# CVEs published 2007-07-24

17 CVEs were published on July 24, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-3955](https://cve.now/CVE-2007-3955.md): Buffer overflow in the IEToolbar.IEContextMenu.1 ActiveX control in LinkedInIEToolbar.dll in the LinkedIn Toolbar 3.0.2.1098 allows remote a (no CVSS)
- [CVE-2007-3956](https://cve.now/CVE-2007-3956.md): TeamSpeak WebServer 2.0 for Windows does not validate parameter value lengths and does not expire TCP sessions, which allows remote attacker (no CVSS)
- [CVE-2007-3957](https://cve.now/CVE-2007-3957.md): Buffer overflow in Nipun Jain xserver 0.1 alpha allows remote attackers to cause a denial of service via a POST request with a long URI. (no CVSS)
- [CVE-2007-3958](https://cve.now/CVE-2007-3958.md): Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service via a certain GIF file, as demo (no CVSS)
- [CVE-2007-3959](https://cve.now/CVE-2007-3959.md): The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Su (no CVSS)
- [CVE-2007-3960](https://cve.now/CVE-2007-3960.md): Multiple unspecified vulnerabilities in IBM WebSphere Application Server (WAS) before Fix Pack 21 (6.0.2.21) have unknown impact and attack (no CVSS)
- [CVE-2007-2925](https://cve.now/CVE-2007-2925.md): The default access control lists (ACL) in ISC BIND 9.4.0, 9.4.1, and 9.5.0a1 through 9.5.0a5 do not set the allow-recursion and allow-query- (no CVSS)
- [CVE-2007-2926](https://cve.now/CVE-2007-2926.md): ISC BIND 9 through 9.5.0a5 uses a weak random number generator during generation of DNS query ids when answering resolver questions or sendi (no CVSS)
- [CVE-2007-3951](https://cve.now/CVE-2007-3951.md): Multiple buffer overflows in Norman Antivirus 5.90 allow remote attackers to execute arbitrary code via a crafted (1) ACE or (2) LZH file, r (no CVSS)
- [CVE-2007-3952](https://cve.now/CVE-2007-3952.md): The OLE2 parsing in Norman Antivirus before 5.91.02 allows remote attackers to bypass the malware detection via a crafted DOC file, resultin (no CVSS)
- [CVE-2007-3953](https://cve.now/CVE-2007-3953.md): The OLE2 parsing in Norman Antivirus before 5.91.02 allows remote attackers to cause a denial of service via a crafted DOC file that trigger (no CVSS)
- [CVE-2007-3954](https://cve.now/CVE-2007-3954.md): Argument injection vulnerability in Microsoft Internet Explorer, when running on systems with SeaMonkey installed and certain URIs registere (no CVSS)
- [CVE-2007-3946](https://cve.now/CVE-2007-3946.md): mod\_auth (http\_auth.c) in lighttpd before 1.4.16 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors (no CVSS)
- [CVE-2007-3947](https://cve.now/CVE-2007-3947.md): request.c in lighttpd 1.4.15 allows remote attackers to cause a denial of service (daemon crash) by sending an HTTP request with duplicate h (no CVSS)
- [CVE-2007-3948](https://cve.now/CVE-2007-3948.md): connections.c in lighttpd before 1.4.16 might accept more connections than the configured maximum, which allows remote attackers to cause a (no CVSS)
- [CVE-2007-3949](https://cve.now/CVE-2007-3949.md): mod\_access.c in lighttpd 1.4.15 ignores trailing / (slash) characters in the URL, which allows remote attackers to bypass url.access-deny se (no CVSS)
- [CVE-2007-3950](https://cve.now/CVE-2007-3950.md): lighttpd 1.4.15, when run on 32 bit platforms, allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors i (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-07-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.