# CVEs published 2007-10-11 19 CVEs were published on October 11, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-3917](https://cve.now/CVE-2007-3917.md): The multiplayer engine in Wesnoth 1.2.x before 1.2.7 and 1.3.x before 1.3.9 allows remote servers to cause a denial of service (crash) via a (no CVSS) - [CVE-2007-5169](https://cve.now/CVE-2007-5169.md): Stack-based buffer overflow in MAIPM6.dll in Adobe PageMaker 7.0.1 and 7.0.2 on Windows allows user-assisted remote attackers to execute arb (no CVSS) - [CVE-2007-5365](https://cve.now/CVE-2007-5365.md): Stack-based buffer overflow in the cons\_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementati (no CVSS) - [CVE-2007-5366](https://cve.now/CVE-2007-5366.md): The Tomcat 4.1-based Servlet Service in Fujitsu Interstage Application Server 7.0 through 9.0.0 and Interstage Apworks/Studio 7.0 through 9. (no CVSS) - [CVE-2007-5367](https://cve.now/CVE-2007-5367.md): Unspecified vulnerability in the Virtual File System (VFS) in Sun Solaris 10 allows local users to cause a denial of service (kernel memory (no CVSS) - [CVE-2007-5368](https://cve.now/CVE-2007-5368.md): Multiple unspecified vulnerabilities in labeld in Trusted Extensions in Sun Solaris 10 allow local users to cause a denial of service (multi (no CVSS) - [CVE-2007-5369](https://cve.now/CVE-2007-5369.md): The GetMagicNumberString function in Massive Entertainment World in Conflict 1.000 and earlier allows remote attackers to cause a denial of (no CVSS) - [CVE-2007-5370](https://cve.now/CVE-2007-5370.md): Multiple cross-site scripting (XSS) vulnerabilities in cgi-bin/dnewsweb.exe in NetWin DNewsWeb (DNews News Server) 57e1 allow remote attacke (no CVSS) - [CVE-2007-5371](https://cve.now/CVE-2007-5371.md): Multiple SQL injection vulnerabilities in mutate\_content.dynamic.php in MODx 0.9.6 allow remote attackers to execute arbitrary SQL commands (no CVSS) - [CVE-2007-5372](https://cve.now/CVE-2007-5372.md): Multiple SQL injection vulnerabilities in (a) LedgerSMB 1.0.0 through 1.2.7 and (b) DWS Systems SQL-Ledger 2.x allow remote attackers to exe (no CVSS) - [CVE-2007-5373](https://cve.now/CVE-2007-5373.md): ldapscripts 1.4 and 1.7 sends a password as a command line argument when calling some LDAP programs, which might allow local users to read t (no CVSS) - [CVE-2007-5374](https://cve.now/CVE-2007-5374.md): cp\_memberedit.php in LightBlog 8.4.1.1 does not check for administrative credentials when processing an admin action, which allows remote au (no CVSS) - [CVE-2007-5375](https://cve.now/CVE-2007-5375.md): Interpretation conflict in the Sun Java Virtual Machine (JVM) allows user-assisted remote attackers to conduct a multi-pin DNS rebinding att (no CVSS) - [CVE-2007-5362](https://cve.now/CVE-2007-5362.md): Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite (com\_mosmedia) 4.5.1 component for Mambo and J (no CVSS) - [CVE-2007-5363](https://cve.now/CVE-2007-5363.md): PHP remote file inclusion vulnerability in admin.panoramic.php in the Panoramic Picture Viewer (com\_panoramic) mambot (plugin) 1.0 for Jooml (no CVSS) - [CVE-2007-5364](https://cve.now/CVE-2007-5364.md): Directory traversal vulnerability in payments/ideal\_process.php in the iDEAL transaction handler in ViArt Shopping Cart allows remote attack (no CVSS) - [CVE-2007-3896](https://cve.now/CVE-2007-3896.md): The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows rem (no CVSS) - [CVE-2007-4992](https://cve.now/CVE-2007-4992.md): Stack-based buffer overflow in the process\_packet function in fbserver.exe in Firebird SQL 2.0.2 allows remote attackers to execute arbitrar (no CVSS) - [CVE-2007-5323](https://cve.now/CVE-2007-5323.md): The RepliStor Server Service in EMC Replistor 6.1.3 allows remote attackers to execute arbitrary code via a size value that causes RepliStor (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-10-11 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.