# CVEs published 2007-08-21 29 CVEs were published on August 21, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-3618](https://cve.now/CVE-2007-3618.md): Stack-based buffer overflow in the NetWorker Remote Exec Service (nsrexecd.exe) in EMC Software NetWorker 7.x.x allows remote attackers to e (no CVSS) - [CVE-2007-4456](https://cve.now/CVE-2007-4456.md): SQL injection vulnerability in index.php in the SimpleFAQ (com\_simplefaq) 2.11 component for Mambo allows remote attackers to execute arbitr (no CVSS) - [CVE-2007-4457](https://cve.now/CVE-2007-4457.md): Directory traversal vulnerability in forumreply.php in Dalai Forum 1.1 allows remote attackers to include and execute arbitrary local files (no CVSS) - [CVE-2007-4458](https://cve.now/CVE-2007-4458.md): PHP remote file inclusion vulnerability in includes/class/class\_tpl.php in Firesoft allows remote attackers to execute arbitrary PHP code vi (no CVSS) - [CVE-2007-4459](https://cve.now/CVE-2007-4459.md): Cisco IP Phone 7940 and 7960 with P0S3-08-6-00 firmware, and other SIP firmware before 8.7(0), allows remote attackers to cause a denial of (no CVSS) - [CVE-2007-4460](https://cve.now/CVE-2007-4460.md): The RenderV2ToFile function in tag\_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attac (no CVSS) - [CVE-2007-4461](https://cve.now/CVE-2007-4461.md): NuFW 2.2.3, and certain other versions after 2.0, allows remote attackers to bypass time-based packet filtering rules via certain "out of pe (no CVSS) - [CVE-2007-4462](https://cve.now/CVE-2007-4462.md): lib/Locale/Po4a/Po.pm in po4a before 0.32 allows local users to overwrite arbitrary files via a symlink attack on the gettextization.failed. (no CVSS) - [CVE-2007-4463](https://cve.now/CVE-2007-4463.md): The Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to cause a denial of service (unhandled exception) via a (no CVSS) - [CVE-2007-4464](https://cve.now/CVE-2007-4464.md): CRLF injection vulnerability in the Fileinfo 2.0.9 plugin for Total Commander allows user-assisted remote attackers to spoof the information (no CVSS) - [CVE-2007-4453](https://cve.now/CVE-2007-4453.md): Multiple cross-site scripting (XSS) vulnerabilities in vBulletin 3.6.8 allow remote attackers to inject arbitrary web code or HTML via the ( (no CVSS) - [CVE-2007-4454](https://cve.now/CVE-2007-4454.md): Eval injection vulnerability in environment.php in Olate Download (od) 3.4.1 allows context-dependent attackers to execute arbitrary code vi (no CVSS) - [CVE-2005-2932](https://cve.now/CVE-2005-2932.md): Multiple Check Point Zone Labs ZoneAlarm products before 7.0.362, including ZoneAlarm Security Suite 5.5.062.004 and 6.5.737, use insecure d (no CVSS) - [CVE-2007-4213](https://cve.now/CVE-2007-4213.md): Palm OS on Treo 650, 680, 700p, and 755p Smart phones allows remote attackers to cause a denial of service (device reset or hang) via a floo (no CVSS) - [CVE-2007-4216](https://cve.now/CVE-2007-4216.md): vsdatant.sys 6.5.737.0 in Check Point Zone Labs ZoneAlarm before 7.0.362 allows local users to gain privileges via a crafted Interrupt Reque (no CVSS) - [CVE-2007-4439](https://cve.now/CVE-2007-4439.md): PHP remote file inclusion vulnerability in popup\_window.php in Squirrelcart 1.x.x and earlier allows remote attackers to execute arbitrary P (no CVSS) - [CVE-2007-4440](https://cve.now/CVE-2007-4440.md): Stack-based buffer overflow in the MercuryS SMTP server in Mercury Mail Transport System, possibly 4.51 and earlier, allows remote attackers (no CVSS) - [CVE-2007-4441](https://cve.now/CVE-2007-4441.md): Buffer overflow in php\_win32std.dll in the win32std extension for PHP 5.2.0 and earlier allows context-dependent attackers to execute arbitr (no CVSS) - [CVE-2007-4442](https://cve.now/CVE-2007-4442.md): Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows (no CVSS) - [CVE-2007-4443](https://cve.now/CVE-2007-4443.md): The UCC dedicated server for the Unreal engine, possibly 2003 and 2004, on Windows allows remote attackers to cause a denial of service (con (no CVSS) - [CVE-2007-4444](https://cve.now/CVE-2007-4444.md): Multiple buffer overflows in Image Space rFactor 1.250 and earlier allow remote attackers to execute arbitrary code via a packet with ID (1) (no CVSS) - [CVE-2007-4445](https://cve.now/CVE-2007-4445.md): Image Space rFactor 1.250 and earlier allows remote attackers to cause a denial of service (daemon crash) via (1) an ID 0x30 packet, (2) an (no CVSS) - [CVE-2007-4446](https://cve.now/CVE-2007-4446.md): Format string vulnerability in the server in Toribash 2.71 and earlier allows remote attackers to execute arbitrary code via format string s (no CVSS) - [CVE-2007-4447](https://cve.now/CVE-2007-4447.md): Multiple buffer overflows in the client in Toribash 2.71 and earlier allow remote attackers to (1) execute arbitrary code via a long game co (no CVSS) - [CVE-2007-4448](https://cve.now/CVE-2007-4448.md): The server in Toribash 2.71 and earlier does not properly handle partially joined clients that are temporarily assigned the ID of -1, which (no CVSS) - [CVE-2007-4449](https://cve.now/CVE-2007-4449.md): The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service (application hang) via a command without an LF (no CVSS) - [CVE-2007-4450](https://cve.now/CVE-2007-4450.md): The server in Toribash 2.71 and earlier does not properly handle long commands, which allows remote attackers to trigger a protocol violatio (no CVSS) - [CVE-2007-4451](https://cve.now/CVE-2007-4451.md): The server in Toribash 2.71 and earlier on Windows allows remote attackers to cause a denial of service (continuous beep and server hang) vi (no CVSS) - [CVE-2007-4452](https://cve.now/CVE-2007-4452.md): The client in Toribash 2.71 and earlier allows remote attackers to cause a denial of service (disconnection) via a long (1) emote or (2) SPE (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-08-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.