# CVEs published 2007-09-08

12 CVEs were published on September 8, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-4757](https://cve.now/CVE-2007-4757.md): PHP remote file inclusion vulnerability in menu.php in phpMytourney allows remote attackers to execute arbitrary PHP code via a URL in the f (no CVSS)
- [CVE-2007-4758](https://cve.now/CVE-2007-4758.md): Multiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attacke (no CVSS)
- [CVE-2007-4759](https://cve.now/CVE-2007-4759.md): Multiple unspecified vulnerabilities in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow rem (no CVSS)
- [CVE-2007-4760](https://cve.now/CVE-2007-4760.md): The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scriptin (no CVSS)
- [CVE-2007-4761](https://cve.now/CVE-2007-4761.md): Unrestricted file upload vulnerability in upload.php in Barbo91 1.1 allows remote attackers to upload and execute arbitrary code via unspeci (no CVSS)
- [CVE-2007-4762](https://cve.now/CVE-2007-4762.md): Multiple SQL injection vulnerabilities in embadmin/login.asp in E-SMARTCART 1.0 allow remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2007-4763](https://cve.now/CVE-2007-4763.md): PHP remote file inclusion vulnerability in dbmodules/DB\_adodb.class.php in PHP Object Framework (PHPOF) 20040226 and earlier allows remote a (no CVSS)
- [CVE-2007-4764](https://cve.now/CVE-2007-4764.md): Directory traversal vulnerability in pawfaliki.php in Pawfaliki 0.5.1 allows remote attackers to list arbitrary files via a .. (no CVSS)
- [CVE-2007-4754](https://cve.now/CVE-2007-4754.md): Format string vulnerability in the safe\_bprintf function in acesrc/acebot\_cmds.c in Alien Arena 2007 6.10 and earlier allows remote attacker (no CVSS)
- [CVE-2007-4755](https://cve.now/CVE-2007-4755.md): Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service (client disconnect) by sending a client\_connect comma (no CVSS)
- [CVE-2007-4756](https://cve.now/CVE-2007-4756.md): Directory traversal vulnerability in the FTP client in Total Commander before 7.02 allows remote FTP servers to create or overwrite arbitrar (no CVSS)
- [CVE-2007-4753](https://cve.now/CVE-2007-4753.md): The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service (device hang) via (1) an empty SIP m (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-09-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.