# CVEs published 2007-08-30

6 CVEs were published on August 30, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-4132](https://cve.now/CVE-2007-4132.md): Unspecified vulnerability in Red Hat Network Satellite Server 5.0.0 allows remote authenticated users to execute arbitrary code via unknown (no CVSS)
- [CVE-2007-4134](https://cve.now/CVE-2007-4134.md): Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via (no CVSS)
- [CVE-2007-4601](https://cve.now/CVE-2007-4601.md): A regression error in tcp-wrappers 7.6.dbs-10 and 7.6.dbs-11 might allow remote attackers to bypass intended access restrictions when a serv (no CVSS)
- [CVE-2007-4596](https://cve.now/CVE-2007-4596.md): The perl extension in PHP does not follow safe\_mode restrictions, which allows context-dependent attackers to execute arbitrary code via the (no CVSS)
- [CVE-2007-4597](https://cve.now/CVE-2007-4597.md): SQL injection vulnerability in index.php in TurnkeyWebTools SunShop Shopping Cart 4.0 RC 6 allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2007-4598](https://cve.now/CVE-2007-4598.md): IBM SurePOS 500 has (1) a default password of "12345" for the manager and (2) blank default passwords for operator accounts. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-08-30
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.