# CVEs published 2007-08-03

41 CVEs were published on August 3, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-4155](https://cve.now/CVE-2007-4155.md): Absolute path traversal vulnerability in a certain ActiveX control in vielib.dll in EMC VMware 6.0.0 allows remote attackers to execute arbi (no CVSS)
- [CVE-2007-4156](https://cve.now/CVE-2007-4156.md): Multiple SQL injection vulnerabilities in wolioCMS allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to memb (no CVSS)
- [CVE-2007-4157](https://cve.now/CVE-2007-4157.md): PHPBlogger stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a dat (no CVSS)
- [CVE-2007-4158](https://cve.now/CVE-2007-4158.md): Memory leak in TIBCO Rendezvous (RV) daemon (rvd) 7.5.2, 7.5.3 and 7.5.4 allows remote attackers to cause a denial of service (memory consum (no CVSS)
- [CVE-2007-4159](https://cve.now/CVE-2007-4159.md): index.html in the HTTP administration interface in certain daemons in TIBCO Rendezvous (RV) 7.5.2 allows remote attackers to obtain sensitiv (no CVSS)
- [CVE-2007-4160](https://cve.now/CVE-2007-4160.md): The default configuration of TIBCO Rendezvous (RV) 7.5.2 clients, when -no-multicast is omitted, uses a multicast group as the destination f (no CVSS)
- [CVE-2007-4161](https://cve.now/CVE-2007-4161.md): rvd in TIBCO Rendezvous (RV) 7.5.2, when -no-lead-wc is omitted, might allow remote attackers to cause a denial of service (network instabil (no CVSS)
- [CVE-2007-4162](https://cve.now/CVE-2007-4162.md): TIBCO Rendezvous (RV) 7.5.2 does not protect confidentiality or integrity of inter-daemon communication, which allows remote attackers to ca (no CVSS)
- [CVE-2007-4163](https://cve.now/CVE-2007-4163.md): Multiple SQL injection vulnerabilities in IndexScript 2.7 and 2.8 before 20070726 allow remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2007-2408](https://cve.now/CVE-2007-2408.md): WebKit in Apple Safari 3 Beta before Update 3.0.3 does not properly recognize an unchecked "Enable Java" setting, which allows remote attack (no CVSS)
- [CVE-2007-3388](https://cve.now/CVE-2007-3388.md): Multiple format string vulnerabilities in (1) qtextedit.cpp, (2) qdatatable.cpp, (3) qsqldatabase.cpp, (4) qsqlindex.cpp, (5) qsqlrecord.cpp (no CVSS)
- [CVE-2007-3742](https://cve.now/CVE-2007-3742.md): WebKit in Apple Safari 3 Beta before Update 3.0.3, and iPhone before 1.0.1, does not properly handle the interaction between International D (no CVSS)
- [CVE-2007-3743](https://cve.now/CVE-2007-3743.md): Stack-based buffer overflow in bookmark handling in Apple Safari 3 Beta before Update 3.0.3 on Windows allows user-assisted remote attackers (no CVSS)
- [CVE-2007-4142](https://cve.now/CVE-2007-4142.md): Cross-site scripting (XSS) vulnerability in IBM Lotus Sametime Server 7.5.1 before 20070731 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2007-4143](https://cve.now/CVE-2007-4143.md): user.php in the Billing Control Panel in phpCoupon allows remote authenticated users to obtain Premium Member status, and possibly acquire f (no CVSS)
- [CVE-2007-4144](https://cve.now/CVE-2007-4144.md): Cross-site scripting (XSS) vulnerability in sample-forms/simple-contact-form-with-preview/simple-contact-form-with-preview.html in MitriDAT (no CVSS)
- [CVE-2007-4145](https://cve.now/CVE-2007-4145.md): Heap-based buffer overflow in the BlueSkychat (BlueSkyCat) ActiveX control (V2.V2Ctrl.1) in v2.ocx 8.1.2.0 and earlier allows remote attacke (no CVSS)
- [CVE-2007-4146](https://cve.now/CVE-2007-4146.md): Cross-site scripting (XSS) vulnerability in webevent.cgi in WebEvent 2.61 through 4.03 allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2007-4147](https://cve.now/CVE-2007-4147.md): Multiple unspecified vulnerabilities in Interspire ArticleLive NX before 1.7.1.2 have unknown impact and attack vectors, possibly related to (no CVSS)
- [CVE-2007-4148](https://cve.now/CVE-2007-4148.md): Heap-based buffer overflow in the Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to cause a (no CVSS)
- [CVE-2007-4149](https://cve.now/CVE-2007-4149.md): The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 does not require authentication for (1) the "LOG." command, whic (no CVSS)
