg\_view.php in QuickTalk guestbook 1.2 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2007-3539](https://cve.now/CVE-2007-3539.md): Multiple SQL injection vulnerabilities in QuickTicket 1.2 build:20070621 and QuickTalk Forum 1.3 allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2007-3540](https://cve.now/CVE-2007-3540.md): Multiple cross-site scripting (XSS) vulnerabilities in search.asp in rwAuction Pro 5.0 allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2007-3541](https://cve.now/CVE-2007-3541.md): Cross-site scripting (XSS) vulnerability in Kurinton sHTTPd 20070408 and earlier allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2007-3542](https://cve.now/CVE-2007-3542.md): Cross-site scripting (XSS) vulnerability in admin/auth.php in Pluxml 0.3.1 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2007-3543](https://cve.now/CVE-2007-3543.md): Unrestricted file upload vulnerability in WordPress before 2.2.1 and WordPress MU before 1.2.3 allows remote authenticated users to upload a (no CVSS)
- [CVE-2007-3544](https://cve.now/CVE-2007-3544.md): Unrestricted file upload vulnerability in (1) wp-app.php and (2) app.php in WordPress 2.2.1 and WordPress MU 1.2.3 allows remote authenticat (no CVSS)
- [CVE-2007-3545](https://cve.now/CVE-2007-3545.md): Buffer overflow in Warzone 2100 Resurrection before 2.0.7 allows remote attackers to cause a denial of service (application crash) or execut (no CVSS)
- [CVE-2007-3546](https://cve.now/CVE-2007-3546.md): Cross-site scripting (XSS) vulnerability in the Windows GUI in Nessus Vulnerability Scanner before 3.0.6 allows remote attackers to inject a (no CVSS)
- [CVE-2007-3547](https://cve.now/CVE-2007-3547.md): Directory traversal vulnerability in qti\_checkname.php in QuickTicket 1.2 allows remote attackers to include and execute arbitrary local fil (no CVSS)
- [CVE-2007-2837](https://cve.now/CVE-2007-2837.md): The (1) getRule and (2) getChains functions in server/rules.cpp in fireflierd (fireflier-server) in FireFlier 1.1.6 allow local users to ove (no CVSS)
- [CVE-2007-3515](https://cve.now/CVE-2007-3515.md): SQL injection vulnerability in view\_event.php in TotalCalendar 2.402 and earlier allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2007-3516](https://cve.now/CVE-2007-3516.md): Multiple cross-site scripting (XSS) vulnerabilities in kayit.asp in Gorki Online Santrac Sitesi allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2007-3517](https://cve.now/CVE-2007-3517.md): Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.3 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2007-3518](https://cve.now/CVE-2007-3518.md): SQL injection vulnerability in msg.php in HispaH YouTube Clone Script (youtubeclone) allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2007-3519](https://cve.now/CVE-2007-3519.md): SQL injection vulnerability in eventdisplay.php in phpEventCalendar 0.2.3 and earlier allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2007-3520](https://cve.now/CVE-2007-3520.md): SQL injection vulnerability in process.php in Easybe 1-2-3 Music Store allows remote attackers to execute arbitrary SQL commands via the Cat (no CVSS)
- [CVE-2007-3521](https://cve.now/CVE-2007-3521.md): SQL injection vulnerability in ArcadeBuilder Game Portal Manager 1.7 allows remote attackers to execute arbitrary SQL commands via a usercoo (no CVSS)
- [CVE-2007-3522](https://cve.now/CVE-2007-3522.md): Multiple PHP remote file inclusion vulnerabilities in sPHPell 1.01 allow remote attackers to execute arbitrary PHP code via a URL in the Spe (no CVSS)
- [CVE-2007-3523](https://cve.now/CVE-2007-3523.md): Multiple directory traversal vulnerabilities in Module/Galerie.php in XCMS 1.1 allow remote attackers to include and execute arbitrary local (no CVSS)
- [CVE-2007-3524](https://cve.now/CVE-2007-3524.md): Multiple PHP remote file inclusion vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2007-3525](https://cve.now/CVE-2007-3525.md): Ripe Website Manager 0.8.9 and earlier allows remote attackers to obtain configuration information via a direct request to includes/phpinfo. (no CVSS)
- [CVE-2007-3526](https://cve.now/CVE-2007-3526.md): Multiple SQL injection vulnerabilities in Buddy Zone 1.5 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the ne (no CVSS)
- [CVE-2007-3527](https://cve.now/CVE-2007-3527.md): Integer overflow in Firebird 2.0.0 allows remote authenticated users to cause a denial of service (CPU consumption) via certain database ope (no CVSS)
- [CVE-2007-3528](https://cve.now/CVE-2007-3528.md): The blowfish mode in DAR before 2.3.4 uses weak Blowfish-CBC cryptography by (1) discarding random bits by the blowfish::make\_ivec function (no CVSS)
- [CVE-2007-3529](https://cve.now/CVE-2007-3529.md): videos.php in PHPDirector 0.21 and earlier allows remote attackers to obtain sensitive information via an empty value of the id\[\] parameter, (no CVSS)
- [CVE-2007-3530](https://cve.now/CVE-2007-3530.md): PHPDirector 0.21 and earlier stores the admin account name and password in config.php, which allows local users to gain privileges by readin (no CVSS)
- [CVE-2007-3511](https://cve.now/CVE-2007-3511.md): The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1. (no CVSS)
- [CVE-2007-3512](https://cve.now/CVE-2007-3512.md): Stack-based buffer overflow in Lhaca File Archiver before 1.22 allows user-assisted remote attackers to execute arbitrary code via a large L (no CVSS)
- [CVE-2007-3513](https://cve.now/CVE-2007-3513.md): The lcd\_write function in drivers/usb/misc/usblcd.c in the Linux kernel before 2.6.22-rc7 does not limit the amount of memory used by a call (no CVSS)
- [CVE-2007-3514](https://cve.now/CVE-2007-3514.md): Cross-domain vulnerability in Apple Safari for Windows 3.0.2 allows remote attackers to bypass the Same Origin Policy and access restricted (no CVSS)
- [CVE-2007-2835](https://cve.now/CVE-2007-2835.md): Multiple stack-based buffer overflows in (1) CCE\_pinyin.c and (2) xl\_pinyin.c in ImmModules/cce/ in unicon-imc2 3.0.4, as used by zhcon and (no CVSS)
- [CVE-2007-2838](https://cve.now/CVE-2007-2838.md): The populate\_conns function in src/populate\_conns.c in GSAMBAD 0.1.4 allows local users to overwrite arbitrary files via a symlink attack on (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-07-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.