# CVEs published 2007-07-04

11 CVEs were published on July 4, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-3557](https://cve.now/CVE-2007-3557.md): SQL injection vulnerability in admin/login.php in Wheatblog (wB) 1.1, when magic\_quotes\_gpc is disabled, allows remote attackers to execute (no CVSS)
- [CVE-2007-3558](https://cve.now/CVE-2007-3558.md): SQL injection vulnerability in Coppermine Photo Gallery (CPG) before 1.4.11 allows remote attackers to execute arbitrary SQL commands via an (no CVSS)
- [CVE-2007-3559](https://cve.now/CVE-2007-3559.md): Cross-site scripting (XSS) vulnerability in infusions/shoutbox\_panel/shoutbox\_panel.php in PHP-Fusion 6.01.10 and 6.01.9, when guest posts a (no CVSS)
- [CVE-2007-3560](https://cve.now/CVE-2007-3560.md): Multiple unspecified vulnerabilities in Esqlanelapse before 2.6 have unknown impact and attack vectors. (no CVSS)
- [CVE-2007-3561](https://cve.now/CVE-2007-3561.md): Cross-site scripting (XSS) vulnerability in ara.asp in Efendy Blog 1.0 allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2007-3562](https://cve.now/CVE-2007-3562.md): SQL injection vulnerability in videos.php in PHP Director 0.21 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2007-3563](https://cve.now/CVE-2007-3563.md): SQL injection vulnerability in includes/view\_page.php in AV Arcade 2.1b allows remote attackers to execute arbitrary SQL commands via the id (no CVSS)
- [CVE-2007-2949](https://cve.now/CVE-2007-2949.md): Integer overflow in the seek\_to\_and\_unpack\_pixeldata function in the psd.c plugin in Gimp 2.2.15 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2007-3554](https://cve.now/CVE-2007-3554.md): Stack-based buffer overflow in the HPSDDX Class (SDD) ActiveX control in sdd.dll in HP Instant Support - Driver Check before 1.5.0.3 allows (no CVSS)
- [CVE-2007-3555](https://cve.now/CVE-2007-3555.md): Cross-site scripting (XSS) vulnerability in index.php in Moodle 1.7.1 allows remote attackers to inject arbitrary web script or HTML via a s (no CVSS)
- [CVE-2007-3556](https://cve.now/CVE-2007-3556.md): Liesbeth base CMS stores sensitive information under the web root with insufficient access control, which allows remote attackers to downloa (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-07-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.