# CVEs published 2007-08-25

16 CVEs were published on August 25, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-4131](https://cve.now/CVE-2007-4131.md): Directory traversal vulnerability in the contains\_dot\_dot function in src/names.c in GNU tar allows user-assisted remote attackers to overwr (no CVSS)
- [CVE-2007-4522](https://cve.now/CVE-2007-4522.md): Multiple SQL injection vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to execute arbitrary SQL c (no CVSS)
- [CVE-2007-4523](https://cve.now/CVE-2007-4523.md): Multiple cross-site scripting (XSS) vulnerabilities in Ripe Website Manager 0.8.9 and earlier allow remote authenticated users to inject arb (no CVSS)
- [CVE-2007-4524](https://cve.now/CVE-2007-4524.md): PHP remote file inclusion vulnerability in adisplay.php in PhPress 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2007-4525](https://cve.now/CVE-2007-4525.md): PHP remote file inclusion vulnerability in inc-calcul.php3 in SPIP 1.7.2 allows remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2007-4526](https://cve.now/CVE-2007-4526.md): The Client Login Extension (CLE) in Novell Identity Manager before 3.5.1 20070730 stores the username and password in a local file, which al (no CVSS)
- [CVE-2007-4527](https://cve.now/CVE-2007-4527.md): Unrestricted file upload vulnerability in phUploader.php in phphq.Net phUploader 1.2 allows remote attackers to upload and execute arbitrary (no CVSS)
- [CVE-2007-4528](https://cve.now/CVE-2007-4528.md): The Foreign Function Interface (ffi) extension in PHP 5.0.5 does not follow safe\_mode restrictions, which allows context-dependent attackers (no CVSS)
- [CVE-2007-4529](https://cve.now/CVE-2007-4529.md): The WebAdmin interface in TeamSpeak Server 2.0.20.1 allows remote authenticated users with the ServerAdmin flag to assign Registered users c (no CVSS)
- [CVE-2007-4530](https://cve.now/CVE-2007-4530.md): Multiple cross-site scripting (XSS) vulnerabilities in TeamSpeak Server 2.0.20.1 allow remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2007-4531](https://cve.now/CVE-2007-4531.md): Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a client denial of service (c (no CVSS)
- [CVE-2007-4532](https://cve.now/CVE-2007-4532.md): Soldat game server 1.4.2 and earlier, and dedicated server 2.6.2 and earlier, allows remote attackers to cause a denial of service (client l (no CVSS)
- [CVE-2007-4533](https://cve.now/CVE-2007-4533.md): Format string vulnerability in the Say command in sv\_main.cpp in Vavoom 1.24 and earlier allows remote attackers to execute arbitrary code v (no CVSS)
- [CVE-2007-4534](https://cve.now/CVE-2007-4534.md): Buffer overflow in the VThinker::BroadcastPrintf function in p\_thinker.cpp in Vavoom 1.24 and earlier allows remote attackers to execute arb (no CVSS)
- [CVE-2007-4535](https://cve.now/CVE-2007-4535.md): The VStr::Resize function in str.cpp in Vavoom 1.24 and earlier allows remote attackers to cause a denial of service (daemon crash) via a st (no CVSS)
- [CVE-2007-4536](https://cve.now/CVE-2007-4536.md): TorrentTrader 1.07 and earlier sets insecure permissions for files in the root directory, which allows attackers to execute arbitrary PHP co (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-08-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.