# CVEs published 2007-10-16

16 CVEs were published on October 16, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-4343](https://cve.now/CVE-2007-4343.md): Stack-based buffer overflow in IrfanView 3.99 and 4.00 allows user-assisted remote attackers to execute arbitrary code via a crafted palette (no CVSS)
- [CVE-2007-5477](https://cve.now/CVE-2007-5477.md): Cross-site scripting (XSS) vulnerability in auth.w in djeyl.net WebMod 0.48 Half-Life Dedicated Server plugin allows remote attackers to inj (no CVSS)
- [CVE-2007-5478](https://cve.now/CVE-2007-5478.md): Cross-site scripting (XSS) vulnerability in projects in Nabh Stringbeans Portal (sbportal) 3.2 allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2007-5479](https://cve.now/CVE-2007-5479.md): Cross-site scripting (XSS) vulnerability in Search.asp in Xcomputer allows remote attackers to inject arbitrary web script or HTML via the E (no CVSS)
- [CVE-2007-5480](https://cve.now/CVE-2007-5480.md): Multiple cross-site scripting (XSS) vulnerabilities in InnovaAge InnovaShop allow remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2007-5481](https://cve.now/CVE-2007-5481.md): Distributed Checksum Clearinghouse (DCC) 1.3.65 allows remote attackers to cause a denial of service (crash) via a "SOCKS flood." (no CVSS)
- [CVE-2007-5482](https://cve.now/CVE-2007-5482.md): Unspecified vulnerability in the FTP service in Sun StorEdge/StorageTek 3510 FC Array with firmware before 4.21 allows remote attackers, wit (no CVSS)
- [CVE-2007-5483](https://cve.now/CVE-2007-5483.md): Unspecified vulnerability in the Administrative Scripting Tools (such as wsadmin or ANT) in IBM WebSphere Application Server 5.x and 6.0.x h (no CVSS)
- [CVE-2007-5484](https://cve.now/CVE-2007-5484.md): Directory traversal vulnerability in wxis.exe in WWWISIS 7.1 allows local users to read arbitrary files via a .. (no CVSS)
- [CVE-2007-5485](https://cve.now/CVE-2007-5485.md): SQL injection vulnerability in index.php in the mg2 1.0 module for KwsPHP allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2007-5486](https://cve.now/CVE-2007-5486.md): dotProject before 2.1 does not properly check privileges when invoking the Companies module, which allows remote attackers to access this mo (no CVSS)
- [CVE-2007-5487](https://cve.now/CVE-2007-5487.md): Stack-based buffer overflow in COWON America jetAudio Basic 7.0.3 allows user-assisted remote attackers to execute arbitrary code via a long (no CVSS)
- [CVE-2007-5468](https://cve.now/CVE-2007-5468.md): Cisco CallManager 5.1.1.3000-5 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows re (no CVSS)
- [CVE-2007-5469](https://cve.now/CVE-2007-5469.md): OpenSER 1.2.2 does not verify the Digest authentication header URI against the Request URI in SIP messages, which allows remote attackers to (no CVSS)
- [CVE-2007-5470](https://cve.now/CVE-2007-5470.md): Microsoft Expression Media stores the catalog password in cleartext in the catalog IVC file, which allows local users to obtain sensitive in (no CVSS)
- [CVE-2007-5471](https://cve.now/CVE-2007-5471.md): libgssapi before 0.6-13.7, as used by the ISC BIND named daemon in SUSE Linux Enterprise Server 10 SP 1, terminates upon an initialization e (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-10-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.