# CVEs published 2007-09-24

43 CVEs were published on September 24, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-5066](https://cve.now/CVE-2007-5066.md): Unspecified vulnerability in Webmin before 1.370 on Windows allows remote authenticated users to execute arbitrary commands via a crafted UR (no CVSS)
- [CVE-2007-5067](https://cve.now/CVE-2007-5067.md): Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long If-Modified-Since he (no CVSS)
- [CVE-2007-5068](https://cve.now/CVE-2007-5068.md): SQL injection vulnerability in index.php in phpFullAnnu (PFA) 6.0 allows remote attackers to execute arbitrary SQL commands via the mod para (no CVSS)
- [CVE-2007-5069](https://cve.now/CVE-2007-5069.md): Directory traversal vulnerability in data/compatible.php in the Nuke Mobile Entertainment 1 addon for PHP-Nuke allows remote attackers to in (no CVSS)
- [CVE-2007-5070](https://cve.now/CVE-2007-5070.md): Heap-based buffer overflow in the EasyMailMessagePrinter ActiveX control in emprint.DLL 6.0.1.0 in the Quiksoft EasyMail MessagePrinter Obje (no CVSS)
- [CVE-2007-5071](https://cve.now/CVE-2007-5071.md): Incomplete blacklist vulnerability in upload\_img\_cgi.php in Simple PHP Blog before 0.5.1 allows remote attackers to upload dangerous files a (no CVSS)
- [CVE-2007-5072](https://cve.now/CVE-2007-5072.md): Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog (SPHPBlog) before 0.5.1, when register\_globals is enabled, allow remo (no CVSS)
- [CVE-2007-4573](https://cve.now/CVE-2007-4573.md): The IA32 system call emulation functionality in Linux kernel 2.4.x and 2.6.x before 2.6.22.7, when running on the x86\_64 architecture, does (no CVSS)
- [CVE-2007-4985](https://cve.now/CVE-2007-4985.md): ImageMagick before 6.3.5-9 allows context-dependent attackers to cause a denial of service via a crafted image file that triggers (1) an inf (no CVSS)
- [CVE-2007-4986](https://cve.now/CVE-2007-4986.md): Multiple integer overflows in ImageMagick before 6.3.5-9 allow context-dependent attackers to execute arbitrary code via a crafted (1) .dcm, (no CVSS)
- [CVE-2007-4987](https://cve.now/CVE-2007-4987.md): Off-by-one error in the ReadBlobString function in blob.c in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitr (no CVSS)
- [CVE-2007-4988](https://cve.now/CVE-2007-4988.md): Sign extension error in the ReadDIBImage function in ImageMagick before 6.3.5-9 allows context-dependent attackers to execute arbitrary code (no CVSS)
- [CVE-2007-5053](https://cve.now/CVE-2007-5053.md): Multiple incomplete blacklist vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a UR (no CVSS)
- [CVE-2007-5054](https://cve.now/CVE-2007-5054.md): Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2007-5055](https://cve.now/CVE-2007-5055.md): Multiple directory traversal vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to include and execute arbitrary local (no CVSS)
- [CVE-2007-5056](https://cve.now/CVE-2007-5056.md): Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAP (no CVSS)
- [CVE-2007-5057](https://cve.now/CVE-2007-5057.md): NetSupport Manager Client before 10.20.0004 allows remote attackers to bypass the (1) basic and (2) authentication schemes by spoofing the N (no CVSS)
- [CVE-2007-5058](https://cve.now/CVE-2007-5058.md): Cross-site scripting (XSS) vulnerability in the Web administration interface in Barracuda Spam Firewall before firmware 3.5.10.016 allows re (no CVSS)
- [CVE-2007-5059](https://cve.now/CVE-2007-5059.md): Multiple cross-site scripting (XSS) vulnerabilities in GreenSQL allow remote attackers to inject arbitrary web script or HTML via several ve (no CVSS)
- [CVE-2007-5060](https://cve.now/CVE-2007-5060.md): Cross-site request forgery (CSRF) vulnerability in the cpass functionality in an admin action in index.php in XCMS allows remote attackers t (no CVSS)
- [CVE-2007-5061](https://cve.now/CVE-2007-5061.md): SQL injection vulnerability in mods/banners/navlist.php in Clansphere 2007.4 allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2007-5062](https://cve.now/CVE-2007-5062.md): account.php in Adam Scheinberg Flip 3.0 and earlier allows remote attackers to create administrative accounts via the un parameter in a regi (no CVSS)
