# CVEs published 2007-08-14

42 CVEs were published on August 14, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-0948](https://cve.now/CVE-2007-0948.md): Heap-based buffer overflow in Microsoft Virtual PC 2004 and PC for Mac 7.1 and 7, and Virtual Server 2005 and 2005 R2, allows local guest OS (no CVSS)
- [CVE-2007-1749](https://cve.now/CVE-2007-1749.md): Integer underflow in the CDownloadSink class code in the Vector Markup Language (VML) component (VGX.DLL), as used in Internet Explorer 5.01 (no CVSS)
- [CVE-2007-3032](https://cve.now/CVE-2007-3032.md): Unspecified vulnerability in Windows Vista Contacts Gadget in Windows Vista allows user-assisted remote attackers to execute arbitrary code (no CVSS)
- [CVE-2007-3033](https://cve.now/CVE-2007-3033.md): Cross-site scripting (XSS) vulnerability in Windows Vista Feed Headlines Gadget (aka Sidebar RSS Feeds Gadget) in Windows Vista allows user- (no CVSS)
- [CVE-2007-3382](https://cve.now/CVE-2007-3382.md): Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2007-3385](https://cve.now/CVE-2007-3385.md): Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \\" character (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2007-3386](https://cve.now/CVE-2007-3386.md): Cross-site scripting (XSS) vulnerability in the Host Manager Servlet for Apache Tomcat 6.0.0 to 6.0.13 and 5.5.0 to 5.5.24 allows remote att (no CVSS)
- [CVE-2007-3891](https://cve.now/CVE-2007-3891.md): Unspecified vulnerability in Windows Vista Weather Gadgets in Windows Vista allows remote attackers to execute arbitrary code via crafted HT (no CVSS)
- [CVE-2007-0943](https://cve.now/CVE-2007-0943.md): Unspecified vulnerability in Internet Explorer 5.01 and 6 SP1 allows remote attackers to execute arbitrary code via crafted Cascading Style (no CVSS)
- [CVE-2007-2216](https://cve.now/CVE-2007-2216.md): The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, (no CVSS)
- [CVE-2007-2223](https://cve.now/CVE-2007-2223.md): Microsoft XML Core Services (MSXML) 3.0 through 6.0 allows remote attackers to execute arbitrary code via the substringData method on a (1) (no CVSS)
- [CVE-2007-2224](https://cve.now/CVE-2007-2224.md): Object linking and embedding (OLE) Automation, as used in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Office 2004 for Mac, (no CVSS)
- [CVE-2007-3034](https://cve.now/CVE-2007-3034.md): Integer overflow in the AttemptWrite function in Graphics Rendering Engine (GDI) on Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 (no CVSS)
- [CVE-2007-3035](https://cve.now/CVE-2007-3035.md): Unspecified vulnerability in Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin (no CVSS)
- [CVE-2007-3037](https://cve.now/CVE-2007-3037.md): Microsoft Windows Media Player 7.1, 9, 10, and 11 allows remote attackers to execute arbitrary code via a skin file (WMZ or WMD) with crafte (no CVSS)
- [CVE-2007-3041](https://cve.now/CVE-2007-3041.md): Unspecified vulnerability in the pdwizard.ocx ActiveX object for Internet Explorer 5.01, 6 SP1, and 7 allows remote attackers to execute arb (no CVSS)
- [CVE-2007-3890](https://cve.now/CVE-2007-3890.md): Microsoft Excel in Office 2000 SP3, Office XP SP3, Office 2003 SP2, and Office 2004 for Mac allows remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2007-3852](https://cve.now/CVE-2007-3852.md): The init script (sysstat.in) in sysstat 5.1.2 up to 7.1.6 creates /tmp/sysstat.run insecurely, which allows local users to execute arbitrary (no CVSS)
- [CVE-2007-4332](https://cve.now/CVE-2007-4332.md): SQL injection vulnerability in article.php in Article Dashboard, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbit (no CVSS)
- [CVE-2007-4333](https://cve.now/CVE-2007-4333.md): Multiple cross-site scripting (XSS) vulnerabilities in signup.php in Article Dashboard allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2007-4334](https://cve.now/CVE-2007-4334.md): Cross-site scripting (XSS) vulnerability in whois.php in Php-stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2007-4335](https://cve.now/CVE-2007-4335.md): Format string vulnerability in the SMTP server component in Qbik WinGate 5.x and 6.x before 6.2.2 allows remote attackers to cause a denial (no CVSS)
