# CVEs published 2007-10-01

38 CVEs were published on October 1, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-4996](https://cve.now/CVE-2007-4996.md): libpurple in Pidgin before 2.2.1 does not properly handle MSN nudge messages from users who are not on the receiver's buddy list, which allo (no CVSS)
- [CVE-2007-5003](https://cve.now/CVE-2007-5003.md): Multiple stack-based buffer overflows in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 al (no CVSS)
- [CVE-2007-5004](https://cve.now/CVE-2007-5004.md): Integer overflow in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 allows remote attackers (no CVSS)
- [CVE-2007-5005](https://cve.now/CVE-2007-5005.md): Directory traversal vulnerability in rxRPC.dll in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through (no CVSS)
- [CVE-2007-5006](https://cve.now/CVE-2007-5006.md): Multiple command handlers in CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.0 through r11.5 do not verify (no CVSS)
- [CVE-2007-5082](https://cve.now/CVE-2007-5082.md): Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote at (no CVSS)
- [CVE-2007-5083](https://cve.now/CVE-2007-5083.md): Multiple integer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to (no CVSS)
- [CVE-2007-5084](https://cve.now/CVE-2007-5084.md): Multiple SQL injection vulnerabilities in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote a (no CVSS)
- [CVE-2007-5170](https://cve.now/CVE-2007-5170.md): Unspecified vulnerability in the embedded service processor (SP) before 3.09 in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager ( (no CVSS)
- [CVE-2007-5171](https://cve.now/CVE-2007-5171.md): Unspecified vulnerability in Quicksilver Forums before 1.4.1 allows remote attackers to delete arbitrary PMs via unspecified vectors. (no CVSS)
- [CVE-2007-5172](https://cve.now/CVE-2007-5172.md): Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reve (no CVSS)
- [CVE-2003-1340](https://cve.now/CVE-2003-1340.md): Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 5.6 and 6.5 allow remote authenticated users to execute arbitrary SQL com (no CVSS)
- [CVE-2007-5143](https://cve.now/CVE-2007-5143.md): F-Secure Anti-Virus for Windows Servers 7.0 64-bit edition allows local users to bypass virus scanning by using the system32 directory to st (no CVSS)
- [CVE-2007-5144](https://cve.now/CVE-2007-5144.md): Buffer overflow in the GDI engine in Windows Live Messenger, as used for Windows MSN Live 8.1, allows user-assisted remote attackers to caus (no CVSS)
- [CVE-2007-5145](https://cve.now/CVE-2007-5145.md): Multiple buffer overflows in system DLL files in Microsoft Windows XP, as used by Microsoft Windows Explorer (explorer.exe) 6.00.2900.2180, (no CVSS)
- [CVE-2007-5146](https://cve.now/CVE-2007-5146.md): Multiple PHP remote file inclusion vulnerabilities in dedi-group Der Dirigent 1.0 allow remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2007-5147](https://cve.now/CVE-2007-5147.md): Multiple PHP remote file inclusion vulnerabilities in Puzzle Apps CMS 2.2.1 allow remote attackers to execute arbitrary PHP code via a URL i (no CVSS)
- [CVE-2007-5148](https://cve.now/CVE-2007-5148.md): Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.12 allow remote attackers to execute arbitrary PHP code via a U (no CVSS)
- [CVE-2007-5149](https://cve.now/CVE-2007-5149.md): PHP remote file inclusion vulnerability in NewsCMS/news/newstopic\_inc.php in North Country Public Radio Public Media Manager (PMM) 1.3 allow (no CVSS)
- [CVE-2007-5150](https://cve.now/CVE-2007-5150.md): SQL injection vulnerability in the is\_god function in includes/nukesentinel.php in NukeSentinel 2.5.11 allows remote attackers to execute ar (no CVSS)
