# CVEs published 2007-09-28

8 CVEs were published on September 28, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-5136](https://cve.now/CVE-2007-5136.md): Cross-site scripting (XSS) vulnerability in DFD Cart 1.1.4 and earlier allows remote attackers to inject arbitrary web script or HTML via un (no CVSS)
- [CVE-2007-5137](https://cve.now/CVE-2007-5137.md): Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl (Tcl/Tk) 8.4.13 through 8.4.15 allows remote attackers to execute arb (no CVSS)
- [CVE-2007-5138](https://cve.now/CVE-2007-5138.md): PHP remote file inclusion vulnerability in forum/forum.php in lustig.cms BETA 2.5 allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2007-5139](https://cve.now/CVE-2007-5139.md): PHP remote file inclusion vulnerability in admin/include/header.php in chupix 0.2.3, when register\_globals is enabled, allows remote attacke (no CVSS)
- [CVE-2007-5140](https://cve.now/CVE-2007-5140.md): PHP remote file inclusion vulnerability in includes/archive/archive\_topic.php in IntegraMOD Nederland 1.4.2 allows remote attackers to execu (no CVSS)
- [CVE-2007-5141](https://cve.now/CVE-2007-5141.md): SQL injection vulnerability in search.php in SiteX CMS 0.7.3 Beta allows remote attackers to execute arbitrary SQL commands via the search p (no CVSS)
- [CVE-2007-5142](https://cve.now/CVE-2007-5142.md): Cross-site scripting (XSS) vulnerability in buscar.asp in Solidweb Novus 1.0 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2007-4880](https://cve.now/CVE-2007-4880.md): Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-09-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.