# CVEs published 2007-09-05

24 CVEs were published on September 5, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4861](https://cve.now/CVE-2005-4861.md): functions.php in Ragnarok Online Control Panel (ROCP) 4.3.4a allows remote attackers to bypass authentication by requesting account\_manage.p (no CVSS)
- [CVE-2007-0322](https://cve.now/CVE-2007-0322.md): Multiple stack-based buffer overflows in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to execute ar (no CVSS)
- [CVE-2007-4471](https://cve.now/CVE-2007-4471.md): Multiple unspecified vulnerabilities in the Intuit QuickBooks Online Edition ActiveX control before 10 allow remote attackers to create or o (no CVSS)
- [CVE-2007-4711](https://cve.now/CVE-2007-4711.md): Multiple cross-site scripting (XSS) vulnerabilities in Toms Gaestebuch 1.00 allow remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2007-4712](https://cve.now/CVE-2007-4712.md): PHP remote file inclusion vulnerability in index.php in eNetman 1 allows remote attackers to execute arbitrary PHP code via a URL in the pag (no CVSS)
- [CVE-2007-4713](https://cve.now/CVE-2007-4713.md): Multiple cross-site scripting (XSS) vulnerabilities in urchin.cgi in Urchin 5.6.00r2 allow remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2007-4714](https://cve.now/CVE-2007-4714.md): SQL injection vulnerability in error\_view.php in Yvora 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter. (no CVSS)
- [CVE-2007-4715](https://cve.now/CVE-2007-4715.md): Multiple PHP remote file inclusion vulnerabilities in Weblogicnet allow remote attackers to execute arbitrary PHP code via a URL in the file (no CVSS)
- [CVE-2007-4716](https://cve.now/CVE-2007-4716.md): Multiple SQL injection vulnerabilities in PHD Help Desk before 1.31 allow remote attackers to execute arbitrary SQL commands via unspecified (no CVSS)
- [CVE-2007-4717](https://cve.now/CVE-2007-4717.md): Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.6 allow remote authenticated administrators to inject arbitrary (no CVSS)
- [CVE-2007-4718](https://cve.now/CVE-2007-4718.md): Directory traversal vulnerability in inc/lib/language.lib.php in Claroline before 1.8.6 allows remote attackers to include and execute arbit (no CVSS)
- [CVE-2007-4719](https://cve.now/CVE-2007-4719.md): SQL injection vulnerability in read.php in 212cafeBoard 6.30 Beta allows remote attackers to execute arbitrary SQL commands via the id param (no CVSS)
- [CVE-2007-4720](https://cve.now/CVE-2007-4720.md): Unspecified vulnerability in the Shared Trace Service in Hitachi JP1/Cm2/Network Node Manager (NNM) 07-10 through 07-10-05, and NNM Starter (no CVSS)
- [CVE-2007-4722](https://cve.now/CVE-2007-4722.md): Multiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX control in qsp2ie07051001.dll 1.0.0.1 in Mov (no CVSS)
- [CVE-2007-4723](https://cve.now/CVE-2007-4723.md): Directory traversal vulnerability in Ragnarok Online Control Panel 4.3.4a, when the Apache HTTP Server is used, allows remote attackers to b (no CVSS)
- [CVE-2007-4724](https://cve.now/CVE-2007-4724.md): Cross-site request forgery (CSRF) vulnerability in cal2.jsp in the calendar examples application in Apache Tomcat 4.1.31 allows remote attac (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2007-4725](https://cve.now/CVE-2007-4725.md): Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows u (no CVSS)
- [CVE-2007-4726](https://cve.now/CVE-2007-4726.md): Directory traversal vulnerability in Web Oddity 0.09b allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2007-3999](https://cve.now/CVE-2007-3999.md): Stack-based buffer overflow in the svcauth\_gss\_validate function in lib/rpc/svc\_auth\_gss.c in the RPCSEC\_GSS RPC library (librpcsecgss) in M (no CVSS)
- [CVE-2007-4000](https://cve.now/CVE-2007-4000.md): The kadm5\_modify\_policy\_internal function in lib/kadm5/srv/svr\_policy.c in the Kerberos administration daemon (kadmind) in MIT Kerberos 5 (k (no CVSS)
- [CVE-2007-3849](https://cve.now/CVE-2007-3849.md): Red Hat Enterprise Linux (RHEL) 5 ships the rpm for the Advanced Intrusion Detection Environment (AIDE) before 0.13.1 with a database that l (no CVSS)
- [CVE-2007-4135](https://cve.now/CVE-2007-4135.md): The NFSv4 ID mapper (nfsidmap) before 0.17 does not properly handle return values from the getpwnam\_r function when performing a username lo (no CVSS)
- [CVE-2007-4476](https://cve.now/CVE-2007-4476.md): Buffer overflow in the safer\_name\_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack." (no CVSS)
- [CVE-2007-4670](https://cve.now/CVE-2007-4670.md): Unspecified vulnerability in PHP before 5.2.4 has unknown impact and attack vectors, related to an "Improved fix for MOPB-03-2007," probably (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-09-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.