# CVEs published 2007-07-18

40 CVEs were published on July 18, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2006-4183](https://cve.now/CVE-2006-4183.md): Heap-based buffer overflow in Microsoft DirectX SDK (February 2006) and probably earlier, including 9.0c End User Runtimes, allows context-d (no CVSS)
- [CVE-2007-3268](https://cve.now/CVE-2007-3268.md): The TFTP implementation in IBM Tivoli Provisioning Manager for OS Deployment 5.1 before Fix Pack 3 allows remote attackers to cause a denial (no CVSS)
- [CVE-2007-3825](https://cve.now/CVE-2007-3825.md): Multiple stack-based buffer overflows in the RPC implementation in alert.exe before 8.0.255.0 in CA (formerly Computer Associates) Alert Not (no CVSS)
- [CVE-2007-3881](https://cve.now/CVE-2007-3881.md): SQL injection vulnerability in index.php in Pictures Rating (Picture Rating) allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2007-3882](https://cve.now/CVE-2007-3882.md): SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2007-3883](https://cve.now/CVE-2007-3883.md): The Data Dynamics ActiveBar ActiveX control (actbar3.ocx) 3.2 and earlier allows remote attackers to create or overwrite files via a full pa (no CVSS)
- [CVE-2007-3884](https://cve.now/CVE-2007-3884.md): SQL injection vulnerability in philboard\_forum.asp in husrevforum 1.0.1 allows remote attackers to execute arbitrary SQL commands via the fo (no CVSS)
- [CVE-2007-3885](https://cve.now/CVE-2007-3885.md): Cross-site scripting (XSS) vulnerability in philboard\_search.asp in husrevforum 1.0.1 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2007-3886](https://cve.now/CVE-2007-3886.md): Cross-site scripting (XSS) vulnerability in default.asp in Element CMS allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2007-3887](https://cve.now/CVE-2007-3887.md): Multiple cross-site scripting (XSS) vulnerabilities in mesaj\_formu.asp in ASP Ziyaretci Defteri 1.1 allow remote attackers to inject arbitra (no CVSS)
- [CVE-2007-3888](https://cve.now/CVE-2007-3888.md): Multiple cross-site scripting (XSS) vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2007-3889](https://cve.now/CVE-2007-3889.md): Multiple SQL injection vulnerabilities in Insanely Simple Blog 0.5 and earlier allow remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2007-3853](https://cve.now/CVE-2007-3853.md): Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.3 allow remote authenticated users to have unknown impact via (1 (no CVSS)
- [CVE-2007-3854](https://cve.now/CVE-2007-3854.md): Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown imp (no CVSS)
- [CVE-2007-3855](https://cve.now/CVE-2007-3855.md): Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated use (no CVSS)
- [CVE-2007-3856](https://cve.now/CVE-2007-3856.md): Unspecified vulnerability in the Oracle Data Mining component for Oracle Database 10g Release 2 10.2.0.2 and 10.2.0.3, 10g 10.1.0.5, and Ora (no CVSS)
- [CVE-2007-3857](https://cve.now/CVE-2007-3857.md): Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 allow remote authenticated users to have an unknown impact via (a) the Orac (no CVSS)
- [CVE-2007-3858](https://cve.now/CVE-2007-3858.md): Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 allow remote authenticated users to have an unknown impact via (1) EXFSYS.D (no CVSS)
- [CVE-2007-3859](https://cve.now/CVE-2007-3859.md): Unspecified vulnerability in the Oracle Internet Directory component for Oracle Database 9.2.0.8 and 9.2.0.8DV; Application Server 9.0.4.3, (no CVSS)
- [CVE-2007-3860](https://cve.now/CVE-2007-3860.md): Unspecified vulnerability in Oracle Application Express (formerly Oracle HTML DB) 2.2.0.00.32 up to 3.0.0.00.20 allows developers to have an (no CVSS)
