# CVEs published 2007-08-13

21 CVEs were published on August 13, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-4302](https://cve.now/CVE-2007-4302.md): Multiple race conditions in certain system call wrappers in Generic Software Wrappers Toolkit (GSWTK) allow local users to defeat system cal (no CVSS)
- [CVE-2007-4303](https://cve.now/CVE-2007-4303.md): Multiple race conditions in (1) certain rules and (2) argument copying during VM protection, in CerbNG for FreeBSD 4.8 allow local users to (no CVSS)
- [CVE-2007-4304](https://cve.now/CVE-2007-4304.md): CerbNG for FreeBSD 4.8 does not properly implement VM protection when attempting to prevent system call wrapper races, which allows local us (no CVSS)
- [CVE-2007-4305](https://cve.now/CVE-2007-4305.md): Multiple race conditions in the (1) Sudo monitor mode and (2) Sysjail policies in Systrace on NetBSD and OpenBSD allow local users to defeat (no CVSS)
- [CVE-2007-4306](https://cve.now/CVE-2007-4306.md): Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.10.3 allow remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2007-4307](https://cve.now/CVE-2007-4307.md): Multiple cross-site scripting (XSS) vulnerabilities in Storesprite 7 and earlier allow remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2007-4308](https://cve.now/CVE-2007-4308.md): The (1) aac\_cfg\_open and (2) aac\_compat\_ioctl functions in the SCSI layer ioctl path in aacraid in the Linux kernel before 2.6.23-rc2 do not (no CVSS)
- [CVE-2007-4309](https://cve.now/CVE-2007-4309.md): IBM Lotus Notes 5.x through 7.0.2 allows user-assisted remote authenticated administrators to obtain a cleartext notes.id password by settin (no CVSS)
- [CVE-2007-4310](https://cve.now/CVE-2007-4310.md): The finger daemon (in.fingerd) in Sun Solaris 7 through 9 allows remote attackers to list all accounts that have certain nonstandard GECOS f (no CVSS)
- [CVE-2007-4311](https://cve.now/CVE-2007-4311.md): The xfer\_secondary\_pool function in drivers/char/random.c in the Linux kernel 2.4 before 2.4.35 performs reseed operations on only the first (no CVSS)
- [CVE-2007-4312](https://cve.now/CVE-2007-4312.md): SQL injection vulnerability in index.php in Php Blue Dragon CMS 3.0.0 allows remote attackers to execute arbitrary SQL commands via the arti (no CVSS)
- [CVE-2007-4313](https://cve.now/CVE-2007-4313.md): PHP remote file inclusion vulnerability in public\_includes/pub\_blocks/activecontent.php in Php Blue Dragon CMS 3.0.0 allows remote attackers (no CVSS)
- [CVE-2007-4314](https://cve.now/CVE-2007-4314.md): pixlie.php in Pixlie 1.7 allows remote attackers to trigger the reading and JPEG image processing of files in a remote directory tree via a (no CVSS)
- [CVE-2007-4315](https://cve.now/CVE-2007-4315.md): The AMD ATI atidsmxx.sys 3.0.502.0 driver on Windows Vista allows local users to bypass the driver signing policy, write to arbitrary kernel (no CVSS)
- [CVE-2007-4316](https://cve.now/CVE-2007-4316.md): The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device has a certain default password, which allows remote attac (no CVSS)
- [CVE-2007-4317](https://cve.now/CVE-2007-4317.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 de (no CVSS)
- [CVE-2007-4318](https://cve.now/CVE-2007-4318.md): Cross-site scripting (XSS) vulnerability in Forms/General\_1 in the management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 d (no CVSS)
- [CVE-2007-4319](https://cve.now/CVE-2007-4319.md): The management interface in ZyNOS firmware 3.62(WK.6) on the Zyxel Zywall 2 device allows remote authenticated administrators to cause a den (no CVSS)
- [CVE-2007-3851](https://cve.now/CVE-2007-3851.md): The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets, allows local users with access to an X1 (no CVSS)
- [CVE-2007-4301](https://cve.now/CVE-2007-4301.md): Multiple cross-site scripting (XSS) vulnerabilities in the management interface in WebCart 2.20 through 2.25 allow remote attackers to injec (no CVSS)
- [CVE-2007-2956](https://cve.now/CVE-2007-2956.md): Stack-based buffer overflow in the readRadianceHeader function in (1) src/fileformat/rgbeio.cpp in pfstools 1.6.2 and (2) src/Fileformat/rgb (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-08-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.