# CVEs published 2007-08-31

47 CVEs were published on August 31, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-4632](https://cve.now/CVE-2007-4632.md): Cisco IOS 12.2E, 12.2F, and 12.2S places a "no login" line into the VTY configuration when an administrator makes certain changes to a (1) V (no CVSS)
- [CVE-2007-4633](https://cve.now/CVE-2007-4633.md): Multiple cross-site scripting (XSS) vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 be (no CVSS)
- [CVE-2007-4634](https://cve.now/CVE-2007-4634.md): Multiple SQL injection vulnerabilities in Cisco CallManager and Unified Communications Manager (CUCM) before 3.3(5)sr2b, 4.1 before 4.1(3)sr (no CVSS)
- [CVE-2007-4635](https://cve.now/CVE-2007-4635.md): Yahoo! Messenger 8.1.0.209 and 8.1.0.402 allows remote attackers to cause a denial of service (application crash) via certain file-transfer (no CVSS)
- [CVE-2007-4636](https://cve.now/CVE-2007-4636.md): Multiple PHP remote file inclusion vulnerabilities in phpBG 0.9.1 allow remote attackers to execute arbitrary PHP code via a URL in the root (no CVSS)
- [CVE-2007-4637](https://cve.now/CVE-2007-4637.md): xGB.php in xGB 2.0 does not require authentication for an admin edit action, which allows remote attackers to make unspecified changes via a (no CVSS)
- [CVE-2007-4638](https://cve.now/CVE-2007-4638.md): Blizzard Entertainment StarCraft Brood War 1.15.1 and earlier allows remote attackers to cause a denial of service (application crash) via a (no CVSS)
- [CVE-2007-4639](https://cve.now/CVE-2007-4639.md): EnterpriseDB Advanced Server 8.2 does not properly handle certain debugging function calls that occur before a call to pldbg\_create\_listener (no CVSS)
- [CVE-2007-4640](https://cve.now/CVE-2007-4640.md): Unrestricted file upload vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to upload and execute arbitrary (no CVSS)
- [CVE-2007-4641](https://cve.now/CVE-2007-4641.md): Directory traversal vulnerability in index.php in Pakupaku CMS 0.4 and earlier allows remote attackers to include and execute arbitrary loca (no CVSS)
- [CVE-2007-4642](https://cve.now/CVE-2007-4642.md): Multiple buffer overflows in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allow remote attackers to execute arbitrary code via a long chat (no CVSS)
- [CVE-2007-4643](https://cve.now/CVE-2007-4643.md): Integer underflow in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via a (no CVSS)
- [CVE-2007-4644](https://cve.now/CVE-2007-4644.md): Format string vulnerability in the Cl\_GetPackets function in cl\_main.c in the client in Doomsday (aka deng) 1.9.0-beta5.1 and earlier allows (no CVSS)
- [CVE-2007-4645](https://cve.now/CVE-2007-4645.md): SQL injection vulnerability in index.php in NMDeluxe 2.0.0 allows remote attackers to execute arbitrary SQL commands via the id parameter in (no CVSS)
- [CVE-2007-4646](https://cve.now/CVE-2007-4646.md): Buffer overflow in the pop3 service in Hexamail Server 3.0.0.001 Lite allows remote attackers to cause a denial of service (daemon crash) an (no CVSS)
- [CVE-2007-4647](https://cve.now/CVE-2007-4647.md): newswire/uploadmedia.cgi in 2coolcode Our Space (Ourspace) 2.0.9 allows remote attackers to upload certain files via unspecified vectors, pr (no CVSS)
- [CVE-2007-4648](https://cve.now/CVE-2007-4648.md): The nvcoaft51 driver in Norman Virus Control (NVC) 5.82 uses weak permissions (unrestricted write access) for the NvcOa device, which allows (no CVSS)
- [CVE-2007-4649](https://cve.now/CVE-2007-4649.md): MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1 use weak permissions (Everyone:Full Control) (no CVSS)
- [CVE-2007-2931](https://cve.now/CVE-2007-2931.md): Heap-based buffer overflow in Microsoft MSN Messenger 6.2, 7.0, and 7.5, and Live Messenger 8.0 allows user-assisted remote attackers to exe (no CVSS)
- [CVE-2007-2954](https://cve.now/CVE-2007-2954.md): Multiple stack-based buffer overflows in the Spooler service (nwspool.dll) in Novell Client 4.91 SP2 through SP4 for Windows allow remote at (no CVSS)
- [CVE-2007-4515](https://cve.now/CVE-2007-4515.md): Buffer overflow in a certain ActiveX control in YVerInfo.dll before 2007.8.27.1 in the Yahoo! services suite for Yahoo! Messenger before 8.1 (no CVSS)
- [CVE-2007-4631](https://cve.now/CVE-2007-4631.md): The DataLoader::doStart function in dataloader.cpp in QGit 1.5.6 and other versions up to 2pre1 allows local users to overwrite arbitrary fi (no CVSS)
- [CVE-2007-4624](https://cve.now/CVE-2007-4624.md): Cross-site scripting (XSS) vulnerability in pframe.php in AbleDesign Dynamic Picture Frame 1.00 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2007-4625](https://cve.now/CVE-2007-4625.md): Polipo before 1.0.2 allows remote HTTP servers to cause a denial of service (daemon crash) by aborting the response to a POST request. (no CVSS)
