# CVEs published 2007-09-04

22 CVEs were published on September 4, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-4653](https://cve.now/CVE-2007-4653.md): SQL injection vulnerability in links.php in the Links MOD 1.2.2 and earlier for phpBB 2.0.22 and earlier allows remote attackers to execute (no CVSS)
- [CVE-2007-4654](https://cve.now/CVE-2007-4654.md): Unspecified vulnerability in SSHield 1.6.1 with OpenSSH 3.0.2p1 on Cisco WebNS 8.20.0.1 on Cisco Content Services Switch (CSS) series 11000 (no CVSS)
- [CVE-2007-4655](https://cve.now/CVE-2007-4655.md): Multiple directory traversal vulnerabilities in CGI RESCUE Shopping Basket Professional 7.51 and earlier allow remote attackers to list arbi (no CVSS)
- [CVE-2007-4656](https://cve.now/CVE-2007-4656.md): backup-manager-upload in Backup Manager before 0.6.3 provides the FTP server hostname, username, and password as plaintext command line argu (no CVSS)
- [CVE-2007-4657](https://cve.now/CVE-2007-4657.md): Multiple integer overflows in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to obtain sensitive information (memory con (no CVSS)
- [CVE-2007-4658](https://cve.now/CVE-2007-4658.md): The money\_format function in PHP 5 before 5.2.4, and PHP 4 before 4.4.8, permits multiple (1) %i and (2) %n tokens, which has unknown impact (no CVSS)
- [CVE-2007-4659](https://cve.now/CVE-2007-4659.md): The zend\_alter\_ini\_entry function in PHP before 5.2.4 does not properly handle an interruption to the flow of execution triggered by a memor (no CVSS)
- [CVE-2007-4660](https://cve.now/CVE-2007-4660.md): Unspecified vulnerability in the chunk\_split function in PHP before 5.2.4 has unknown impact and attack vectors, related to an incorrect siz (no CVSS)
- [CVE-2007-4661](https://cve.now/CVE-2007-4661.md): The chunk\_split function in string.c in PHP 5.2.3 does not properly calculate the needed buffer size due to precision loss when performing i (no CVSS)
- [CVE-2007-4662](https://cve.now/CVE-2007-4662.md): Buffer overflow in the php\_openssl\_make\_REQ function in PHP before 5.2.4 has unknown impact and attack vectors. (no CVSS)
- [CVE-2007-4663](https://cve.now/CVE-2007-4663.md): Directory traversal vulnerability in PHP before 5.2.4 allows attackers to bypass open\_basedir restrictions via unspecified vectors involving (no CVSS)
- [CVE-2007-4664](https://cve.now/CVE-2007-4664.md): Unspecified vulnerability in the (1) attach database and (2) create database functionality in Firebird before 2.0.2, when a filename exceeds (no CVSS)
- [CVE-2007-4665](https://cve.now/CVE-2007-4665.md): Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to cause a denial of service (daemon crash) via an (no CVSS)
- [CVE-2007-4666](https://cve.now/CVE-2007-4666.md): Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote attacke (no CVSS)
- [CVE-2007-4667](https://cve.now/CVE-2007-4667.md): Unspecified vulnerability in the Services API in Firebird before 2.0.2 allows remote attackers to cause a denial of service, aka CORE-1149. (no CVSS)
- [CVE-2007-4668](https://cve.now/CVE-2007-4668.md): Unspecified vulnerability in the server in Firebird before 2.0.2 allows remote attackers to determine the existence of arbitrary files, and (no CVSS)
- [CVE-2007-4669](https://cve.now/CVE-2007-4669.md): The Services API in Firebird before 2.0.2 allows remote authenticated users without SYSDBA privileges to read the server log (firebird.log), (no CVSS)
- [CVE-2007-4652](https://cve.now/CVE-2007-4652.md): The session extension in PHP before 5.2.4 might allow local users to bypass open\_basedir restrictions via a session file that is a symlink. (no CVSS)
- [CVE-2007-3996](https://cve.now/CVE-2007-3996.md): Multiple integer overflows in libgd in PHP before 5.2.4 allow remote attackers to cause a denial of service (application crash) and possibly (no CVSS)
- [CVE-2007-3997](https://cve.now/CVE-2007-3997.md): The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass safe\_mode and open\_b (no CVSS)
- [CVE-2007-3998](https://cve.now/CVE-2007-3998.md): The wordwrap function in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, does not properly use the breakcharlen variable, which allows remote at (no CVSS)
- [CVE-2007-4650](https://cve.now/CVE-2007-4650.md): Multiple unspecified vulnerabilities in Gallery before 2.2.3 allow attackers to (1) rename items, (2) read and modify item properties, or (3 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-09-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.