# CVEs published 2007-07-27 20 CVEs were published on July 27, 2007: 2 critical, 1 high. Days are UTC. - [CVE-2007-3532](https://cve.now/CVE-2007-3532.md): NVIDIA drivers (nvidia-drivers) before 1.0.7185, 1.0.9639, and 100.14.11, as used in Gentoo Linux and possibly other distributions, creates (no CVSS) - [CVE-2007-4031](https://cve.now/CVE-2007-4031.md): Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbit (no CVSS) - [CVE-2007-4032](https://cve.now/CVE-2007-4032.md): Buffer overflow in CrystalPlayer Pro 1.98 allows user-assisted remote attackers to execute arbitrary code via a long string in a .mls Playli (no CVSS) - [CVE-2007-4033](https://cve.now/CVE-2007-4033.md): Buffer overflow in the intT1\_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute a (no CVSS) - [CVE-2007-4034](https://cve.now/CVE-2007-4034.md): Stack-based buffer overflow in the YDPCTL.YDPControl.1 (aka Yahoo! Installer Plugin for Widgets) ActiveX control before 2007.7.13.3 (2007062 (no CVSS) - [CVE-2007-4035](https://cve.now/CVE-2007-4035.md): Guidance Software EnCase does not properly handle (1) certain malformed MBR partition tables with many entries, which allows remote attacker (no CVSS) - [CVE-2007-4036](https://cve.now/CVE-2007-4036.md): Guidance Software EnCase allows user-assisted remote attackers to cause a denial of service via (1) a corrupted Microsoft Exchange database, (no CVSS) - [CVE-2007-4037](https://cve.now/CVE-2007-4037.md): Guidance Software EnCase allows user-assisted attackers to trigger a buffer over-read and application crash via a malformed NTFS filesystem (no CVSS) - [CVE-2007-4038](https://cve.now/CVE-2007-4038.md): Argument injection vulnerability in Mozilla Firefox before 2.0.0.5, when running on systems with Thunderbird 1.5 installed and certain URIs (no CVSS) - [CVE-2007-4039](https://cve.now/CVE-2007-4039.md): Argument injection vulnerability involving Mozilla, when certain URIs are registered, allows remote attackers to conduct cross-browser scrip (CVSS 9.8) - [CVE-2007-4040](https://cve.now/CVE-2007-4040.md): Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, allows remote attackers (CVSS 8.8) - [CVE-2007-4041](https://cve.now/CVE-2007-4041.md): Multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and 3.0alpha allow remote attackers to execute arbitrary commands via (no CVSS) - [CVE-2007-4042](https://cve.now/CVE-2007-4042.md): Multiple argument injection vulnerabilities in Netscape Navigator 9 allow remote attackers to execute arbitrary commands via a NULL byte (%0 (no CVSS) - [CVE-2007-4043](https://cve.now/CVE-2007-4043.md): file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) before 4.6.3 allows remote attackers to bypass authentication (CVSS 9.8) - [CVE-2007-4045](https://cve.now/CVE-2007-4045.md): The CUPS service, as used in SUSE Linux before 20070720 and other Linux distributions, allows remote attackers to cause a denial of service (no CVSS) - [CVE-2007-4046](https://cve.now/CVE-2007-4046.md): SQL injection vulnerability in index.php in the Pony Gallery (com\_ponygallery) 1.5 and earlier component for Joomla! allows remote attackers (no CVSS) - [CVE-2007-4047](https://cve.now/CVE-2007-4047.md): geoBlog (aka BitDamaged) 1 does not require authentication for (1) deletecomment.php, (2) deleteblog.php, and (3) listcomment.php in admin/, (no CVSS) - [CVE-2007-1354](https://cve.now/CVE-2007-1354.md): The Access Control functionality (JMXOpsAccessControlFilter) in JMX Console in JBoss Application Server 4.0.2 and 4.0.5 before 20070416 uses (no CVSS) - [CVE-2007-2874](https://cve.now/CVE-2007-2874.md): Buffer overflow in the wpa\_printf function in the debugging code in wpa\_supplicant in the Fedora NetworkManager package before 0.6.5-3.fc7 a (no CVSS) - [CVE-2007-3105](https://cve.now/CVE-2007-3105.md): Stack-based buffer overflow in the random number generator (RNG) implementation in the Linux kernel before 2.6.22 might allow local root use (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-07-27 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.