- [CVE-2007-3861](https://cve.now/CVE-2007-3861.md): Unspecified vulnerability in Oracle Jdeveloper in Oracle Application Server 10.1.2.2 and Collaboration Suite 10.1.2 allows context-dependent (no CVSS)
- [CVE-2007-3862](https://cve.now/CVE-2007-3862.md): Unspecified vulnerability in Oracle Application Server 9.0.4.3 and 10.1.2.0.2 allows remote attackers to have an unknown impact via Oracle S (no CVSS)
- [CVE-2007-3863](https://cve.now/CVE-2007-3863.md): Unspecified vulnerability in Oracle JDeveloper for Application Server 10.1.2.2 and 10.1.3.1, and Collaboration Suite 10.1.2, allows context- (no CVSS)
- [CVE-2007-3864](https://cve.now/CVE-2007-3864.md): Multiple unspecified vulnerabilities in Oracle Collaboration Suite 10.1.2 have unknown impact and remote attack vectors via (1) Instant Mess (no CVSS)
- [CVE-2007-3865](https://cve.now/CVE-2007-3865.md): Unspecified vulnerability in the Oracle Customer Intelligence component in Oracle E-Business Suite 12.0.1 has unknown impact and remote atta (no CVSS)
- [CVE-2007-3866](https://cve.now/CVE-2007-3866.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 and 12.0.1 allow remote attackers to have an unknown impact via ( (no CVSS)
- [CVE-2007-3867](https://cve.now/CVE-2007-3867.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10CU2 have unknown impact and attack vectors, related to (1) APPS04, (2 (no CVSS)
- [CVE-2007-3868](https://cve.now/CVE-2007-3868.md): Multiple unspecified vulnerabilities in PeopleTools in Oracle PeopleSoft Enterprise 8.22.15, 8.47.13, 8.48.10, and 8.49.02 allows remote aut (no CVSS)
- [CVE-2007-3869](https://cve.now/CVE-2007-3869.md): Multiple unspecified vulnerabilities in the Customer Relationship Management Online Marketing component in Oracle PeopleSoft Enterprise 8.9 (no CVSS)
- [CVE-2007-3870](https://cve.now/CVE-2007-3870.md): Multiple unspecified vulnerabilities in the Human Capital Management component in Oracle PeopleSoft Enterprise 8.9 Bundle 11 allow local use (no CVSS)
- [CVE-2007-3564](https://cve.now/CVE-2007-3564.md): libcurl 7.14.0 through 7.16.3, when built with GnuTLS support, does not check SSL/TLS certificate expiration or activation dates, which allo (no CVSS)
- [CVE-2007-3734](https://cve.now/CVE-2007-3734.md): Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0.0.5 allow remote att (no CVSS)
- [CVE-2007-3735](https://cve.now/CVE-2007-3735.md): Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0.0.5 allow remote (no CVSS)
- [CVE-2007-3736](https://cve.now/CVE-2007-3736.md): Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.5 allows remote attackers to inject arbitrary web script "into anot (no CVSS)
- [CVE-2007-3737](https://cve.now/CVE-2007-3737.md): Mozilla Firefox before 2.0.0.5 allows remote attackers to execute arbitrary code with chrome privileges by calling an event handler from an (no CVSS)
- [CVE-2007-3738](https://cve.now/CVE-2007-3738.md): Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.5 allow remote attackers to execute arbitrary code via a crafted XPCNat (no CVSS)
- [CVE-2007-3762](https://cve.now/CVE-2007-3762.md): Stack-based buffer overflow in the IAX2 channel driver (chan\_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before (no CVSS)
- [CVE-2007-3763](https://cve.now/CVE-2007-3763.md): The IAX2 channel driver (chan\_iax2) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW before be (no CVSS)
- [CVE-2007-3764](https://cve.now/CVE-2007-3764.md): The Skinny channel driver (chan\_skinny) in Asterisk before 1.2.22 and 1.4.x before 1.4.8, Business Edition before B.2.2.1, AsteriskNOW befor (no CVSS)
- [CVE-2007-3765](https://cve.now/CVE-2007-3765.md): The STUN implementation in Asterisk 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-07-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.