- [CVE-2007-5151](https://cve.now/CVE-2007-5151.md): SQL injection vulnerability in the abget\_admin function in includes/nukesentinel.php in NukeSentinel 2.5.12 allows remote attackers to execu (no CVSS)
- [CVE-2007-5152](https://cve.now/CVE-2007-5152.md): Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 9.1 container, does not demand authentication aft (no CVSS)
- [CVE-2007-5153](https://cve.now/CVE-2007-5153.md): Unspecified vulnerability in Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 8.x container, allow (no CVSS)
- [CVE-2007-5154](https://cve.now/CVE-2007-5154.md): Session fixation vulnerability in Aipo and Aipo ASP 3.0.1.0 and earlier allows remote attackers to hijack web sessions via unspecified vecto (no CVSS)
- [CVE-2007-5155](https://cve.now/CVE-2007-5155.md): IceGUI.DLL in ICEOWS 4.20b invokes a function with incorrect arguments, which allows user-assisted remote attackers to execute arbitrary cod (no CVSS)
- [CVE-2007-5156](https://cve.now/CVE-2007-5156.md): Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3.beta, La-Nai CMS, Sy (no CVSS)
- [CVE-2007-5157](https://cve.now/CVE-2007-5157.md): PHP remote file inclusion vulnerability in phfito-post.php in Alex Kocharin PHP Fidonet Tosser (PhFiTo) 1.3.0 in phpFidoNode allows remote a (no CVSS)
- [CVE-2007-5158](https://cve.now/CVE-2007-5158.md): The focus handling for the onkeydown event in Microsoft Internet Explorer 6.0 allows remote attackers to change field focus and copy keystro (no CVSS)
- [CVE-2007-5159](https://cve.now/CVE-2007-5159.md): The ntfs-3g package before 1.913-2.fc7 in Fedora 7, and an ntfs-3g package in Ubuntu 7.10/Gutsy, assign incorrect permissions (setuid root) (no CVSS)
- [CVE-2007-5160](https://cve.now/CVE-2007-5160.md): Multiple PHP remote file inclusion vulnerabilities in Thierry Leriche Restaurant Management System (ReMaSys) 0.5 allow remote attackers to e (no CVSS)
- [CVE-2007-5161](https://cve.now/CVE-2007-5161.md): Cross-zone scripting vulnerability in the internal browser in i-Systems Feedreader 3.10 allows remote attackers to inject arbitrary web scri (no CVSS)
- [CVE-2007-5162](https://cve.now/CVE-2007-5162.md): The connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1.8.5 and 1.8.6 does not verify that the com (no CVSS)
- [CVE-2007-5163](https://cve.now/CVE-2007-5163.md): PHP remote file inclusion vulnerability in includes/functions/layout.php in Nexty 1.01.A Beta allows remote attackers to execute arbitrary P (no CVSS)
- [CVE-2007-5164](https://cve.now/CVE-2007-5164.md): PHP remote file inclusion vulnerability in htmls/forum/includes/topic\_review.php in UniversiBO 1.3.4 allows remote attackers to execute arbi (no CVSS)
- [CVE-2007-5165](https://cve.now/CVE-2007-5165.md): PHP remote file inclusion vulnerability in init.php in Jens Tkotz myIpacNG-stats (MINGS) 0.05 allows remote attackers to execute arbitrary P (no CVSS)
- [CVE-2007-5166](https://cve.now/CVE-2007-5166.md): Multiple PHP remote file inclusion vulnerabilities in SiteSys 1.0a allow remote attackers to execute arbitrary PHP code via a URL in the doc (no CVSS)
- [CVE-2007-5167](https://cve.now/CVE-2007-5167.md): PHP remote file inclusion vulnerability in .systeme/fonctions.php in phpLister 0.5-pre2 allows remote attackers to execute arbitrary PHP cod (no CVSS)
- [CVE-2007-5168](https://cve.now/CVE-2007-5168.md): Multiple PHP remote file inclusion vulnerabilities in ClanLite 1.23.01.2005 allow remote attackers to execute arbitrary PHP code via a URL i (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-10-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.