- [CVE-2007-5063](https://cve.now/CVE-2007-5063.md): Adam Scheinberg Flip 3.0 and earlier stores sensitive information under the web root with insufficient access control, which allows remote a (no CVSS)
- [CVE-2007-5064](https://cve.now/CVE-2007-5064.md): Buffer overflow in a certain ActiveX control in Xunlei Web Thunder 5.6.9.344, possibly the DapPlayer ActiveX control in DapPlayer\_Now.dll, a (no CVSS)
- [CVE-2007-5065](https://cve.now/CVE-2007-5065.md): PHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show (com\_slideshow) component for Joomla! allows remote (no CVSS)
- [CVE-2007-3916](https://cve.now/CVE-2007-3916.md): The main function in skkdic-expr.c in SKK Tools 1.2 allows local users to overwrite or delete arbitrary files via a symlink attack on a skkd (no CVSS)
- [CVE-2007-5035](https://cve.now/CVE-2007-5035.md): PHP remote file inclusion vulnerability in html/modules/extranet\_profile/main.php in openEngine 1.9 beta1 allows remote attackers to execute (no CVSS)
- [CVE-2007-5036](https://cve.now/CVE-2007-5036.md): Multiple buffer overflows in the AirDefense Airsensor M520 with firmware 4.3.1.1 and 4.4.1.4 allow remote authenticated users to cause a den (no CVSS)
- [CVE-2007-5037](https://cve.now/CVE-2007-5037.md): Buffer overflow in the inotifytools\_snprintf function in src/inotifytools.c in the inotify-tools library before 3.11 allows context-dependen (no CVSS)
- [CVE-2007-5038](https://cve.now/CVE-2007-5038.md): The offer\_account\_by\_email function in User.pm in the WebService for Bugzilla before 3.0.2, and 3.1.x before 3.1.2, does not check the value (no CVSS)
- [CVE-2007-5039](https://cve.now/CVE-2007-5039.md): Ghost Security Suite beta 1.110 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, w (no CVSS)
- [CVE-2007-5040](https://cve.now/CVE-2007-5040.md): Ghost Security Suite alpha 1.200 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, (no CVSS)
- [CVE-2007-5041](https://cve.now/CVE-2007-5041.md): G DATA InternetSecurity 2007 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, whic (no CVSS)
- [CVE-2007-5042](https://cve.now/CVE-2007-5042.md): Outpost Firewall Pro 4.0.1025.7828 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers (no CVSS)
- [CVE-2007-5043](https://cve.now/CVE-2007-5043.md): Kaspersky Internet Security 7.0.0.125 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handl (no CVSS)
- [CVE-2007-5044](https://cve.now/CVE-2007-5044.md): ZoneAlarm Pro 7.0.362.000 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function handlers, which a (no CVSS)
- [CVE-2007-5045](https://cve.now/CVE-2007-5045.md): Argument injection vulnerability in Apple QuickTime 7.1.5 and earlier, when running on systems with Mozilla Firefox before 2.0.0.7 installed (no CVSS)
- [CVE-2007-5046](https://cve.now/CVE-2007-5046.md): Cross-site scripting (XSS) vulnerability in the Webmail interface for IceWarp Merak Mail Server before 9.0.0 allows remote attackers to inje (no CVSS)
- [CVE-2007-5047](https://cve.now/CVE-2007-5047.md): Norton Internet Security 2008 15.0.0.60 does not properly validate certain parameters to System Service Descriptor Table (SSDT) function han (no CVSS)
- [CVE-2007-5048](https://cve.now/CVE-2007-5048.md): Heap-based buffer overflow in Lhaplus before 1.55 allows remote attackers to execute arbitrary code via a long filename in an ARJ archive. (no CVSS)
- [CVE-2007-5050](https://cve.now/CVE-2007-5050.md): Directory traversal vulnerability in index.php in Neuron News 1.0 allows remote attackers to include and execute arbitrary local files via a (no CVSS)
- [CVE-2007-5051](https://cve.now/CVE-2007-5051.md): Multiple cross-site scripting (XSS) vulnerabilities in PhpGedView 4.1.1 allow remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2007-5052](https://cve.now/CVE-2007-5052.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in Vigile CMS 1.8 allow remote attackers to inject arbitrary web script or (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-09-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.