# CVEs published 2007-09-06

21 CVEs were published on September 6, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-3913](https://cve.now/CVE-2007-3913.md): SQL injection vulnerability in Gforge before 3.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. (no CVSS)
- [CVE-2007-4472](https://cve.now/CVE-2007-4472.md): Multiple buffer overflows in the Broderbund Expressit 3DGreetings Player ActiveX control could allow remote attackers to execute arbitrary c (no CVSS)
- [CVE-2007-4743](https://cve.now/CVE-2007-4743.md): The original patch for CVE-2007-3999 in svc\_auth\_gss.c in the RPCSEC\_GSS RPC library in MIT Kerberos 5 (krb5) 1.4 through 1.6.2, as used by (no CVSS)
- [CVE-2007-4744](https://cve.now/CVE-2007-4744.md): PHP remote file inclusion vulnerability in environment.php in AnyInventory 1.9.1 and 2.0, when register\_globals is enabled, allows remote at (no CVSS)
- [CVE-2007-4745](https://cve.now/CVE-2007-4745.md): Multiple cross-site scripting (XSS) vulnerabilities in the AkoBook 3.42 and earlier component (com\_akobook) for Mambo allow remote attackers (no CVSS)
- [CVE-2007-4746](https://cve.now/CVE-2007-4746.md): The Cisco Video Surveillance IP Gateway Encoder/Decoder (Standalone and Module) firmware 1.8.1 and earlier, Video Surveillance SP/ISP Decode (no CVSS)
- [CVE-2007-4747](https://cve.now/CVE-2007-4747.md): The telnet service in Cisco Video Surveillance IP Gateway Encoder/Decoder (Standalone and Module) firmware 1.8.1 and earlier, Video Surveill (no CVSS)
- [CVE-2007-4748](https://cve.now/CVE-2007-4748.md): Buffer overflow in the PowerPlayer.dll ActiveX control in PPStream 2.0.1.3829 allows remote attackers to execute arbitrary code via a long L (no CVSS)
- [CVE-2007-3752](https://cve.now/CVE-2007-3752.md): Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service (application crash) or execute ar (no CVSS)
- [CVE-2004-2685](https://cve.now/CVE-2004-2685.md): Buffer overflow in YoungZSoft CCProxy 6.2 and earlier allows remote attackers to execute arbitrary code via a long address in a ping (p) com (no CVSS)
- [CVE-2007-4732](https://cve.now/CVE-2007-4732.md): Unspecified vulnerability in the strfreectty function in the Special File System (SPECFS) in Sun Solaris 8 through 10 allows local users to (no CVSS)
- [CVE-2007-4733](https://cve.now/CVE-2007-4733.md): The Aztech DSL600EU router, when WAN access to the web interface is disabled, does not properly block inbound traffic on TCP port 80, which (no CVSS)
- [CVE-2007-4734](https://cve.now/CVE-2007-4734.md): Buffer overflow in Ots Labs OTSTurntables 1.00 allows user-assisted remote attackers to execute arbitrary code via a long file path in an m3 (no CVSS)
- [CVE-2007-4735](https://cve.now/CVE-2007-4735.md): Buffer overflow in Next Generation Software Virtual DJ (VDJ) 5.0 allows user-assisted remote attackers to execute arbitrary code via a long (no CVSS)
- [CVE-2007-4736](https://cve.now/CVE-2007-4736.md): SQL injection vulnerability in category.php in CartKeeper CKGold Shopping Cart 2.0 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2007-4737](https://cve.now/CVE-2007-4737.md): Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2007-4738](https://cve.now/CVE-2007-4738.md): Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2007-4739](https://cve.now/CVE-2007-4739.md): reprepro 1.3.0 through 2.2.3 does not properly verify signatures when updating repositories, which allows remote attackers to construct and (no CVSS)
- [CVE-2007-4740](https://cve.now/CVE-2007-4740.md): The HPRevolutionRegistryManager ActiveX control in Hp.Revolution.RegistryManager.dll 1 in Telecom Italy Alice Messenger allows remote attack (no CVSS)
- [CVE-2007-4741](https://cve.now/CVE-2007-4741.md): Cross-site scripting (XSS) vulnerability in admin/adminusers.php in Claroline before 1.8.6 allows remote authenticated administrators to inj (no CVSS)
- [CVE-2007-4742](https://cve.now/CVE-2007-4742.md): Claroline before 1.8.6 allows remote authenticated administrators to obtain sensitive information via an invalid value in the sort parameter (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-09-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.