# CVEs published 2007-09-18

51 CVEs were published on September 18, 2007: 1 critical, 0 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2007-4958](https://cve.now/CVE-2007-4958.md): Multiple cross-site scripting (XSS) vulnerabilities in TinyWebGallery (TWG) 1.6.3.4 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2007-4959](https://cve.now/CVE-2007-4959.md): Cross-site scripting (XSS) vulnerability in catalog\_products\_with\_images.php in osCMax 2.0.0-RC3-0-1 allows remote attackers to inject arbit (no CVSS)
- [CVE-2007-4960](https://cve.now/CVE-2007-4960.md): Argument injection vulnerability in the Linden Lab Second Life secondlife:// protocol handler, as used in Internet Explorer and possibly Fir (no CVSS)
- [CVE-2007-4961](https://cve.now/CVE-2007-4961.md): The login\_to\_simulator method in Linden Lab Second Life, as used by the secondlife:// protocol handler and possibly other Second Life login (no CVSS)
- [CVE-2007-4962](https://cve.now/CVE-2007-4962.md): Directory traversal vulnerability in WinImage 8.10 and earlier allows user-assisted remote attackers to create or overwrite arbitrary files (no CVSS)
- [CVE-2007-4963](https://cve.now/CVE-2007-4963.md): Visual truncation vulnerability in WinImage 8.10 and earlier allows remote attackers to spoof a destination filename via a long sequence of (no CVSS)
- [CVE-2007-4964](https://cve.now/CVE-2007-4964.md): WinImage 8.10 and earlier allows remote attackers to cause a denial of service (infinite loop) via an invalid BPB\_BytsPerSec field in the he (no CVSS)
- [CVE-2007-4965](https://cve.now/CVE-2007-4965.md): Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service (no CVSS)
- [CVE-2007-4966](https://cve.now/CVE-2007-4966.md): SQL injection vulnerability in www/people/editprofile.php in GForge 4.6b2 and earlier allows remote attackers to execute arbitrary SQL comma (no CVSS)
- [CVE-2007-2834](https://cve.now/CVE-2007-2834.md): Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remo (no CVSS)
- [CVE-2007-3010](https://cve.now/CVE-2007-3010.md): masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to exe (CVSS 9.8, KEV)
- [CVE-2007-4750](https://cve.now/CVE-2007-4750.md): Unspecified vulnerability in RemoteDocs R-Viewer before 1.6.3768 allows user-assisted remote attackers to execute arbitrary code via a craft (no CVSS)
- [CVE-2007-4751](https://cve.now/CVE-2007-4751.md): RemoteDocs R-Viewer before 1.6.3768 stores encrypted RDZ file data in unencrypted temporary files, which allows local users to obtain sensit (no CVSS)
- [CVE-2007-0326](https://cve.now/CVE-2007-0326.md): Multiple stack-based buffer overflows in the PhotoChannel Networks PNI Digital Media Photo Upload Plugin ActiveX control before 2.0.0.10, as (no CVSS)
- [CVE-2007-4947](https://cve.now/CVE-2007-4947.md): Multiple PHP remote file inclusion vulnerabilities in myphpPagetool 0.4.3 allow remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2007-4948](https://cve.now/CVE-2007-4948.md): Multiple PHP remote file inclusion vulnerabilities in Webmedia Explorer (webmex) 3.2.2 allow remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2007-4949](https://cve.now/CVE-2007-4949.md): Multiple PHP remote file inclusion vulnerabilities in php(Reactor) 1.2.7pl1 allow remote attackers to execute arbitrary PHP code via a URL i (no CVSS)
- [CVE-2007-4950](https://cve.now/CVE-2007-4950.md): PHP remote file inclusion vulnerability in form/db\_form/employee.php in PHPortal 0.2.7 allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2007-4951](https://cve.now/CVE-2007-4951.md): PHP remote file inclusion vulnerability in sample.php in YaPiG 0.95b allows remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2007-4952](https://cve.now/CVE-2007-4952.md): SQL injection vulnerability in article.php in OmniStar Article Manager allows remote attackers to execute arbitrary SQL commands via the pag (no CVSS)
- [CVE-2007-4953](https://cve.now/CVE-2007-4953.md): SQL injection vulnerability in index.php in SimpCMS allows remote attackers to execute arbitrary SQL commands via the keyword parameter in a (no CVSS)
- [CVE-2007-4954](https://cve.now/CVE-2007-4954.md): PHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (com\_joom12pic) 1.0 component for Joomla! allows remote atta (no CVSS)
- [CVE-2007-4955](https://cve.now/CVE-2007-4955.md): PHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun! (com\_joomlaflashfun) 1.0 component for Joomla! allows (no CVSS)
- [CVE-2007-4956](https://cve.now/CVE-2007-4956.md): Multiple SQL injection vulnerabilities in KwsPHP 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the pseudo parameter t (no CVSS)
- [CVE-2007-4957](https://cve.now/CVE-2007-4957.md): Multiple directory traversal vulnerabilities in download.php in Chupix CMS 0.2.3 allow remote attackers to read or overwrite arbitrary files (no CVSS)
