# CVEs published 2007-08-22

18 CVEs were published on August 22, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-3873](https://cve.now/CVE-2007-3873.md): Stack-based buffer overflow in vstlib32.dll 1.2.0.1012 in the SSAPI Engine 5.0.0.1066 through 5.2.0.1012 in Trend Micro AntiSpyware 3.5 and (no CVSS)
- [CVE-2007-4218](https://cve.now/CVE-2007-4218.md): Multiple buffer overflows in the ServerProtect service (SpntSvc.exe) in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 a (no CVSS)
- [CVE-2007-4219](https://cve.now/CVE-2007-4219.md): Integer overflow in the RPCFN\_SYNC\_TASK function in StRpcSrv.dll, as used by the ServerProtect service (SpntSvc.exe), in Trend Micro ServerP (no CVSS)
- [CVE-2007-4477](https://cve.now/CVE-2007-4477.md): The administration interface in the Planet VC-200M VDSL2 router allows remote attackers to cause a denial of service (administration interfa (no CVSS)
- [CVE-2007-4478](https://cve.now/CVE-2007-4478.md): Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6.0 and 7 allows user-assisted remote attackers to inject arbitrary (no CVSS)
- [CVE-2007-4479](https://cve.now/CVE-2007-4479.md): Cross-site scripting (XSS) vulnerability in search.html in Search Engine Builder allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2007-4480](https://cve.now/CVE-2007-4480.md): Cross-site scripting (XSS) vulnerability in index.php in the Sirius 1.0 theme for WordPress allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2007-4481](https://cve.now/CVE-2007-4481.md): Cross-site scripting (XSS) vulnerability in index.php in the (1) Blix 0.9.1 and (2) Blix 0.9.1 Rus themes for WordPress allows remote attack (no CVSS)
- [CVE-2007-4482](https://cve.now/CVE-2007-4482.md): Cross-site scripting (XSS) vulnerability in index.php in the Pool 1.0.7 theme for WordPress allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2007-4483](https://cve.now/CVE-2007-4483.md): Cross-site scripting (XSS) vulnerability in index.php in the WordPress Classic 1.5 theme in WordPress before 2.1.3 allows remote attackers t (no CVSS)
- [CVE-2007-4484](https://cve.now/CVE-2007-4484.md): PHP remote file inclusion vulnerability in login.php in My\_REFERER 1.08 allows remote attackers to execute arbitrary PHP code via a URL in t (no CVSS)
- [CVE-2007-4485](https://cve.now/CVE-2007-4485.md): PHP remote file inclusion vulnerability in visitor.php in Butterfly online visitors counter 1.08, when used with certain older versions of P (no CVSS)
- [CVE-2007-4486](https://cve.now/CVE-2007-4486.md): Multiple PHP remote file inclusion vulnerabilities in index.php in Linkliste 1.2 allow remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2007-4487](https://cve.now/CVE-2007-4487.md): Cross-site scripting (XSS) vulnerability in D22-Shoutbox for Invision Power Board (IPB or IP.Board) allows remote attackers to inject arbitr (no CVSS)
- [CVE-2007-4488](https://cve.now/CVE-2007-4488.md): Multiple cross-site scripting (XSS) vulnerabilities in the Siemens Gigaset SE361 WLAN router with firmware 1.00.0 allow remote attackers to (no CVSS)
- [CVE-2007-4489](https://cve.now/CVE-2007-4489.md): Buffer overflow in the IUAComFormX ActiveX control in uacomx.ocx 2.0.1 in the eCentrex VOIP Client module allows remote attackers to execute (no CVSS)
- [CVE-2007-4490](https://cve.now/CVE-2007-4490.md): Multiple buffer overflows in EarthAgent.exe in Trend Micro ServerProtect 5.58 for Windows before Security Patch 4 allow remote attackers to (no CVSS)
- [CVE-2007-4455](https://cve.now/CVE-2007-4455.md): The SIP channel driver (chan\_sip) in Asterisk Open Source 1.4.x before 1.4.11, AsteriskNOW before beta7, Asterisk Appliance Developer Kit 0. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-08-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.