# CVEs published 2007-07-11

39 CVEs were published on July 11, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-3693](https://cve.now/CVE-2007-3693.md): Cross-site scripting (XSS) vulnerability in Gobi as of 20070711, built on Helma, allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2007-3700](https://cve.now/CVE-2007-3700.md): Sun Java System Access Manager (formerly Java System Identity Server) before 20070710, when the message debug level is configured in the com (no CVSS)
- [CVE-2007-3701](https://cve.now/CVE-2007-3701.md): TippingPoint IPS before 20070710 does not properly handle a hex-encoded alternate Unicode '/' (slash) character, which might allow remote at (no CVSS)
- [CVE-2007-3702](https://cve.now/CVE-2007-3702.md): Directory traversal vulnerability in the load function in cgi-bin/mail/mailmachine.cgi in Mail Machine 3.989 and earlier allows remote attac (no CVSS)
- [CVE-2007-3703](https://cve.now/CVE-2007-3703.md): Stack-based buffer overflow in a certain ActiveX control in sasatl.dll 1.5.0.531 in Zenturi Program Checker (ProgramChecker) Pro allows remo (no CVSS)
- [CVE-2007-3704](https://cve.now/CVE-2007-3704.md): Entertainment CMS allows remote attackers to bypass authentication and perform certain administrative actions by setting the adminLogged coo (no CVSS)
- [CVE-2007-3705](https://cve.now/CVE-2007-3705.md): SQL injection vulnerability in FuseTalk 2.0 allows remote attackers to execute arbitrary SQL commands via the FTVAR\_SUBCAT (txForumID) param (no CVSS)
- [CVE-2007-3706](https://cve.now/CVE-2007-3706.md): The \_sanitize\_globals function in CodeIgniter 1.5.3 before 20070628 allows remote attackers to unset arbitrary global variables with unspeci (no CVSS)
- [CVE-2007-3707](https://cve.now/CVE-2007-3707.md): Directory traversal vulnerability in index.php in CodeIgniter 1.5.3 before 20070628, when enable\_query\_strings is true, allows remote attack (no CVSS)
- [CVE-2007-3708](https://cve.now/CVE-2007-3708.md): Cross-site scripting (XSS) vulnerability in CodeIgniter 1.5.3 before 20070626 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2007-3709](https://cve.now/CVE-2007-3709.md): CRLF injection vulnerability in the redirect function in url\_helper.php in CodeIgniter 1.5.3 allows remote attackers to inject arbitrary HTT (no CVSS)
- [CVE-2007-3710](https://cve.now/CVE-2007-3710.md): PHP remote file inclusion vulnerability in example/gamedemo/inc.functions.php in PHP Comet-Server allows remote attackers to execute arbitra (no CVSS)
- [CVE-2007-3711](https://cve.now/CVE-2007-3711.md): Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x before 2.5.2 on TippingPoint IPS allows remote attackers to avoid dete (no CVSS)
- [CVE-2007-3712](https://cve.now/CVE-2007-3712.md): Multiple cross-site scripting (XSS) vulnerabilities in HiddenChest "is ve Bayi Basvuru Formu" (Yb ve Bayi Babvuru Formu) allow remote attack (no CVSS)
- [CVE-2007-3713](https://cve.now/CVE-2007-3713.md): Multiple buffer overflows in Konst CenterICQ 4.9.11 through 4.21 allow remote attackers to execute arbitrary code via unspecified vectors. (no CVSS)
- [CVE-2007-3714](https://cve.now/CVE-2007-3714.md): Directory traversal vulnerability in Ada Image Server (ImgSvr) 0.6.5 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2007-3715](https://cve.now/CVE-2007-3715.md): Sun Java System Application Server and Web Server 7.0 through 9.0 before 20070710 do not properly process XSLT stylesheets in XSLT transform (no CVSS)
- [CVE-2007-3716](https://cve.now/CVE-2007-3716.md): The Java XML Digital Signature implementation in Sun JDK and JRE 6 before Update 2 does not properly process XSLT stylesheets in XSLT transf (no CVSS)
- [CVE-2007-3695](https://cve.now/CVE-2007-3695.md): Buffer overflow in LICRCMD.EXE in CA ERwin Process Modeler (formerly AllFusion Process Modeler) 7.1 allows attackers to execute arbitrary co (no CVSS)
