# CVEs published 2007-10-03

17 CVEs were published on October 3, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-5173](https://cve.now/CVE-2007-5173.md): PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote attackers to execute (no CVSS)
- [CVE-2007-5174](https://cve.now/CVE-2007-5174.md): Directory traversal vulnerability in phpinc/news.php in actSite 1.56 allows remote attackers to include and execute arbitrary local files vi (no CVSS)
- [CVE-2007-5175](https://cve.now/CVE-2007-5175.md): PHP remote file inclusion vulnerability lib/base.php in actSite 1.991 Beta allows remote attackers to execute arbitrary PHP code via a URL i (no CVSS)
- [CVE-2007-5176](https://cve.now/CVE-2007-5176.md): Multiple cross-site scripting (XSS) vulnerabilities in GroupLink eHelpDesk 6.2.2 allow remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2007-5177](https://cve.now/CVE-2007-5177.md): SQL injection vulnerability in index.php in the MambAds (com\_mambads) 1.5 and earlier component for Mambo allows remote attackers to execute (no CVSS)
- [CVE-2007-5178](https://cve.now/CVE-2007-5178.md): contrib/mx\_glance\_sdesc.php in the mx\_glance 2.3.3 module for mxBB places a critical security check within a comment because of a missing co (no CVSS)
- [CVE-2007-5179](https://cve.now/CVE-2007-5179.md): Multiple cross-site scripting (XSS) vulnerabilities in iletisim.asp in Y&K Iletisim Formu allow remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2007-5180](https://cve.now/CVE-2007-5180.md): Multiple SQL injection vulnerabilities in Ohesa Emlak Portali allow remote attackers to execute arbitrary SQL commands via the (1) Kategori (no CVSS)
- [CVE-2007-5181](https://cve.now/CVE-2007-5181.md): SQL injection vulnerability in detay.asp in Netkamp Emlak Scripti allows remote attackers to execute arbitrary SQL commands via the ilan\_id (no CVSS)
- [CVE-2007-5182](https://cve.now/CVE-2007-5182.md): Cross-site scripting (XSS) vulnerability in mail.asp in Netkamp Emlak Scripti allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2007-5183](https://cve.now/CVE-2007-5183.md): Cross-site scripting (XSS) vulnerability in Mailbox.mws in OdysseySuite, possibly 4.0.729, allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2007-5184](https://cve.now/CVE-2007-5184.md): Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute arbitrary code via fo (no CVSS)
- [CVE-2007-5185](https://cve.now/CVE-2007-5185.md): Multiple PHP remote file inclusion vulnerabilities in phpWCMS XT 0.0.7 BETA and earlier allow remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2007-5186](https://cve.now/CVE-2007-5186.md): PHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when register\_globals is disabled, allows remote attack (no CVSS)
- [CVE-2007-5187](https://cve.now/CVE-2007-5187.md): SQL injection vulnerability in infusions/calendar\_events\_panel/show\_single.php in the Expanded Calendar 2.x module for PHP-Fusion allows rem (no CVSS)
- [CVE-2007-5188](https://cve.now/CVE-2007-5188.md): Unspecified vulnerability in the XOOPS uploader class in Xoops 2.0.17.1-RC1 and earlier allows remote attackers to upload arbitrary files vi (no CVSS)
- [CVE-2007-5189](https://cve.now/CVE-2007-5189.md): Multiple SQL injection vulnerabilities in mes\_add.php in x-script GuestBook 1.3a, when magic\_quotes\_gpc is disabled, allow remote attackers (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-10-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.