# CVEs published 2007-08-23

22 CVEs were published on August 23, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-3847](https://cve.now/CVE-2007-3847.md): The date handling code in modules/proxy/proxy\_util.c (mod\_proxy) in Apache 2.3.0, when using a threaded MPM, allows remote origin servers to (no CVSS)
- [CVE-2007-4498](https://cve.now/CVE-2007-4498.md): The Grandstream SIP Phone GXV-3000 with firmware 1.0.1.7, Loader 1.0.0.6, and Boot 1.0.0.18 allows remote attackers to force silent call com (no CVSS)
- [CVE-2007-4499](https://cve.now/CVE-2007-4499.md): Unrestricted file upload vulnerability in output.php in American Financing eMail Image Upload 4.1 allows remote attackers to upload and exec (no CVSS)
- [CVE-2007-4500](https://cve.now/CVE-2007-4500.md): Unspecified vulnerability in TunnelRunner in SSHKeychain before 0.8.2 beta, and possibly later versions, allows local users to gain privileg (no CVSS)
- [CVE-2007-4501](https://cve.now/CVE-2007-4501.md): Unspecified vulnerability in PassphraseRequester in SSHKeychain before 0.8.2 beta allows attackers to obtain sensitive information (password (no CVSS)
- [CVE-2007-4502](https://cve.now/CVE-2007-4502.md): SQL injection vulnerability in index.php in the BibTeX component (com\_jombib) 1.3 and earlier for Joomla! allows remote attackers to execute (no CVSS)
- [CVE-2007-4503](https://cve.now/CVE-2007-4503.md): SQL injection vulnerability in index.php in the Nice Talk component (com\_nicetalk) 0.9.3 and earlier for Joomla! allows remote attackers to (no CVSS)
- [CVE-2007-4504](https://cve.now/CVE-2007-4504.md): Directory traversal vulnerability in index.php in the RSfiles component (com\_rsfiles) 1.0.2 and earlier for Joomla! allows remote attackers (no CVSS)
- [CVE-2007-4505](https://cve.now/CVE-2007-4505.md): SQL injection vulnerability in index.php in the RemoSitory component (com\_remository) for Mambo allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2007-4506](https://cve.now/CVE-2007-4506.md): SQL injection vulnerability in index.php in the NeoRecruit component (com\_neorecruit) 1.4 and earlier for Joomla! allows remote attackers to (no CVSS)
- [CVE-2007-4507](https://cve.now/CVE-2007-4507.md): Multiple buffer overflows in the php\_ntuser component for PHP 5.2.3 allow context-dependent attackers to cause a denial of service or execut (no CVSS)
- [CVE-2007-4508](https://cve.now/CVE-2007-4508.md): Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Prism 1.1.1.0 and earlier (no CVSS)
- [CVE-2007-4509](https://cve.now/CVE-2007-4509.md): SQL injection vulnerability in index.php in the EventList component (com\_eventlist) 0.8 and earlier for Joomla! allows remote attackers to e (no CVSS)
- [CVE-2007-4510](https://cve.now/CVE-2007-4510.md): ClamAV before 0.91.2, as used in Kolab Server 2.0 through 2.2beta1 and other products, allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2007-4511](https://cve.now/CVE-2007-4511.md): The Sun Admin Console in Sun Application Server 9.0\_0.1 does not apply certain configuration changes persistently, which causes the (1) SSL (no CVSS)
- [CVE-2003-1334](https://cve.now/CVE-2003-1334.md): Cross-site scripting (XSS) vulnerability in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) before 1.2.7 allows remote attack (no CVSS)
- [CVE-2003-1335](https://cve.now/CVE-2003-1335.md): Directory traversal vulnerability in Kai Blankenhorn Bitfolge simple and nice index file (aka snif) before 1.2.5 allows remote attackers to (no CVSS)
- [CVE-2007-4493](https://cve.now/CVE-2007-4493.md): eZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module views that lack a policy function, which has un (no CVSS)
- [CVE-2007-4494](https://cve.now/CVE-2007-4494.md): The tipafriend function in eZ publish before 3.8.9, and 3.9 before 3.9.3, does not limit access by anonymous users, which allows remote atta (no CVSS)
- [CVE-2007-4495](https://cve.now/CVE-2007-4495.md): Unspecified vulnerability in the ata disk driver in Sun Solaris 10 on the x86 platform before 20070821 allows local users to cause a denial (no CVSS)
- [CVE-2007-4491](https://cve.now/CVE-2007-4491.md): SQL injection vulnerability in uyeler2.php in Gurur haber 2.0 allows remote attackers to execute arbitrary SQL commands via the id parameter (no CVSS)
- [CVE-2007-4492](https://cve.now/CVE-2007-4492.md): Multiple unspecified vulnerabilities in the ata disk driver in Sun Solaris 8, 9, and 10 on the x86 platform before 20070821 allow local user (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-08-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.