- [CVE-2007-3696](https://cve.now/CVE-2007-3696.md): CA ERwin Data Model Validator (formerly AllFusion Data Model Validator) allows remote attackers to (1) cause a denial of service (applicatio (no CVSS)
- [CVE-2007-3697](https://cve.now/CVE-2007-3697.md): PHP remote file inclusion vulnerability in phpbb/sendmsg.php in FlashBB 1.1.8 and earlier allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2007-3698](https://cve.now/CVE-2007-3698.md): The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4 (no CVSS)
- [CVE-2007-3680](https://cve.now/CVE-2007-3680.md): Stack-based buffer overflow in the odm\_searchpath function in libodm in IBM AIX 5.2.0 and 5.3.0 allows local users to execute arbitrary code (no CVSS)
- [CVE-2007-3681](https://cve.now/CVE-2007-3681.md): The IOCTL 9031 (BIOCGSTATS) handler in the NPF.SYS device driver in WinPcap before 4.0.1 allows local users to overwrite memory and execute (no CVSS)
- [CVE-2007-3682](https://cve.now/CVE-2007-3682.md): SQL injection vulnerability in index.php in OpenLD 1.2.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id pa (no CVSS)
- [CVE-2007-3683](https://cve.now/CVE-2007-3683.md): SQL injection vulnerability in pagetopic.php in Aigaion 1.3.3 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2007-3684](https://cve.now/CVE-2007-3684.md): Multiple SQL injection vulnerabilities in Unobtrusive Ajax Star Rating Bar before 1.2.0 allow remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2007-3685](https://cve.now/CVE-2007-3685.md): Cross-site scripting (XSS) vulnerability in rpc.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbit (no CVSS)
- [CVE-2007-3686](https://cve.now/CVE-2007-3686.md): CRLF injection vulnerability in db.php in Unobtrusive Ajax Star Rating Bar before 1.2.0 allows remote attackers to inject arbitrary HTTP hea (no CVSS)
- [CVE-2007-3687](https://cve.now/CVE-2007-3687.md): SQL injection vulnerability in inferno.php in the Inferno Technologies RPG Inferno 2.4 and earlier, a vBulletin module, allows remote authen (no CVSS)
- [CVE-2007-3688](https://cve.now/CVE-2007-3688.md): Multiple cross-site request forgery (CSRF) vulnerabilities in DotClear 1.2.6 allow remote attackers to perform actions as arbitrary users vi (no CVSS)
- [CVE-2007-3689](https://cve.now/CVE-2007-3689.md): The Print module before 4.7-1.0 and 5.x before 5.x-1.2 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (2 (no CVSS)
- [CVE-2007-3690](https://cve.now/CVE-2007-3690.md): The Forward module before 4.7-1.1 and 5.x before 5.x-1.0 for Drupal allows remote attackers to read restricted posts in (1) Organic Groups, (no CVSS)
- [CVE-2007-3691](https://cve.now/CVE-2007-3691.md): Multiple SQL injection vulnerabilities in changePW.php in AV Tutorial Script (avtutorial) 1.0, when magic\_quotes\_gpc is disabled, allow remo (no CVSS)
- [CVE-2007-3692](https://cve.now/CVE-2007-3692.md): Directory traversal vulnerability in download.cgi in EZFactory KDDI Download CGI 1.x allows remote attackers to read and download arbitrary (no CVSS)
- [CVE-2007-3456](https://cve.now/CVE-2007-3456.md): Integer overflow in Adobe Flash Player 9.0.45.0 and earlier might allow remote attackers to execute arbitrary code via a large length value (no CVSS)
- [CVE-2007-3457](https://cve.now/CVE-2007-3457.md): Adobe Flash Player 8.0.34.0 and earlier insufficiently validates HTTP Referer headers, which might allow remote attackers to conduct a CSRF (no CVSS)
- [CVE-2007-3677](https://cve.now/CVE-2007-3677.md): Multiple SQL injection vulnerabilities in Maxsi eVisit Analyst allow remote attackers to execute arbitrary SQL commands via the id parameter (no CVSS)
- [CVE-2007-3678](https://cve.now/CVE-2007-3678.md): Stack-based buffer overflow in the MSWord text-import extension (Word 6-2000 Filter.xnt) in QuarkXPress 7.2 for Windows, when using the Rect (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-07-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.