# CVEs published 2007-08-17

15 CVEs were published on August 17, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-4395](https://cve.now/CVE-2007-4395.md): Multiple unspecified vulnerabilities in the Role Based Access Control (RBAC) functionality in Sun Solaris 8 allow remote attackers who know (no CVSS)
- [CVE-2007-4386](https://cve.now/CVE-2007-4386.md): SQL injection vulnerability in search.php in GetMyOwnArcade allows remote attackers to execute arbitrary SQL commands via the query paramete (no CVSS)
- [CVE-2007-4387](https://cve.now/CVE-2007-4387.md): Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows (no CVSS)
- [CVE-2007-4388](https://cve.now/CVE-2007-4388.md): 2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by default. (no CVSS)
- [CVE-2007-4389](https://cve.now/CVE-2007-4389.md): Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 (no CVSS)
- [CVE-2007-4390](https://cve.now/CVE-2007-4390.md): The Command Line Interface (CLI), aka Adonis Administration Console, on the BlueCat Networks Adonis DNS/DHCP appliance 5.0.2.8 allows local (no CVSS)
- [CVE-2007-4391](https://cve.now/CVE-2007-4391.md): Heap-based buffer overflow in Kakadu kdu\_v32m.dll in Yahoo! Messenger 8.1.0.413 allows remote attackers to cause a denial of service (applic (no CVSS)
- [CVE-2007-4392](https://cve.now/CVE-2007-4392.md): Winamp 5.35 allows remote attackers to cause a denial of service (program stack overflow and application crash) via an M3U file that recursi (no CVSS)
- [CVE-2007-4393](https://cve.now/CVE-2007-4393.md): The installation script for orarun on SUSE Linux before 20070810 places the oracle user into the disk group, which allows the local oracle u (no CVSS)
- [CVE-2007-4394](https://cve.now/CVE-2007-4394.md): Unspecified vulnerability in a "core clean" cron job created by the findutils-locate package on SUSE Linux 10.0 and 10.1 and Enterprise Serv (no CVSS)
- [CVE-2007-4381](https://cve.now/CVE-2007-4381.md): Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2\_14 and earli (no CVSS)
- [CVE-2007-4382](https://cve.now/CVE-2007-4382.md): CounterPath X-Lite 3.0 34025, and possibly eyeBeam, allows remote attackers to cause a denial of service (device crash) via a SIP INVITE mes (no CVSS)
- [CVE-2007-4383](https://cve.now/CVE-2007-4383.md): PHP remote file inclusion vulnerability in tracking.php in Trackeur 1 allows remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2007-4384](https://cve.now/CVE-2007-4384.md): Multiple PHP remote file inclusion vulnerabilities in depouilg.php3 in Stephane Pineau VOTE 1c allow remote attackers to execute arbitrary P (no CVSS)
- [CVE-2007-4385](https://cve.now/CVE-2007-4385.md): OWASP Stinger before 2.5 allows remote attackers to bypass input validation routines by using multipart encoded requests instead of form-url (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-08-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.