- [CVE-2007-4626](https://cve.now/CVE-2007-4626.md): Unspecified vulnerability in Polipo before 1.0.2 allows remote attackers to cause a denial of service (daemon crash) via certain network tra (no CVSS)
- [CVE-2007-4627](https://cve.now/CVE-2007-4627.md): SQL injection vulnerability in index.php in ABC eStore 3.0 allows remote attackers to execute arbitrary SQL commands via the cat\_id paramete (no CVSS)
- [CVE-2007-4628](https://cve.now/CVE-2007-4628.md): SQL injection vulnerability in shownews.php in phpns 1.1 allows remote attackers to execute arbitrary SQL commands via the id parameter. (no CVSS)
- [CVE-2007-4629](https://cve.now/CVE-2007-4629.md): Buffer overflow in the processLine function in maptemplate.c in MapServer before 4.10.3 allows attackers to cause a denial of service and po (no CVSS)
- [CVE-2007-4630](https://cve.now/CVE-2007-4630.md): Cross-site scripting (XSS) vulnerability in xlaapmview.asp in Absolute Poll Manager XE 4.1 allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2007-4467](https://cve.now/CVE-2007-4467.md): Multiple stack-based buffer overflows in the Oracle JInitiator ActiveX control (beans.ocx) 1.1.8.16 and earlier, as used by Oracle Forms app (no CVSS)
- [CVE-2007-4602](https://cve.now/CVE-2007-4602.md): SQL injection vulnerability in cms/revert-content.php in Implied by Design Micro CMS (Micro-CMS) 3.5 allows remote attackers to execute arbi (no CVSS)
- [CVE-2007-4603](https://cve.now/CVE-2007-4603.md): Multiple SQL injection vulnerabilities in index.php in ACG News 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the aid (no CVSS)
- [CVE-2007-4604](https://cve.now/CVE-2007-4604.md): SQL injection vulnerability in viewitem.php in DL PayCart 1.01 allows remote attackers to execute arbitrary SQL commands via the ItemID para (no CVSS)
- [CVE-2007-4605](https://cve.now/CVE-2007-4605.md): PHP remote file inclusion vulnerability in convert/mvcw.php in Virtual War (VWar) 1.5.0 R15 and earlier allows remote attackers to execute a (no CVSS)
- [CVE-2007-4606](https://cve.now/CVE-2007-4606.md): PHP remote file inclusion vulnerability in convert/mvcw\_conver.php in the Virtual War (VWar) module for PHPNuke-Clan (PNC) 4.2.0 and earlier (no CVSS)
- [CVE-2007-4607](https://cve.now/CVE-2007-4607.md): Buffer overflow in the EasyMailSMTPObj ActiveX control in emsmtp.dll 6.0.1 in the Quiksoft EasyMail SMTP Object, as used in Postcast Server (no CVSS)
- [CVE-2007-4608](https://cve.now/CVE-2007-4608.md): PHP remote file inclusion vulnerability in protection.php in ePersonnel RC\_2004\_02 allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2007-4609](https://cve.now/CVE-2007-4609.md): eyeOS uses predictable checksum values in the checknum parameter for access control, which allows remote attackers to register many accounts (no CVSS)
- [CVE-2007-4610](https://cve.now/CVE-2007-4610.md): Unrestricted file upload vulnerability in config/upload.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to upload and exec (no CVSS)
- [CVE-2007-4611](https://cve.now/CVE-2007-4611.md): SQL injection vulnerability in viewevent.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2007-4612](https://cve.now/CVE-2007-4612.md): CRLF injection vulnerability in contact.php in Moonware (aka Dale Mooney Gallery) allows remote attackers to add arbitrary mail headers via (no CVSS)
- [CVE-2007-4613](https://cve.now/CVE-2007-4613.md): SSL libraries in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold through SP5 might allow remote attackers to ob (no CVSS)
- [CVE-2007-4614](https://cve.now/CVE-2007-4614.md): BEA WebLogic Server 9.1 does not properly handle propagation of an admin server's security policy change log to temporarily unavailable mana (no CVSS)
- [CVE-2007-4615](https://cve.now/CVE-2007-4615.md): The SSL client implementation in BEA WebLogic Server 7.0 SP7, 8.1 SP2 through SP6, 9.0, 9.1, 9.2 Gold through MP2, and 10.0 sometimes select (no CVSS)
- [CVE-2007-4616](https://cve.now/CVE-2007-4616.md): The SSL server implementation in BEA WebLogic Server 7.0 Gold through SP7, 8.1 Gold through SP6, 9.0, 9.1, 9.2 Gold through MP1, and 10.0 so (no CVSS)
- [CVE-2007-4617](https://cve.now/CVE-2007-4617.md): Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold through SP4 allows remote attacker (no CVSS)
- [CVE-2007-4618](https://cve.now/CVE-2007-4618.md): Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7 and 7.0 Gold through SP7 allows remote attackers to cause a denial of (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-08-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.