# CVEs published 2007-09-11

24 CVEs were published on September 11, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-4730](https://cve.now/CVE-2007-4730.md): Buffer overflow in the compNewPixmap function in compalloc.c in the Composite extension for the X.org X11 server before 1.4 allows local use (no CVSS)
- [CVE-2007-4814](https://cve.now/CVE-2007-4814.md): Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQ (no CVSS)
- [CVE-2007-4815](https://cve.now/CVE-2007-4815.md): Multiple PHP remote file inclusion vulnerabilities in WebED in Markus Iser ED Engine 0.8999 alpha allow remote attackers to execute arbitrar (no CVSS)
- [CVE-2007-4816](https://cve.now/CVE-2007-4816.md): Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown impact via a long (1) U (no CVSS)
- [CVE-2007-4817](https://cve.now/CVE-2007-4817.md): Unrestricted file upload vulnerability in the Restaurante (com\_restaurante) component for Joomla! allows remote attackers to upload and exec (no CVSS)
- [CVE-2007-4818](https://cve.now/CVE-2007-4818.md): Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the doc\_ (no CVSS)
- [CVE-2007-4819](https://cve.now/CVE-2007-4819.md): Multiple cross-site scripting (XSS) vulnerabilities in Txx CMS 0.2 allow remote attackers to inject arbitrary web script or HTML via unspeci (no CVSS)
- [CVE-2007-4820](https://cve.now/CVE-2007-4820.md): Absolute path traversal vulnerability in blanko.preview.php in Sisfo Kampus 2006 allows remote attackers to read arbitrary local files, and (no CVSS)
- [CVE-2007-4821](https://cve.now/CVE-2007-4821.md): Buffer overflow in a certain ActiveX control in officeviewer.ocx 5.2.218.1 in EDraw Office Viewer Component 5.2 allows remote attackers to e (no CVSS)
- [CVE-2007-4822](https://cve.now/CVE-2007-4822.md): Cross-site request forgery (CSRF) vulnerability in the device management interface in Buffalo AirStation WHR-G54S 1.20 allows remote attacke (no CVSS)
- [CVE-2007-4823](https://cve.now/CVE-2007-4823.md): Multiple buffer overflows in Google Picasa have unspecified attack vectors and impact. (no CVSS)
- [CVE-2007-4824](https://cve.now/CVE-2007-4824.md): Multiple cross-application scripting (XAS) vulnerabilities in Google Picasa have unspecified attack vectors and impact. (no CVSS)
- [CVE-2007-4802](https://cve.now/CVE-2007-4802.md): Multiple heap-based buffer overflows in GlobalLink 2.7.0.8 allow remote attackers to execute arbitrary code via (1) a long eighth argument t (no CVSS)
- [CVE-2007-4803](https://cve.now/CVE-2007-4803.md): Buffer overflow in AtomixMP3 2.3 allows user-assisted remote attackers to execute arbitrary code via long strings in file and title fields i (no CVSS)
- [CVE-2007-4804](https://cve.now/CVE-2007-4804.md): Multiple SQL injection vulnerabilities in AuraCMS 1.5rc allow remote attackers to execute arbitrary SQL commands via the id parameter in (1) (no CVSS)
- [CVE-2007-4805](https://cve.now/CVE-2007-4805.md): Directory traversal vulnerability in getgalldata.php in fuzzylime (cms) 3.0 and earlier allows remote attackers to include arbitrary local f (no CVSS)
- [CVE-2007-4806](https://cve.now/CVE-2007-4806.md): PHP remote file inclusion vulnerability in modules/Discipline/CategoryBreakdownTime.php in Focus/SIS 1.0 allows remote attackers to execute (no CVSS)
- [CVE-2007-4807](https://cve.now/CVE-2007-4807.md): Multiple PHP remote file inclusion vulnerabilities in Focus/SIS 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the st (no CVSS)
- [CVE-2007-4808](https://cve.now/CVE-2007-4808.md): Multiple SQL injection vulnerabilities in TLM CMS 3.2 allow remote attackers to execute arbitrary SQL commands via (1) the id parameter to n (no CVSS)
- [CVE-2007-4809](https://cve.now/CVE-2007-4809.md): Multiple PHP remote file inclusion vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 allow remote attackers to execute arbitrar (no CVSS)
- [CVE-2007-4810](https://cve.now/CVE-2007-4810.md): Multiple SQL injection vulnerabilities in Netjuke 1.0-rc2 allow remote attackers to execute arbitrary SQL commands via (1) the ge\_id paramet (no CVSS)
- [CVE-2007-4811](https://cve.now/CVE-2007-4811.md): Multiple cross-site scripting (XSS) vulnerabilities in Netjuke 1.0-rc2 allow remote attackers to inject arbitrary web script or HTML via (1) (no CVSS)
- [CVE-2007-4812](https://cve.now/CVE-2007-4812.md): Buffer overflow in Apple Safari 3.0.3 522.15.5, and other versions before Beta Update 3.0.4, allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2007-4813](https://cve.now/CVE-2007-4813.md): Cross-site scripting (XSS) vulnerability in Domino Blogsphere 3.01 Beta 7 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-09-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.