# CVEs published 2007-07-10

48 CVEs were published on July 10, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-0040](https://cve.now/CVE-2007-0040.md): The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4, Server 2003 SP1 and SP2, Server 2003 x64 Edition and SP2, (no CVSS)
- [CVE-2007-0041](https://cve.now/CVE-2007-0041.md): The PE Loader service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote attackers to (no CVSS)
- [CVE-2007-0042](https://cve.now/CVE-2007-0042.md): Interpretation conflict in ASP.NET in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows remote (no CVSS)
- [CVE-2007-0043](https://cve.now/CVE-2007-0043.md): The Just In Time (JIT) Compiler service in Microsoft .NET Framework 1.0, 1.1, and 2.0 for Windows 2000, XP, Server 2003, and Vista allows us (no CVSS)
- [CVE-2007-1754](https://cve.now/CVE-2007-1754.md): PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user- (no CVSS)
- [CVE-2007-1756](https://cve.now/CVE-2007-1756.md): Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, 2003 Viewer, and Office Excel 2007 does not properly validate version information, which allow (no CVSS)
- [CVE-2007-3028](https://cve.now/CVE-2007-3028.md): The LDAP service in Windows Active Directory in Microsoft Windows 2000 Server SP4 does not properly check "the number of convertible attribu (no CVSS)
- [CVE-2007-3029](https://cve.now/CVE-2007-3029.md): Unspecified vulnerability in Microsoft Excel 2002 SP3 and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a mal (no CVSS)
- [CVE-2007-3030](https://cve.now/CVE-2007-3030.md): Microsoft Excel 2000 SP3, 2002 SP3, 2003 SP2, and 2003 Viewer allows user-assisted remote attackers to execute arbitrary code via a malforme (no CVSS)
- [CVE-2007-3038](https://cve.now/CVE-2007-3038.md): The Teredo interface in Microsoft Windows Vista and Vista x64 Edition does not properly handle certain network traffic, which allows remote (no CVSS)
- [CVE-2007-3107](https://cve.now/CVE-2007-3107.md): The signal handling in the Linux kernel before 2.6.22, including 2.6.2, when running on PowerPC systems using HTX, allows local users to cau (no CVSS)
- [CVE-2007-3655](https://cve.now/CVE-2007-3655.md): Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remot (no CVSS)
- [CVE-2007-3656](https://cve.now/CVE-2007-3656.md): Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allow (no CVSS)
- [CVE-2007-3657](https://cve.now/CVE-2007-3657.md): Mozilla Firefox 2.0.0.4 allows remote attackers to cause a denial of service by opening multiple tabs in a popup window. (no CVSS)
- [CVE-2007-3658](https://cve.now/CVE-2007-3658.md): Unspecified vulnerability in Microsoft Register Server (REGSVR) allows attackers to cause a denial of service via a crafted DLL library. (no CVSS)
- [CVE-2007-3659](https://cve.now/CVE-2007-3659.md): Buffer overflow in the doBrowserAction function in FreeWRL 1.19.3 allows local users to execute arbitrary code via a crafted BROWSER environ (no CVSS)
- [CVE-2007-3660](https://cve.now/CVE-2007-3660.md): The Nonnoi ASP/Barcode ActiveX control (nonnoi\_ASPBarcode.dll) allows remote attackers to overwrite arbitrary files via an argument to the S (no CVSS)
- [CVE-2007-3661](https://cve.now/CVE-2007-3661.md): Eltima Software Virtual Serial Port (VSPAX) ActiveX control (VSPort.DLL) allows remote attackers to cause a denial of service via certain fu (no CVSS)
- [CVE-2007-3662](https://cve.now/CVE-2007-3662.md): Media Player Classic (MPC) 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code via (no CVSS)
- [CVE-2007-3663](https://cve.now/CVE-2007-3663.md): Divide-by-zero error in Media Player Classic (MPC) 6.4.9.0 allows user-assisted remote attackers to cause a denial of service or possibly ex (no CVSS)
- [CVE-2007-3664](https://cve.now/CVE-2007-3664.md): Multiple unspecified vulnerabilities in Eltima Software RunService ActiveX control (RunService.dll) allow remote attackers to cause a denial (no CVSS)
- [CVE-2007-3665](https://cve.now/CVE-2007-3665.md): Multiple unspecified vulnerabilities in FileBackup.DLL in Symantec Norton Ghost 12.0 allow remote attackers to cause a denial of service via (no CVSS)
- [CVE-2007-3666](https://cve.now/CVE-2007-3666.md): Buffer overflow in RemoteCommand.DLL in Symantec Norton Ghost 12.0 allows remote attackers to execute arbitrary code via the Connect functio (no CVSS)
- [CVE-2007-3667](https://cve.now/CVE-2007-3667.md): Unspecified vulnerability in EXCLEXPT.DLL in ActiveReportsExcelReport allows remote attackers to cause a denial of service via the DDRow Hei (no CVSS)
- [CVE-2007-3668](https://cve.now/CVE-2007-3668.md): Multiple unspecified vulnerabilities in NMSDVDXU.DLL in NuMedia NMSDVDX allow remote attackers to cause a denial of service via "improperly (no CVSS)
