# CVEs published 2007-07-21

22 CVEs were published on July 21, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-3922](https://cve.now/CVE-2007-3922.md): Unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader in Sun JDK and JRE 5.0 Update 11 and earlier, 6 through (no CVSS)
- [CVE-2007-3923](https://cve.now/CVE-2007-3923.md): The Common Internet File System (CIFS) optimization in Cisco Wide Area Application Services (WAAS) 4.0.7 and 4.0.9, as used by Cisco WAE app (no CVSS)
- [CVE-2007-3924](https://cve.now/CVE-2007-3924.md): Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with Netscape installed and certain URIs registered (no CVSS)
- [CVE-2007-3925](https://cve.now/CVE-2007-3925.md): Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to (no CVSS)
- [CVE-2007-3926](https://cve.now/CVE-2007-3926.md): Ipswitch IMail Server 2006 before 2006.21 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors involv (no CVSS)
- [CVE-2007-3927](https://cve.now/CVE-2007-3927.md): Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified (no CVSS)
- [CVE-2007-3928](https://cve.now/CVE-2007-3928.md): Buffer overflow in Yahoo! Messenger 8.1 allows user-assisted remote authenticated users to execute arbitrary code via a long e-mail address (no CVSS)
- [CVE-2007-3929](https://cve.now/CVE-2007-3929.md): Use-after-free vulnerability in the BitTorrent support in Opera before 9.22 allows user-assisted remote attackers to execute arbitrary code (no CVSS)
- [CVE-2007-3930](https://cve.now/CVE-2007-3930.md): Interpretation conflict between Microsoft Internet Explorer and DocuWiki before 2007-06-26b allows remote attackers to inject arbitrary Java (no CVSS)
- [CVE-2007-3931](https://cve.now/CVE-2007-3931.md): The wrap\_setuid\_third\_party\_application function in the installation script for the Samsung SCX-4200 Driver 2.00.95 adds setuid permissions (no CVSS)
- [CVE-2007-3932](https://cve.now/CVE-2007-3932.md): uploadimg.php in the Expose RC35 and earlier (com\_expose) component for Joomla! sends an error message but does not exit when it detects an (no CVSS)
- [CVE-2007-3933](https://cve.now/CVE-2007-3933.md): SQL injection vulnerability in insertorder.cfm in QuickEStore 8.2 and earlier allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2007-3934](https://cve.now/CVE-2007-3934.md): PHP remote file inclusion vulnerability in postscript/postscript.php in BBS E-Market allows remote attackers to execute arbitrary PHP code v (no CVSS)
- [CVE-2007-3935](https://cve.now/CVE-2007-3935.md): PHP remote file inclusion vulnerability in link\_main.php in the SupaNav 1.0.0 module for phpBB allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2007-3936](https://cve.now/CVE-2007-3936.md): Directory traversal vulnerability in admin/filebrowser.asp in A-shop 0.70 and earlier, and possibly 0.71, allows remote attackers to delete (no CVSS)
- [CVE-2007-3937](https://cve.now/CVE-2007-3937.md): Multiple SQL injection vulnerabilities in A-shop 0.70 and earlier allow remote attackers to execute arbitrary SQL commands via unspecified v (no CVSS)
- [CVE-2007-3938](https://cve.now/CVE-2007-3938.md): SQL injection vulnerability in index.php in MAXdev MDPro (MD-Pro) 1.0.8x and earlier before 20070720 allows remote attackers to execute arbi (no CVSS)
- [CVE-2007-3939](https://cve.now/CVE-2007-3939.md): SQL injection vulnerability in index.php in SpoonLabs Vivvo Article Management CMS (aka phpWordPress) CMS 3.4 and earlier allows remote atta (no CVSS)
- [CVE-2007-3940](https://cve.now/CVE-2007-3940.md): Cross-site scripting (XSS) vulnerability in default.asp in QuickerSite 1.7.2 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2007-3941](https://cve.now/CVE-2007-3941.md): Cross-site scripting (XSS) vulnerability in profile.php in Jasmine CMS 1.0\_1 allows remote authenticated users to inject arbitrary web scrip (no CVSS)
- [CVE-2007-3942](https://cve.now/CVE-2007-3942.md): Directory traversal vulnerability in index.php in Simple Machines Forum (SMF) 1.1.3 allows remote attackers to include local files via unspe (no CVSS)
- [CVE-2007-3943](https://cve.now/CVE-2007-3943.md): SQL injection vulnerability in Infinite Responder before 1.48 allows remote attackers to execute arbitrary SQL commands via unspecified vect (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-07-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.