# CVEs published 2007-07-26 31 CVEs were published on July 26, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-3333](https://cve.now/CVE-2007-3333.md): Stack-based buffer overflow in capture in IBM AIX 5.3 SP6 and 5.2.0 allows remote attackers to execute arbitrary code via a large number of (no CVSS) - [CVE-2007-4003](https://cve.now/CVE-2007-4003.md): pioout in IBM AIX 5.3 SP6 allows local users to execute arbitrary code by specifying a malicious library with the -R (ParseRoutine) command (no CVSS) - [CVE-2007-4004](https://cve.now/CVE-2007-4004.md): Buffer overflow in the ftp client in IBM AIX 5.3 SP6 and 5.2.0 allows local users to execute arbitrary code via unspecified vectors that tri (no CVSS) - [CVE-2007-4029](https://cve.now/CVE-2007-4029.md): libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service via (1) an invali (no CVSS) - [CVE-2007-3106](https://cve.now/CVE-2007-3106.md): lib/info.c in libvorbis 1.1.2, and possibly other versions before 1.2.0, allows context-dependent attackers to cause a denial of service and (no CVSS) - [CVE-2007-4020](https://cve.now/CVE-2007-4020.md): Multiple cross-site scripting (XSS) vulnerabilities in login.php in AdMan 1.0.20051202 FF 3 patch and earlier allow remote attackers to inje (no CVSS) - [CVE-2007-4021](https://cve.now/CVE-2007-4021.md): Multiple cross-site scripting (XSS) vulnerabilities in login.php in Brain Book Software Secure 1.0.20070629 and earlier allow remote attacke (no CVSS) - [CVE-2007-4022](https://cve.now/CVE-2007-4022.md): Cross-site scripting (XSS) vulnerability in frontend/x/htaccess/changepro.html in cPanel 10.9.1 allows remote attackers to inject arbitrary (no CVSS) - [CVE-2007-4023](https://cve.now/CVE-2007-4023.md): Cross-site scripting (XSS) vulnerability in the login CGI program in Aruba Mobility Controller 2.5.4.18 and earlier, and 2.4.8.6-FIPS and ea (no CVSS) - [CVE-2007-4024](https://cve.now/CVE-2007-4024.md): Cross-site scripting (XSS) vulnerability in W1L3D4\_aramasonuc.asp in W1L3D4 Philboard 0.3 allows remote attackers to inject arbitrary web sc (no CVSS) - [CVE-2007-4025](https://cve.now/CVE-2007-4025.md): Unspecified vulnerability in Sun Java System (SJS) Application Server 8.1 through 9.0 before 20070724 on Windows allows remote attackers to (no CVSS) - [CVE-2007-4026](https://cve.now/CVE-2007-4026.md): epesi framework before 0.8.6 does not properly verify file extensions, which allows remote attackers to upload and execute arbitrary PHP cod (no CVSS) - [CVE-2007-4027](https://cve.now/CVE-2007-4027.md): Buffer overflow in cli32 in Areca CLI 1.72.250 and earlier might allow local users to gain privileges via a long argument. (no CVSS) - [CVE-2007-4028](https://cve.now/CVE-2007-4028.md): Absolute path traversal vulnerability in index.php in Webspell 4.01.02 allows remote attackers to include and execute arbitrary local files (no CVSS) - [CVE-2007-3566](https://cve.now/CVE-2007-3566.md): Stack-based buffer overflow in the database service (ibserver.exe) in Borland InterBase 2007 before SP2 allows remote attackers to execute a (no CVSS) - [CVE-2007-4013](https://cve.now/CVE-2007-4013.md): Multiple unspecified vulnerabilities in (1) Net6Helper.DLL (aka Net6Launcher Class) 4.5.2 and earlier, (2) npCtxCAO.dll (aka Citrix Endpoint (no CVSS) - [CVE-2007-4014](https://cve.now/CVE-2007-4014.md): Cross-site scripting (XSS) vulnerability in a certain index.php installation script related to the (1) Blix 0.9.1, (2) Blixed 1.0, and (3) B (no CVSS) - [CVE-2007-4016](https://cve.now/CVE-2007-4016.md): Unspecified vulnerability in the client components in Citrix Access Gateway Standard Edition before 4.5.5 and Advanced Edition before 4.5 HF (no CVSS) - [CVE-2007-4017](https://cve.now/CVE-2007-4017.md): Cross-site request forgery (CSRF) vulnerability in the web-based administration console in Citrix Access Gateway before firmware 4.5.5 allow (no CVSS) - [CVE-2007-4018](https://cve.now/CVE-2007-4018.md): Citrix Access Gateway Advanced Edition before firmware 4.5.5 allows attackers to redirect users to arbitrary web sites and conduct phishing (no CVSS) - [CVE-2007-0060](https://cve.now/CVE-2007-0060.md): Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) softwa (no CVSS) - [CVE-2007-3302](https://cve.now/CVE-2007-3302.md): The CallCode ActiveX control in caller.dll 3.0 before 20070713, and 3.0 SP1 before 3.0.5.81, in CA (formerly Computer Associates) eTrust Int (no CVSS) - [CVE-2007-3875](https://cve.now/CVE-2007-3875.md): arclib.dll before 7.3.0.9 in CA Anti-Virus (formerly eTrust Antivirus) 8 and certain other CA products allows remote attackers to cause a de (no CVSS) - [CVE-2007-4005](https://cve.now/CVE-2007-4005.md): Stack-based buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 allows remote attackers to execute arbitrary code via a long string (no CVSS) - [CVE-2007-4006](https://cve.now/CVE-2007-4006.md): Buffer overflow in Mike Dubman Windows RSH daemon (rshd) 1.7 has unknown impact and remote attack vectors, aka ZD-00000034. (no CVSS) - [CVE-2007-4007](https://cve.now/CVE-2007-4007.md): PHP remote file inclusion vulnerability in index.php in Article Directory (Article Site Directory) allows remote attackers to execute arbitr (no CVSS) - [CVE-2007-4008](https://cve.now/CVE-2007-4008.md): Directory traversal vulnerability in custom.php in Entertainment Media Sharing CMS allows remote attackers to include and execute arbitrary (no CVSS) - [CVE-2007-4009](https://cve.now/CVE-2007-4009.md): PHP remote file inclusion vulnerability in admin/business\_inc/saveserver.php in SWSoft Confixx Pro 2.0.12 through 3.3.1 allows remote attack (no CVSS) - [CVE-2007-4010](https://cve.now/CVE-2007-4010.md): The win32std extension in PHP 5.2.3 does not follow safe\_mode and disable\_functions restrictions, which allows remote attackers to execute a (no CVSS) - [CVE-2007-4011](https://cve.now/CVE-2007-4011.md): Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller (WLC) software before 3.2 20070727, 4.0 before 20070 (no CVSS) - [CVE-2007-4012](https://cve.now/CVE-2007-4012.md): Cisco 4100 and 4400, Airespace 4000, and Catalyst 6500 and 3750 Wireless LAN Controller (WLC) software 4.1 before 4.1.180.0 allows remote at (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-07-26 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.