# CVEs published 2007-08-15

24 CVEs were published on August 15, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-4367](https://cve.now/CVE-2007-4367.md): Opera before 9.23 allows remote attackers to execute arbitrary code via crafted Javascript that triggers a "virtual function call on an inva (no CVSS)
- [CVE-2007-4368](https://cve.now/CVE-2007-4368.md): SQL injection vulnerability in /main in IBM Rational ClearQuest (CQ) Web 7.0.0.0-IFIX02 and 7.0.0.1 allows remote attackers to execute arbit (no CVSS)
- [CVE-2007-4369](https://cve.now/CVE-2007-4369.md): Directory traversal vulnerability in go/\_files in SOTEeSKLEP before 4.0 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2007-4370](https://cve.now/CVE-2007-4370.md): Multiple buffer overflows in the (1) client and (2) server in Racer 0.5.3 beta 5 allow remote attackers to execute arbitrary code via a long (no CVSS)
- [CVE-2007-4371](https://cve.now/CVE-2007-4371.md): Unrestricted file upload vulnerability in admin/pages/blog-add.php in Neuron Blog 1.1 allows remote attackers to upload and execute arbitrar (no CVSS)
- [CVE-2007-4278](https://cve.now/CVE-2007-4278.md): Stack-based buffer overflow in the giomgr process in ESRI ArcSDE service 9.2, as used with ArcGIS, allows remote attackers to cause a denial (no CVSS)
- [CVE-2007-0319](https://cve.now/CVE-2007-0319.md): Multiple stack-based buffer overflows in the Motive ActiveEmailTest.EmailData (ActiveUtils EmailData) ActiveX control in ActiveUtils.dll in (no CVSS)
- [CVE-2007-2240](https://cve.now/CVE-2007-2240.md): The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1. (no CVSS)
- [CVE-2007-2928](https://cve.now/CVE-2007-2928.md): Format string vulnerability in the IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 a (no CVSS)
- [CVE-2007-2929](https://cve.now/CVE-2007-2929.md): The IBM Lenovo Access Support acpRunner ActiveX control, as distributed in acpcontroller.dll before 1.2.8.0 and possibly acpir.dll before 1. (no CVSS)
- [CVE-2007-4358](https://cve.now/CVE-2007-4358.md): Zoidcom 0.6.7 and earlier allows remote attackers to cause a denial of service (application crash) via a JOIN packet (aka connection packet) (no CVSS)
- [CVE-2007-4359](https://cve.now/CVE-2007-4359.md): Multiple SQL injection vulnerabilities in SkilMatch Staffing Systems JobLister3 allow remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2007-4360](https://cve.now/CVE-2007-4360.md): Unspecified vulnerability in Dell Remote Access Card 4 (DRAC4) with firmware 1.50 Build 02.16 allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2007-4361](https://cve.now/CVE-2007-4361.md): NETGEAR (formerly Infrant) ReadyNAS RAIDiator before 4.00b2-p2-T1 beta creates a default SSH root password derived from the hardware serial (no CVSS)
- [CVE-2007-4362](https://cve.now/CVE-2007-4362.md): SQL injection vulnerability in category.php in Prozilla Webring allows remote attackers to execute arbitrary SQL commands via the cat parame (no CVSS)
- [CVE-2007-4363](https://cve.now/CVE-2007-4363.md): Multiple cross-site scripting (XSS) vulnerabilities in the nodereference module in Drupal Content Construction Kit (CCK) before 4.7.x-1.6, a (no CVSS)
- [CVE-2007-4364](https://cve.now/CVE-2007-4364.md): Fedora Commons before 2.2.1 does not properly handle certain authentication requests involving Java Naming and Directory Interface (JNDI), r (no CVSS)
- [CVE-2007-4365](https://cve.now/CVE-2007-4365.md): Cross-site scripting (XSS) vulnerability in eXV2 CMS 2.0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a (no CVSS)
- [CVE-2007-4366](https://cve.now/CVE-2007-4366.md): WengoPhone 2.1 allows remote attackers to cause a denial of service (device crash) via a SIP INVITE message without a Content-Type header. (no CVSS)
- [CVE-2007-4353](https://cve.now/CVE-2007-4353.md): Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users in the system group to gain root privileges via unspecified vectors invol (no CVSS)
- [CVE-2007-4354](https://cve.now/CVE-2007-4354.md): Buffer overflow in fileplace in bos.perf.tools in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors. (no CVSS)
- [CVE-2007-4355](https://cve.now/CVE-2007-4355.md): Buffer overflow in the at program on IBM AIX 5.3 allows local users to gain privileges via unspecified vectors. (no CVSS)
- [CVE-2007-4356](https://cve.now/CVE-2007-4356.md): Microsoft Internet Explorer 6 and 7 embeds FTP credentials in HTML files that are retrieved during an FTP session, which allows context-depe (no CVSS)
- [CVE-2007-4357](https://cve.now/CVE-2007-4357.md): Mozilla Firefox 2.0.0.6 and earlier allows remote attackers to spoof the contents of the status bar via a link to a data: URI containing an (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-08-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.