# CVEs published 2007-08-29

16 CVEs were published on August 29, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-4593](https://cve.now/CVE-2007-4593.md): Unspecified vulnerability in vstor2-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service (host operating syste (no CVSS)
- [CVE-2007-4594](https://cve.now/CVE-2007-4594.md): Entrust Entelligence Security Provider (ESP) 8 does not properly validate certificates in certain circumstances involving (1) a chain that o (no CVSS)
- [CVE-2007-4595](https://cve.now/CVE-2007-4595.md): Cross-site scripting (XSS) vulnerability in Mayaa before 1.1.12 allows remote attackers to inject arbitrary web script or HTML in certain ci (no CVSS)
- [CVE-2007-4591](https://cve.now/CVE-2007-4591.md): vstor-ws60.sys in VMWare Workstation 6.0 allows local users to cause a denial of service (host operating system crash) and possibly gain pri (no CVSS)
- [CVE-2007-4220](https://cve.now/CVE-2007-4220.md): Directory traversal vulnerability in Motorola Timbuktu Pro before 8.6.5 for Windows allows remote attackers to create or delete arbitrary fi (no CVSS)
- [CVE-2007-4221](https://cve.now/CVE-2007-4221.md): Multiple buffer overflows in Motorola Timbuktu Pro before 8.6.5 for Windows allow remote attackers to cause a denial of service (daemon cras (no CVSS)
- [CVE-2007-4581](https://cve.now/CVE-2007-4581.md): SQL injection vulnerability in acrotxt.php in WBB2-Addon: Acrotxt 1 allows remote attackers to execute arbitrary SQL commands via the show p (no CVSS)
- [CVE-2007-4582](https://cve.now/CVE-2007-4582.md): Buffer overflow in the nvUnifiedControl.AUnifiedControl.1 ActiveX control in nvUnifiedControl.dll 1.1.45.0 in ACTi Network Video Recorder (N (no CVSS)
- [CVE-2007-4583](https://cve.now/CVE-2007-4583.md): Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in nvUtility.dll 1.0.14.0 in ACTi Network Video (no CVSS)
- [CVE-2007-4584](https://cve.now/CVE-2007-4584.md): Stack-based buffer overflow in BitchX 1.1 Final allows remote IRC servers to execute arbitrary code via a long string in a MODE command, rel (no CVSS)
- [CVE-2007-4585](https://cve.now/CVE-2007-4585.md): Directory traversal vulnerability in activateuser.php in 2532|Gigs 1.2.1 allows remote attackers to include and execute arbitrary local file (no CVSS)
- [CVE-2007-4586](https://cve.now/CVE-2007-4586.md): Multiple buffer overflows in php\_iisfunc.dll in the iisfunc extension for PHP 5.2.0 and earlier allow context-dependent attackers to execute (no CVSS)
- [CVE-2007-4587](https://cve.now/CVE-2007-4587.md): Cross-site scripting (XSS) vulnerability in Easy Software Cafeteria escafeWeb (aka Tuigwaa) 1.0 through 1.0.4 allows remote attackers to inj (no CVSS)
- [CVE-2007-4588](https://cve.now/CVE-2007-4588.md): Multiple cross-site scripting (XSS) vulnerabilities in InterWorx Hosting Control Panel (InterWorx-CP) Server Admin Level (NodeWorx) 3.0.2 (1 (no CVSS)
- [CVE-2007-4589](https://cve.now/CVE-2007-4589.md): Multiple cross-site scripting (XSS) vulnerabilities in InterWorx Hosting Control Panel (InterWorx-CP) Webmaster Level (SiteWorx) 3.0.2 (1) a (no CVSS)
- [CVE-2007-4590](https://cve.now/CVE-2007-4590.md): The get\_system\_info command in Ignite-UX C.7.0 through C.7.3, and DynRootDisk (DRD) A.1.0.16.417 through A.2.0.0.592, on HP-UX B.11.11, B.11 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-08-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.