- [CVE-2007-4150](https://cve.now/CVE-2007-4150.md): The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 uses weak cryptography (XOR) when (1) transmitting passwords, wh (no CVSS)
- [CVE-2007-4151](https://cve.now/CVE-2007-4151.md): The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to obtain sensitive information via (1) (no CVSS)
- [CVE-2007-4152](https://cve.now/CVE-2007-4152.md): The Visionsoft Audit on Demand Service (VSAOD) in Visionsoft Audit 12.4.0.0 allows remote attackers to conduct replay attacks by capturing a (no CVSS)
- [CVE-2007-4153](https://cve.now/CVE-2007-4153.md): Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.2.1 allow remote authenticated administrators to inject arbitrary web scr (no CVSS)
- [CVE-2007-4154](https://cve.now/CVE-2007-4154.md): SQL injection vulnerability in options.php in WordPress 2.2.1 allows remote authenticated administrators to execute arbitrary SQL commands v (no CVSS)
- [CVE-2007-2403](https://cve.now/CVE-2007-2403.md): CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows remote attackers to trigger the transmissi (no CVSS)
- [CVE-2007-2404](https://cve.now/CVE-2007-2404.md): CRLF injection vulnerability in CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 before 20070731 allows remote attackers to inject arbitrary H (no CVSS)
- [CVE-2007-2405](https://cve.now/CVE-2007-2405.md): Integer underflow in Preview in PDFKit on Apple Mac OS X 10.4.10 allows remote attackers to execute arbitrary code via a crafted PDF file. (no CVSS)
- [CVE-2007-2406](https://cve.now/CVE-2007-2406.md): Quartz Composer on Apple Mac OS X 10.4.10 does not initialize a certain object pointer, which might allow user-assisted remote attackers to (no CVSS)
- [CVE-2007-2407](https://cve.now/CVE-2007-2407.md): The Samba server on Apple Mac OS X 10.3.9 and 10.4.10, when Windows file sharing is enabled, does not enforce disk quotas after dropping pri (no CVSS)
- [CVE-2007-2409](https://cve.now/CVE-2007-2409.md): Cross-domain vulnerability in WebCore on Apple Mac OS X 10.3.9 and 10.4.10 allows remote attackers to obtain sensitive information via a pop (no CVSS)
- [CVE-2007-2410](https://cve.now/CVE-2007-2410.md): WebCore on Apple Mac OS X 10.3.9 and 10.4.10 retains properties of certain global objects when a new URL is visited in the same window, whic (no CVSS)
- [CVE-2007-3744](https://cve.now/CVE-2007-3744.md): Heap-based buffer overflow in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) implementation in mDNSResponder on (no CVSS)
- [CVE-2007-3745](https://cve.now/CVE-2007-3745.md): The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 contains an unsafe interface that is exposed by JDirect, which allows r (no CVSS)
- [CVE-2007-3746](https://cve.now/CVE-2007-3746.md): The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 does not properly check the bounds of heap read and write operations, w (no CVSS)
- [CVE-2007-3747](https://cve.now/CVE-2007-3747.md): The Java interface to CoreAudio on Apple Mac OS X 10.3.9 and 10.4.10 does not restrict object instantiation and manipulation to valid heap a (no CVSS)
- [CVE-2007-3748](https://cve.now/CVE-2007-3748.md): Buffer overflow in the UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) implementation in iChat on Apple Mac OS X 10. (no CVSS)
- [CVE-2007-4139](https://cve.now/CVE-2007-4139.md): Cross-site scripting (XSS) vulnerability in the Temporary Uploads editing functionality (wp-admin/includes/upload.php) in WordPress 2.2.1, a (no CVSS)
- [CVE-2007-4140](https://cve.now/CVE-2007-4140.md): Buffer overflow in Live for Speed (LFS) S2 ALPHA PATCH 0.5x allows user-assisted remote attackers to execute arbitrary code via a .mpr file (no CVSS)
- [CVE-2007-4141](https://cve.now/CVE-2007-4141.md): OpenRat CMS 0.8-beta1 and earlier allows remote attackers to obtain sensitive information via a request containing an XSS sequence in the ac (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-08-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.