# CVEs published 2007-08-09

22 CVEs were published on August 9, 2007: 1 critical, 0 high. Days are UTC.

- [CVE-2007-2955](https://cve.now/CVE-2007-2955.md): Multiple unspecified "input validation error" vulnerabilities in multiple ActiveX controls in NavComUI.dll, as used in multiple Norton AntiV (no CVSS)
- [CVE-2007-3843](https://cve.now/CVE-2007-3843.md): The Linux kernel before 2.6.23-rc1 checks the wrong global variable for the CIFS sec mount option, which might allow remote attackers to spo (no CVSS)
- [CVE-2007-4279](https://cve.now/CVE-2007-4279.md): PHP remote file inclusion vulnerability in config.php in FrontAccounting 1.12 Build 31 allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2007-4280](https://cve.now/CVE-2007-4280.md): The Skinny channel driver (chan\_skinny) in Asterisk Open Source before 1.4.10, AsteriskNOW before beta7, Appliance Developer Kit before 0.7. (no CVSS)
- [CVE-2007-4281](https://cve.now/CVE-2007-4281.md): Cross-site scripting (XSS) vulnerability in KnowledgeTree Open Source 3.4 and 3.4.1 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2007-4282](https://cve.now/CVE-2007-4282.md): The "Extended properties for entries" (entryproperties) plugin in serendipity\_event\_entryproperties.php in Serendipity 1.1.3 allows remote a (no CVSS)
- [CVE-2007-4283](https://cve.now/CVE-2007-4283.md): PHP remote file inclusion vulnerability in bridge/yabbse.inc.php in Coppermine Photo Gallery (CPG) 1.3.1 allows remote attackers to execute (no CVSS)
- [CVE-2007-4284](https://cve.now/CVE-2007-4284.md): Multiple cross-site scripting (XSS) vulnerabilities in Cisco Unified MeetingPlace Web Conferencing (MP) 5.3.235.0 and earlier allow remote a (no CVSS)
- [CVE-2007-4285](https://cve.now/CVE-2007-4285.md): Unspecified vulnerability in Cisco IOS and Cisco IOS XR 12.x up to 12.3, including some versions before 12.3(15) and 12.3(14)T, allows remot (no CVSS)
- [CVE-2007-4286](https://cve.now/CVE-2007-4286.md): Buffer overflow in the Next Hop Resolution Protocol (NHRP) functionality in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a d (no CVSS)
- [CVE-2007-4287](https://cve.now/CVE-2007-4287.md): PHP remote file inclusion vulnerability in fc\_functions/fc\_example.php in FishCart 3.2 RC2 and earlier allows remote attackers to execute ar (no CVSS)
- [CVE-2007-4288](https://cve.now/CVE-2007-4288.md): Microsoft Windows Media Player 11 (wmplayer.exe) allows user-assisted remote attackers to cause a denial of service (application crash) via (no CVSS)
- [CVE-2007-4289](https://cve.now/CVE-2007-4289.md): Sun Java System Portal Server 7.0 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-depe (no CVSS)
- [CVE-2007-4290](https://cve.now/CVE-2007-4290.md): Multiple PHP remote file inclusion vulnerabilities in Guestbook Script 1.9 allow remote attackers to execute arbitrary PHP code via a URL in (CVSS 9.8)
- [CVE-2007-4291](https://cve.now/CVE-2007-4291.md): Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service via (1) a malformed MGCP packet, which causes a device hang (no CVSS)
- [CVE-2007-4292](https://cve.now/CVE-2007-4292.md): Multiple memory leaks in Cisco IOS 12.0 through 12.4 allow remote attackers to cause a denial of service (device crash) via a malformed SIP (no CVSS)
- [CVE-2007-4293](https://cve.now/CVE-2007-4293.md): Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device crash) via (1) "abnormal" MGCP messages, aka CSCsd8 (no CVSS)
- [CVE-2007-4294](https://cve.now/CVE-2007-4294.md): Unspecified vulnerability in Cisco Unified Communications Manager (CUCM) 5.0, 5.1, and 6.0, and IOS 12.0 through 12.4, allows remote attacke (no CVSS)
- [CVE-2007-4295](https://cve.now/CVE-2007-4295.md): Unspecified vulnerability in Cisco IOS 12.0 through 12.4 allows remote attackers to execute arbitrary code via a malformed SIP packet, aka C (no CVSS)
- [CVE-2007-3872](https://cve.now/CVE-2007-3872.md): Multiple stack-based buffer overflows in the Shared Trace Service (OVTrace) service for HP OpenView Operations A.07.50 for Windows, and poss (no CVSS)
- [CVE-2007-4264](https://cve.now/CVE-2007-4264.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) 1.5.2 and (no CVSS)
- [CVE-2007-4265](https://cve.now/CVE-2007-4265.md): Multiple cross-site scripting (XSS) vulnerabilities in VisionProject 3.1 and earlier allow remote attackers to inject arbitrary web script o (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-08-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.