- [CVE-2007-4336](https://cve.now/CVE-2007-4336.md): Buffer overflow in the Live Picture Corporation DXSurface.LivePicture.FlashPix.1 (DirectTransform FlashPix) ActiveX control in DXTLIPI.DLL 6 (no CVSS)
- [CVE-2007-4337](https://cve.now/CVE-2007-4337.md): Multiple buffer overflows in the httplib\_parse\_sc\_header function in lib/http.c in Streamripper before 1.62.2 allow remote attackers to exec (no CVSS)
- [CVE-2007-4338](https://cve.now/CVE-2007-4338.md): index.php in Ryan Haudenschilt Family Connections (FCMS) before 0.9 allows remote attackers to access an arbitrary account by placing the ac (no CVSS)
- [CVE-2007-4339](https://cve.now/CVE-2007-4339.md): Multiple PHP remote file inclusion vulnerabilities in PHPCentral Poll Script 1.0 allow remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2007-4340](https://cve.now/CVE-2007-4340.md): PHP remote file inclusion vulnerability in index.php in phpDVD 1.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2007-4341](https://cve.now/CVE-2007-4341.md): PHP remote file inclusion vulnerability in adm/my\_statistics.php in Omnistar Lib2 PHP 0.2 allows remote attackers to execute arbitrary PHP c (no CVSS)
- [CVE-2007-4342](https://cve.now/CVE-2007-4342.md): PHP remote file inclusion vulnerability in include.php in PHPCentral Login 1.0 allows remote attackers to execute arbitrary PHP code via a U (no CVSS)
- [CVE-2007-3848](https://cve.now/CVE-2007-3848.md): Linux kernel 2.4.35 and other versions allows local users to send arbitrary signals to a child process that is running at higher privileges (no CVSS)
- [CVE-2007-4320](https://cve.now/CVE-2007-4320.md): PHP remote file inclusion vulnerability in admin/addons/archive/archive.php in Ncaster 1.7.2 allows remote attackers to execute arbitrary PH (no CVSS)
- [CVE-2007-4321](https://cve.now/CVE-2007-4321.md): fail2ban 0.8 and earlier does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny (no CVSS)
- [CVE-2007-4322](https://cve.now/CVE-2007-4322.md): BlockHosts before 2.0.4 does not properly parse (1) sshd and (2) vsftpd log files, which allows remote attackers to add arbitrary deny entri (no CVSS)
- [CVE-2007-4323](https://cve.now/CVE-2007-4323.md): DenyHosts 2.6 does not properly parse sshd log files, which allows remote attackers to add arbitrary hosts to the /etc/hosts.deny file and c (no CVSS)
- [CVE-2007-4324](https://cve.now/CVE-2007-4324.md): ActionScript 3 (AS3) in Adobe Flash Player 9.0.47.0, and other versions and other 9.0.124.0 and earlier versions, allows remote attackers to (no CVSS)
- [CVE-2007-4325](https://cve.now/CVE-2007-4325.md): PHP remote file inclusion vulnerability in index.php in Gaestebuch 1.5 allows remote attackers to execute arbitrary PHP code via a URL in th (no CVSS)
- [CVE-2007-4326](https://cve.now/CVE-2007-4326.md): Multiple PHP remote file inclusion vulnerabilities in Bilder Uploader 1.3 allow remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2007-4327](https://cve.now/CVE-2007-4327.md): Multiple PHP remote file inclusion vulnerabilities in File Uploader 1.1 allow remote attackers to execute arbitrary PHP code via a URL in th (no CVSS)
- [CVE-2007-4328](https://cve.now/CVE-2007-4328.md): Multiple PHP remote file inclusion vulnerabilities in Mapos Bilder Galerie 1.0 allow remote attackers to execute arbitrary PHP code via a UR (no CVSS)
- [CVE-2007-4329](https://cve.now/CVE-2007-4329.md): Multiple PHP remote file inclusion vulnerabilities in Web News 1.1 allow remote attackers to execute arbitrary PHP code via a URL in the con (no CVSS)
- [CVE-2007-4330](https://cve.now/CVE-2007-4330.md): PHP remote file inclusion vulnerability in shoutbox.php in Shoutbox 1.0 allows remote attackers to execute arbitrary PHP code via a URL in t (no CVSS)
- [CVE-2007-4331](https://cve.now/CVE-2007-4331.md): PHP remote file inclusion vulnerability in index.php in FindNix allows remote attackers to include the contents of arbitrary URLs and conduc (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-08-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.