# CVEs published 2007-09-17 25 CVEs were published on September 17, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-3379](https://cve.now/CVE-2007-3379.md): Unspecified vulnerability in the kernel in Red Hat Enterprise Linux (RHEL) 4 on the x86\_64 platform allows local users to cause a denial of (no CVSS) - [CVE-2007-3654](https://cve.now/CVE-2007-3654.md): The display driver allocattr functions in NetBSD 3.0 through 4.0\_BETA2, and NetBSD-current before 20070728, allow local users to cause a den (no CVSS) - [CVE-2007-3731](https://cve.now/CVE-2007-3731.md): The Linux kernel 2.6.20 and 2.6.21 does not properly handle an invalid LDT segment selector in %cs (the xcs field) during ptrace single-step (no CVSS) - [CVE-2007-4909](https://cve.now/CVE-2007-4909.md): Interpretation conflict in WinSCP before 4.0.4 allows remote attackers to perform arbitrary file transfers with a remote server via file-tra (no CVSS) - [CVE-2007-4910](https://cve.now/CVE-2007-4910.md): Unspecified vulnerability in netInvoicing before 2.7.3 has unknown impact and attack vectors, related to "security check soap". (no CVSS) - [CVE-2007-4911](https://cve.now/CVE-2007-4911.md): JSMP3OGGWt.dll in JetCast Server 2.0.0.4308 allows remote attackers to cause a denial of service (daemon crash) via a long .mp3 URI to TCP p (no CVSS) - [CVE-2007-4912](https://cve.now/CVE-2007-4912.md): Cross-site scripting (XSS) vulnerability in ips\_kernel/class\_ajax.php in Invision Power Board (IPB or IP.Board) 2.3.1 up to 20070912 allows (no CVSS) - [CVE-2007-4913](https://cve.now/CVE-2007-4913.md): ips\_kernel/class\_upload.php in Invision Power Board (IPB or IP.Board) 2.3.1 up to 20070912 allows remote attackers to upload arbitrary scrip (no CVSS) - [CVE-2007-4914](https://cve.now/CVE-2007-4914.md): Unspecified vulnerability in the subscriptions manager in Invision Power Board (IPB or IP.Board) 2.3.1 before 20070912 allows remote authent (no CVSS) - [CVE-2007-4915](https://cve.now/CVE-2007-4915.md): The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from ente (no CVSS) - [CVE-2007-4916](https://cve.now/CVE-2007-4916.md): Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft (no CVSS) - [CVE-2007-4917](https://cve.now/CVE-2007-4917.md): Cross-site scripting (XSS) vulnerability in tracking.php in PHP-Stats 0.1.9.2 allows remote attackers to inject arbitrary web script or HTML (no CVSS) - [CVE-2007-4918](https://cve.now/CVE-2007-4918.md): SQL injection vulnerability in classes/gelato.class.php in Gelato allows remote attackers to execute arbitrary SQL commands via the post par (no CVSS) - [CVE-2007-4919](https://cve.now/CVE-2007-4919.md): Multiple SQL injection vulnerabilities in JBlog 1.0 allow (1) remote attackers to execute arbitrary SQL commands via the id parameter to ind (no CVSS) - [CVE-2007-4920](https://cve.now/CVE-2007-4920.md): SQL injection vulnerability in soporte\_derecha\_w.php in PHP Webquest 2.5 and earlier allows remote attackers to execute arbitrary SQL comman (no CVSS) - [CVE-2007-4921](https://cve.now/CVE-2007-4921.md): PHP remote file inclusion vulnerability in \_includes/settings.inc.php in Ajax File Browser 3 Beta allows remote attackers to execute arbitra (no CVSS) - [CVE-2007-4922](https://cve.now/CVE-2007-4922.md): SQL injection vulnerability in play.php in the jeuxflash 1.0 module for KwsPHP allows remote authenticated users to execute arbitrary SQL co (no CVSS) - [CVE-2007-4923](https://cve.now/CVE-2007-4923.md): PHP remote file inclusion vulnerability in admin.joomlaradiov5.php in the Joomla Radio 5 (com\_joomlaradiov5) component for Joomla! allows re (no CVSS) - [CVE-2007-4902](https://cve.now/CVE-2007-4902.md): Absolute path traversal vulnerability in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allows remot (no CVSS) - [CVE-2007-4903](https://cve.now/CVE-2007-4903.md): Multiple buffer overflows in a certain ActiveX control in CryptoX.dll 2.0 and earlier in the Ultra Crypto Component allow remote attackers t (no CVSS) - [CVE-2007-4904](https://cve.now/CVE-2007-4904.md): RealNetworks RealPlayer 10.1.0.3114 and earlier, and Helix Player 1.0.6.778 on Fedora Core 6 (FC6) and possibly other platforms, allow user- (no CVSS) - [CVE-2007-4905](https://cve.now/CVE-2007-4905.md): Unrestricted file upload vulnerability in mod/contak.php in AuraCMS 2.1 allows remote attackers to upload and execute arbitrary PHP files vi (no CVSS) - [CVE-2007-4906](https://cve.now/CVE-2007-4906.md): PHP remote file inclusion vulnerability in tasks/send\_queued\_emails.php in NuclearBB Alpha 2, when register\_globals is enabled, allows remot (no CVSS) - [CVE-2007-4907](https://cve.now/CVE-2007-4907.md): Multiple PHP remote file inclusion vulnerabilities in X-Cart allow remote attackers to execute arbitrary PHP code via a URL in the xcart\_dir (no CVSS) - [CVE-2007-4908](https://cve.now/CVE-2007-4908.md): Directory traversal vulnerability in index.php in AuraCMS 2.1 and earlier allows remote attackers to include and execute arbitrary local fil (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-09-17 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.