- [CVE-2007-0004](https://cve.now/CVE-2007-0004.md): The NFS client implementation in the kernel in Red Hat Enterprise Linux (RHEL) 3, when a filesystem is mounted with the noacl option, checks (no CVSS)
- [CVE-2007-0997](https://cve.now/CVE-2007-0997.md): Race condition in the tee (sys\_tee) system call in the Linux kernel 2.6.17 through 2.6.17.6 might allow local users to cause a denial of ser (no CVSS)
- [CVE-2007-1865](https://cve.now/CVE-2007-1865.md): The ipv6\_getsockopt\_sticky function in the kernel in Red Hat Enterprise Linux (RHEL) Beta 5.1.0 allows local users to obtain sensitive infor (no CVSS)
- [CVE-2007-4137](https://cve.now/CVE-2007-4137.md): Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers to cause a denial of service ( (no CVSS)
- [CVE-2007-4936](https://cve.now/CVE-2007-4936.md): Unspecified vulnerability in Office Efficiencies SafeSquid 4.1.x has unknown impact and attack vectors, related to a "serious security flaw, (no CVSS)
- [CVE-2007-4937](https://cve.now/CVE-2007-4937.md): CS Guestbook stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the a (no CVSS)
- [CVE-2007-4938](https://cve.now/CVE-2007-4938.md): Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (app (no CVSS)
- [CVE-2007-4939](https://cve.now/CVE-2007-4939.md): Heap-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm) (no CVSS)
- [CVE-2007-4940](https://cve.now/CVE-2007-4940.md): Multiple integer overflows in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm) 1.0.0.1, StormP (no CVSS)
- [CVE-2007-4941](https://cve.now/CVE-2007-4941.md): KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a .avi file with certain large "i (no CVSS)
- [CVE-2007-4942](https://cve.now/CVE-2007-4942.md): PHP remote file inclusion vulnerability in modules/Discipline/StudentFieldBreakdown.php in Focus/SIS 1.0 allows remote attackers to execute (no CVSS)
- [CVE-2007-4943](https://cve.now/CVE-2007-4943.md): Multiple buffer overflows in a certain ActiveX control in sparser.dll in Baofeng Storm 2.8 and earlier allow remote attackers to execute arb (no CVSS)
- [CVE-2007-4944](https://cve.now/CVE-2007-4944.md): The canvas.createPattern function in Opera 9.x before 9.22 for Linux, FreeBSD, and Solaris does not clear memory before using it to process (no CVSS)
- [CVE-2007-4945](https://cve.now/CVE-2007-4945.md): Multiple cross-site scripting (XSS) vulnerabilities in LetterGrade allow remote attackers to inject arbitrary web script or HTML via (1) a s (no CVSS)
- [CVE-2007-4946](https://cve.now/CVE-2007-4946.md): LetterGrade allows remote attackers to obtain sensitive information (installation path or account existence) via unspecified vectors. (no CVSS)
- [CVE-2007-4925](https://cve.now/CVE-2007-4925.md): The ewirePC\_Decrypt function in ewirepcfunctions.php in eWire Payment Client (ePC) 1.60 and 1.70 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2007-4926](https://cve.now/CVE-2007-4926.md): The AXIS 207W camera uses a base64-encoded cleartext username and password for authentication, which allows remote attackers to obtain sensi (no CVSS)
- [CVE-2007-4927](https://cve.now/CVE-2007-4927.md): axis-cgi/buffer/command.cgi on the AXIS 207W camera allows remote authenticated users to cause a denial of service (reboot) via many request (no CVSS)
- [CVE-2007-4928](https://cve.now/CVE-2007-4928.md): The AXIS 207W camera stores a WEP or WPA key in cleartext in the configuration file, which might allow local users to obtain sensitive infor (no CVSS)
- [CVE-2007-4929](https://cve.now/CVE-2007-4929.md): Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 207W camera allow remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2007-4930](https://cve.now/CVE-2007-4930.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 207W camera allow remote attackers to perform certain actions as admi (no CVSS)
- [CVE-2007-4931](https://cve.now/CVE-2007-4931.md): HP System Management Homepage (SMH) for Windows, when used in conjunction with HP Version Control Agent or Version Control Repository Manage (no CVSS)
- [CVE-2007-4932](https://cve.now/CVE-2007-4932.md): admin.php in Shop-Script FREE 2.0 and earlier sends a redirect to the web browser but does not exit when administrative credentials are miss (no CVSS)
- [CVE-2007-4933](https://cve.now/CVE-2007-4933.md): Direct static code injection vulnerability in includes/admin/sub/conf\_appearence.php in Shop-Script FREE 2.0 and earlier allows remote attac (no CVSS)
- [CVE-2007-4934](https://cve.now/CVE-2007-4934.md): Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPF (no CVSS)
- [CVE-2007-4935](https://cve.now/CVE-2007-4935.md): Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPF (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-09-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.