# CVEs published 2007-07-16

6 CVEs were published on July 16, 2007: 1 critical, 0 high. Days are UTC.

- [CVE-2007-3800](https://cve.now/CVE-2007-3800.md): Unspecified vulnerability in the Real-time scanner (RTVScan) component in Symantec AntiVirus Corporate Edition 9.0 through 10.1 and Client S (no CVSS)
- [CVE-2007-3803](https://cve.now/CVE-2007-3803.md): The SMTP ALG in Clavister CorePlus before 8.80.04, and 8.81.00, does not properly parse SMTP commands in certain circumstances, which allows (no CVSS)
- [CVE-2007-3804](https://cve.now/CVE-2007-3804.md): The AntiVirus engine in the HTTP-ALG in Clavister CorePlus before 8.81.00 and 8.80.03 might allow remote attackers to bypass scanning via sm (no CVSS)
- [CVE-2007-3805](https://cve.now/CVE-2007-3805.md): The IKE implementation in Clavister CorePlus before 8.80.03, and 8.80.00, does not properly validate certificates during IKE negotiation, wh (no CVSS)
- [CVE-2007-3798](https://cve.now/CVE-2007-3798.md): Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via craf (CVSS 9.8)
- [CVE-2007-3799](https://cve.now/CVE-2007-3799.md): The session\_start function in ext/session in PHP 4.x up to 4.4.7 and 5.x up to 5.2.3 allows remote attackers to insert arbitrary attributes (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-07-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.