# CVEs published 2007-10-04

16 CVEs were published on October 4, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-4133](https://cve.now/CVE-2007-4133.md): The (1) hugetlb\_vmtruncate\_list and (2) hugetlb\_vmtruncate functions in fs/hugetlbfs/inode.c in the Linux kernel before 2.6.19-rc4 perform c (no CVSS)
- [CVE-2007-4673](https://cve.now/CVE-2007-4673.md): Argument injection vulnerability in Apple QuickTime 7.2 for Windows XP SP2 and Vista allows remote attackers to execute arbitrary commands v (no CVSS)
- [CVE-2007-5209](https://cve.now/CVE-2007-5209.md): Stack-based buffer overflow in DriveLock.exe in CenterTools DriveLock 5.0 allows remote attackers to execute arbitrary code via a long HTTP (no CVSS)
- [CVE-2007-5210](https://cve.now/CVE-2007-5210.md): Arbor Networks Peakflow SP before 3.5.1 patch 14, and 3.6.x before 3.6.1 patch 5, allows remote authenticated users to bypass access restric (no CVSS)
- [CVE-2007-5211](https://cve.now/CVE-2007-5211.md): Multiple cross-site scripting (XSS) vulnerabilities in Arbor Networks Peakflow SP 3.5.1 before patch 14, and 3.6.1 before patch 5, when scop (no CVSS)
- [CVE-2007-5212](https://cve.now/CVE-2007-5212.md): Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware before 2.43 allow remote attackers to (no CVSS)
- [CVE-2007-5213](https://cve.now/CVE-2007-5213.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote (no CVSS)
- [CVE-2007-5214](https://cve.now/CVE-2007-5214.md): Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attacke (no CVSS)
- [CVE-2007-5215](https://cve.now/CVE-2007-5215.md): Multiple PHP remote file inclusion vulnerabilities in Jacob Hinkle GodSend 0.6 allow remote attackers to execute arbitrary PHP code via a UR (no CVSS)
- [CVE-2007-5216](https://cve.now/CVE-2007-5216.md): Multiple PHP remote file inclusion vulnerabilities in eArk (e-Ark) 1.0 allow remote attackers to execute arbitrary PHP code via a URL in (1) (no CVSS)
- [CVE-2007-5207](https://cve.now/CVE-2007-5207.md): guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.\[PID\] temporary file. (no CVSS)
- [CVE-2007-5194](https://cve.now/CVE-2007-5194.md): The Chroot server in rMake 1.0.11 creates a /dev/zero device file with read/write permissions for the rMake user and the same minor device n (no CVSS)
- [CVE-2007-5198](https://cve.now/CVE-2007-5198.md): Buffer overflow in the redir function in check\_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remo (no CVSS)
- [CVE-2007-5201](https://cve.now/CVE-2007-5201.md): The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users t (no CVSS, duplicity)
- [CVE-2007-5191](https://cve.now/CVE-2007-5191.md): mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values (no CVSS)
- [CVE-2007-5193](https://cve.now/CVE-2007-5193.md): The default configuration for twiki 4.1.2 on Debian GNU/Linux, and possibly other operating systems, specifies the work area directory (cfg{ (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-10-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.