- [CVE-2007-3669](https://cve.now/CVE-2007-3669.md): Multiple unspecified vulnerabilities in the Innovasys DockStudioXP InnovaDSXP2.OCX ActiveX Control have unspecified attack vectors and impac (no CVSS)
- [CVE-2007-3670](https://cve.now/CVE-2007-3670.md): Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Firefox installed and certain URIs registered, (no CVSS)
- [CVE-2007-3671](https://cve.now/CVE-2007-3671.md): Unspecified vulnerability in the kernel in Microsoft Windows Vista has unspecified remote attack vectors and impact, as shown in the "0day I (no CVSS)
- [CVE-2007-3672](https://cve.now/CVE-2007-3672.md): Cross-site scripting (XSS) vulnerability in ecrire/tools.php in DotClear 1.2.6 allows remote attackers to inject arbitrary web script or HTM (no CVSS)
- [CVE-2006-4519](https://cve.now/CVE-2006-4519.md): Multiple integer overflows in the image loader plug-ins in GIMP before 2.2.16 allow user-assisted remote attackers to execute arbitrary code (no CVSS)
- [CVE-2007-3646](https://cve.now/CVE-2007-3646.md): SQL injection vulnerability in index.php in FlashGameScript 1.7 and earlier allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2007-3647](https://cve.now/CVE-2007-3647.md): The isloggedin function in Php/login.inc.php in phpTrafficA 1.4.3 and earlier allows remote attackers to bypass authentication and obtain ad (no CVSS)
- [CVE-2007-3648](https://cve.now/CVE-2007-3648.md): SQL injection vulnerability in Webmatic before 2.6.2, and possibly other versions before 2.7, allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2007-3649](https://cve.now/CVE-2007-3649.md): Absolute path traversal vulnerability in a certain ActiveX control in hpqvwocx.dll 2.1.0.556 in Hewlett-Packard (HP) Digital Imaging allows (no CVSS)
- [CVE-2007-3642](https://cve.now/CVE-2007-3642.md): The decode\_choice function in net/netfilter/nf\_conntrack\_h323\_asn1.c in the Linux kernel before 2.6.20.15, 2.6.21.x before 2.6.21.6, and bef (no CVSS)
- [CVE-2007-3643](https://cve.now/CVE-2007-3643.md): admin/index.php in AV Arcade 2.1b grants administrative privileges when the ava\_userid cookie value is 1, which allows remote attackers to p (no CVSS)
- [CVE-2006-7220](https://cve.now/CVE-2006-7220.md): Unspecified vulnerability in SAP SAPLPD and SAPSPRINT allows remote attackers to cause a denial of service (application crash) via a certain (no CVSS)
- [CVE-2007-3630](https://cve.now/CVE-2007-3630.md): changePW.php in AV Tutorial Script (avtutorial) 1.0 does not require authentication or knowledge of an old password for password changes, wh (no CVSS)
- [CVE-2007-3631](https://cve.now/CVE-2007-3631.md): SQL injection vulnerability in index.php in GameSiteScript (gss) 3.1 and earlier allows remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2007-3632](https://cve.now/CVE-2007-3632.md): Multiple PHP remote file inclusion vulnerabilities in LimeSurvey (aka PHPSurveyor) 1.49RC2 allow remote attackers to execute arbitrary PHP c (no CVSS)
- [CVE-2007-3633](https://cve.now/CVE-2007-3633.md): Absolute path traversal vulnerability in the Chilkat Software Chilkat Zip ActiveX control in ChilkatZip2.dll 12.4.2.0 allows remote attacker (no CVSS)
- [CVE-2007-3634](https://cve.now/CVE-2007-3634.md): Unspecified vulnerability in the G/PGP (GPG) Plugin 2.0 for Squirrelmail 1.4.10a allows remote authenticated users to execute arbitrary comm (no CVSS)
- [CVE-2007-3635](https://cve.now/CVE-2007-3635.md): Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin before 2.1 for Squirrelmail might allow "local authenticated users" to inject (no CVSS)
- [CVE-2007-3636](https://cve.now/CVE-2007-3636.md): Multiple unspecified vulnerabilities in the G/PGP (GPG) Plugin 2.1 for Squirrelmail allow remote attackers to execute arbitrary commands via (no CVSS)
- [CVE-2007-3637](https://cve.now/CVE-2007-3637.md): SQL injection vulnerability in MKPortal 1.1.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka ZD-0000 (no CVSS)
- [CVE-2007-3638](https://cve.now/CVE-2007-3638.md): Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users, who are listed in an address book, to execute arbit (no CVSS)
- [CVE-2007-3639](https://cve.now/CVE-2007-3639.md): WordPress before 2.2.2 allows remote attackers to redirect visitors to other websites and potentially obtain sensitive information via (1) t (no CVSS)
- [CVE-2007-3640](https://cve.now/CVE-2007-3640.md): Adobe Integrated Runtime (AIR, aka Apollo) allows context-dependent attackers to modify arbitrary files within an executing .air file (compi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-07-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.