# CVEs published 2007-08-07

11 CVEs were published on August 7, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-3381](https://cve.now/CVE-2007-3381.md): The GDM daemon in GNOME Display Manager (GDM) before 2.14.13, 2.16.x before 2.16.7, 2.18.x before 2.18.4, and 2.19.x before 2.19.5 does not (no CVSS)
- [CVE-2007-4164](https://cve.now/CVE-2007-4164.md): CRLF injection vulnerability in the redirect feature in Sun Java System Web Server 6.1 and 7.0 before 20070802, when the redirect Server App (no CVSS)
- [CVE-2007-4165](https://cve.now/CVE-2007-4165.md): Cross-site scripting (XSS) vulnerability in index.php in the Blue Memories theme 1.5 for WordPress allows remote attackers to inject arbitra (no CVSS)
- [CVE-2007-4166](https://cve.now/CVE-2007-4166.md): Cross-site scripting (XSS) vulnerability in index.php in the Unnamed theme 1.217, and Special Edition (SE) 1.02, before 20070804 for WordPre (no CVSS)
- [CVE-2007-4167](https://cve.now/CVE-2007-4167.md): PHP remote file inclusion vulnerability in cat\_viewed.php in AL-Caricatier 2.5 allows remote attackers to execute arbitrary PHP code via a U (no CVSS)
- [CVE-2007-4169](https://cve.now/CVE-2007-4169.md): Multiple PHP remote file inclusion vulnerabilities in vgallite allow remote attackers to execute arbitrary PHP code via a URL in the (1) dir (no CVSS)
- [CVE-2007-4170](https://cve.now/CVE-2007-4170.md): Multiple PHP remote file inclusion vulnerabilities in AL-Athkar 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the (1 (no CVSS)
- [CVE-2007-4171](https://cve.now/CVE-2007-4171.md): SQL injection vulnerability in komentar.php in the Forum Module for auraCMS (Modul Forum Sederhana) allows remote attackers to execute arbit (no CVSS)
- [CVE-2007-4172](https://cve.now/CVE-2007-4172.md): Multiple cross-site scripting (XSS) vulnerabilities in Open Webmail (OWM) 2.52 20060831 and earlier allow remote attackers to inject arbitra (no CVSS)
- [CVE-2007-4173](https://cve.now/CVE-2007-4173.md): SQL injection vulnerability in duyuruoku.asp in Hunkaray Okul Portali 1.1 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2007-4174](https://cve.now/CVE-2007-4174.md): Tor before 0.1.2.16, when ControlPort is enabled, does not properly restrict commands to localhost port 9051, which allows remote attackers (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-08-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.