# CVEs published 2007-09-21 23 CVEs were published on September 21, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-5034](https://cve.now/CVE-2007-5034.md): ELinks before 0.11.3, when sending a POST request for an https URL, appends the body and content headers of the POST request to the CONNECT (no CVSS) - [CVE-2007-0061](https://cve.now/CVE-2007-0061.md): The DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 56455 and Pla (no CVSS) - [CVE-2007-0062](https://cve.now/CVE-2007-0062.md): Integer overflow in the ISC dhcpd 3.0.x before 3.0.7 and 3.1.x before 3.1.1; and the DHCP server in EMC VMware Workstation before 5.5.5 Buil (no CVSS) - [CVE-2007-0063](https://cve.now/CVE-2007-0063.md): Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0. (no CVSS) - [CVE-2007-4065](https://cve.now/CVE-2007-4065.md): lib/vorbisfile.c in libvorbisfile in Xiph.Org libvorbis before 1.2.0 allows context-dependent attackers to cause a denial of service (infini (no CVSS) - [CVE-2007-4066](https://cve.now/CVE-2007-4066.md): Multiple buffer overflows in Xiph.Org libvorbis before 1.2.0 allow context-dependent attackers to cause a denial of service or have other un (no CVSS) - [CVE-2007-4496](https://cve.now/CVE-2007-4496.md): Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 564 (no CVSS) - [CVE-2007-4497](https://cve.now/CVE-2007-4497.md): Unspecified vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.5 Build 564 (no CVSS) - [CVE-2007-4569](https://cve.now/CVE-2007-4569.md): backend/session.c in KDM in KDE 3.3.0 through 3.5.7, when autologin is configured and "shutdown with password" is enabled, allows remote att (no CVSS) - [CVE-2007-4991](https://cve.now/CVE-2007-4991.md): The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially (no CVSS) - [CVE-2007-5023](https://cve.now/CVE-2007-5023.md): Unquoted Windows search path vulnerability in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player befor (no CVSS) - [CVE-2007-5024](https://cve.now/CVE-2007-5024.md): EMC VMware Server before 1.0.4 Build 56528 writes passwords in cleartext to unspecified log files, which allows local users to obtain sensit (no CVSS) - [CVE-2007-5025](https://cve.now/CVE-2007-5025.md): Unspecified vulnerability in EMC VMware ACE before 1.0.3 Build 54075 allows attackers to have an unknown impact via an unspecified manipulat (no CVSS) - [CVE-2007-5026](https://cve.now/CVE-2007-5026.md): dBlog CMS, probably 2.0, stores sensitive information under the web root with insufficient access control, which allows remote attackers to (no CVSS) - [CVE-2007-5027](https://cve.now/CVE-2007-5027.md): Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/ddns in the web management panel for the WBR3404TX broadband router with firm (no CVSS) - [CVE-2007-5028](https://cve.now/CVE-2007-5028.md): Dibbler 0.6.0 on Linux uses weak world-writable permissions for unspecified files in /var/lib/dibbler, which has unknown impact and local at (no CVSS) - [CVE-2007-5029](https://cve.now/CVE-2007-5029.md): Dibbler 0.6.0 does not verify that certain length parameters are appropriate for buffer sizes, which allows remote attackers to trigger a bu (no CVSS) - [CVE-2007-5030](https://cve.now/CVE-2007-5030.md): Multiple integer overflows in Dibbler 0.6.0 allow remote attackers to cause a denial of service (daemon crash) via packets containing option (no CVSS) - [CVE-2007-5031](https://cve.now/CVE-2007-5031.md): The TSrvOptIA\_NA::rebind method in SrvOptions/SrvOptIA\_NA.cpp in Dibbler 0.6.0 allows remote attackers to cause a denial of service (NULL de (no CVSS) - [CVE-2007-5032](https://cve.now/CVE-2007-5032.md): Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accou (no CVSS) - [CVE-2007-5033](https://cve.now/CVE-2007-5033.md): Cross-site scripting (XSS) vulnerability in profile.php in phpBB XS 2 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS) - [CVE-2007-5020](https://cve.now/CVE-2007-5020.md): Unspecified vulnerability in Adobe Acrobat and Reader 8.1 on Windows allows remote attackers to execute arbitrary code via a crafted PDF fil (no CVSS) - [CVE-2007-5022](https://cve.now/CVE-2007-5022.md): Unspecified vulnerability in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, an (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-09-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.