# CVEs published 2007-07-09

11 CVEs were published on July 9, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-3619](https://cve.now/CVE-2007-3619.md): Directory traversal vulnerability in login.php in Maia Mailguard 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2007-3620](https://cve.now/CVE-2007-3620.md): Multiple directory traversal vulnerabilities in Maia Mailguard 1.0.2 and earlier might allow remote attackers to read arbitrary files via a (no CVSS)
- [CVE-2007-3621](https://cve.now/CVE-2007-3621.md): Multiple CRLF injection vulnerabilities in callboth.php in AsteriDex 3.0 and earlier allow remote attackers to inject arbitrary shell comman (no CVSS)
- [CVE-2007-3622](https://cve.now/CVE-2007-3622.md): Unspecified vulnerability in DomainPOP in Alt-N Technologies MDaemon before 9.61 allows remote attackers to cause a denial of service (crash (no CVSS)
- [CVE-2007-3623](https://cve.now/CVE-2007-3623.md): Cross-site scripting (XSS) vulnerability in the Hitachi JP1/HiCommand Device Manager, Tiered Storage Manager, Replication Monitor, and Globa (no CVSS)
- [CVE-2007-3624](https://cve.now/CVE-2007-3624.md): Heap-based buffer overflow in the Message HTTP Server in SAP Message Server allows remote attackers to execute arbitrary code via a long str (no CVSS)
- [CVE-2007-3625](https://cve.now/CVE-2007-3625.md): The Program Neighborhood Agent in Citrix Presentation Server Clients for 32-bit Windows before 10.100 allows remote attackers to cause a den (no CVSS)
- [CVE-2007-3626](https://cve.now/CVE-2007-3626.md): Unspecified vulnerability in the ADM daemon in Hitachi TPBroker before 20070706 allows remote attackers to cause a denial of service (daemon (no CVSS)
- [CVE-2007-3627](https://cve.now/CVE-2007-3627.md): Multiple SQL injection vulnerabilities in PHP Lite Calendar Express 2.2 allow remote attackers to execute arbitrary SQL commands via the cid (no CVSS)
- [CVE-2007-3628](https://cve.now/CVE-2007-3628.md): Unspecified vulnerability in the fetch function in MDB2.php in PEAR Structures-DataGrid-DataSource-MDB2 0.1.9 and earlier allows attackers t (no CVSS)
- [CVE-2007-3629](https://cve.now/CVE-2007-3629.md): SQL injection vulnerability in oku.asp in Levent Veysi Portal 1.0 allows remote attackers to execute arbitrary SQL commands via the id param (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-07-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.