# CVEs published 2007-10-17

52 CVEs were published on October 17, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-5488](https://cve.now/CVE-2007-5488.md): Multiple SQL injection vulnerabilities in cdr\_addon\_mysql in Asterisk-Addons before 1.2.8, and 1.4.x before 1.4.4, allow remote attackers to (no CVSS)
- [CVE-2007-5504](https://cve.now/CVE-2007-5504.md): Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+ and 10.1.0.5 unknown impact and remote attack vectors, related to (1) Impor (no CVSS)
- [CVE-2007-5505](https://cve.now/CVE-2007-5505.md): Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and remote (no CVSS)
- [CVE-2007-5506](https://cve.now/CVE-2007-5506.md): The Core RDBMS component in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote attackers to cause a denial o (no CVSS)
- [CVE-2007-5507](https://cve.now/CVE-2007-5507.md): The GIOP service in TNS Listener in the Oracle Net Services component in Oracle Database 9.0.1.5+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0. (no CVSS)
- [CVE-2007-5508](https://cve.now/CVE-2007-5508.md): Multiple SQL injection vulnerabilities in the CTXSYS Intermedia application for the Oracle Text component (CTX\_DOC) in Oracle Database 10.1. (no CVSS)
- [CVE-2007-5509](https://cve.now/CVE-2007-5509.md): Unspecified vulnerability in the Spatial component in Oracle Database 9.2.0.8 and 9.2.0.8DV has unknown impact and remote attack vectors, ak (no CVSS)
- [CVE-2007-5510](https://cve.now/CVE-2007-5510.md): Multiple unspecified vulnerabilities in the Workspace Manager component in Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9. (no CVSS)
- [CVE-2007-5511](https://cve.now/CVE-2007-5511.md): SQL injection vulnerability in Workspace Manager for Oracle Database before OWM 10.2.0.4.1, OWM 10.1.0.8.0, and OWM 9.2.0.8.0 allows attacke (no CVSS)
- [CVE-2007-5512](https://cve.now/CVE-2007-5512.md): Unspecified vulnerability in the Oracle Database Vault component in Oracle Database 9.2.0.8DV and 10.2.0.3 has unknown impact and remote att (no CVSS)
- [CVE-2007-5513](https://cve.now/CVE-2007-5513.md): The XML DB (XMLDB) component in Oracle Database 9.2.0.8, 9.2.0.8DV, and 10.1.0.5 generates incorrect audit entries in the USERID column in w (no CVSS)
- [CVE-2007-5514](https://cve.now/CVE-2007-5514.md): Multiple unspecified vulnerabilities in Oracle Database 10.2.0.3 have unknown impact and attack vectors related to (1) Database Vault compon (no CVSS)
- [CVE-2007-5515](https://cve.now/CVE-2007-5515.md): Unspecified vulnerability in the Spatial component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.2, and 10.2.0.3 has unknown impac (no CVSS)
- [CVE-2007-5516](https://cve.now/CVE-2007-5516.md): Unspecified vulnerability in the Oracle Process Mgmt & Notification component in Oracle Application Server 10.1.3.3 has unknown impact and r (no CVSS)
- [CVE-2007-5517](https://cve.now/CVE-2007-5517.md): Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.0.2 and 10.1.4.1, and Collaboration Suite 10.1. (no CVSS)
- [CVE-2007-5518](https://cve.now/CVE-2007-5518.md): Unspecified vulnerability in the Oracle HTTP Server component in Oracle Application Server 10.1.3.2 has unknown impact and remote attack vec (no CVSS)
- [CVE-2007-5519](https://cve.now/CVE-2007-5519.md): Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 and 10.1.2.0.2, and Collaboration Suite 10.1.2 (no CVSS)
- [CVE-2007-5520](https://cve.now/CVE-2007-5520.md): Unspecified vulnerability in the Oracle Internet Directory component in Oracle Database 9.2.0.8 and 9.2.0.8DV, and Oracle Application Server (no CVSS)
- [CVE-2007-5521](https://cve.now/CVE-2007-5521.md): Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.3 (no CVSS)
- [CVE-2007-5522](https://cve.now/CVE-2007-5522.md): Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.4.1 has unknown impact and remote attack vectors, (no CVSS)
- [CVE-2007-5523](https://cve.now/CVE-2007-5523.md): Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.4. (no CVSS)
- [CVE-2007-5524](https://cve.now/CVE-2007-5524.md): Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, and 10.1.2.2, and Collabo (no CVSS)
- [CVE-2007-5525](https://cve.now/CVE-2007-5525.md): Unspecified vulnerability in the Oracle Single Sign-On component in Oracle Application Server 9.0.4.3, 10.1.2.0.2, 10.1.2.2, and 10.1.4.0.1; (no CVSS)
- [CVE-2007-5526](https://cve.now/CVE-2007-5526.md): Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 10.1.2.0.2, 10.1.2.2, and 10.1.4.1, and Collaboration (no CVSS)
- [CVE-2007-5527](https://cve.now/CVE-2007-5527.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 have unknown impact and remote attack vectors, related to (1) Appl (no CVSS)
- [CVE-2007-5528](https://cve.now/CVE-2007-5528.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite 12.0.2 have unknown impact and attack vectors related to (1) Public Sector H (no CVSS)
- [CVE-2007-5529](https://cve.now/CVE-2007-5529.md): Unspecified vulnerability in the Oracle Self-Service Web Applications component in client-only installations of Oracle E-Business Suite 11.5 (no CVSS)
- [CVE-2007-5530](https://cve.now/CVE-2007-5530.md): Unspecified vulnerability in the Database Control component in Oracle Database 10.1.0.5 and 10.2.0.3, and Enterprise Manager, has unknown im (no CVSS)
- [CVE-2007-5531](https://cve.now/CVE-2007-5531.md): Unspecified vulnerability in Oracle Help for Web, as used in Oracle Application Server, Oracle Database 10.2.0.3, and Enterprise Manager 10. (no CVSS)
- [CVE-2007-5532](https://cve.now/CVE-2007-5532.md): Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.17, 8.47.14, 8.48. (no CVSS)
- [CVE-2007-5533](https://cve.now/CVE-2007-5533.md): Unspecified vulnerability in the People Tools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.47.14, 8.48.13, 8.49. (no CVSS)
- [CVE-2007-5534](https://cve.now/CVE-2007-5534.md): Unspecified vulnerability in the HCM component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 Bundle 13 9.0 Bundle 3 has u (no CVSS)
- [CVE-2007-5491](https://cve.now/CVE-2007-5491.md): Directory traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to chmod arb (no CVSS)
- [CVE-2007-5492](https://cve.now/CVE-2007-5492.md): Static code injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to execute (no CVSS)
- [CVE-2007-5489](https://cve.now/CVE-2007-5489.md): Directory traversal vulnerability in index.php in Artmedic CMS 3.4 and earlier allows remote attackers to include and execute arbitrary loca (no CVSS)
- [CVE-2007-5490](https://cve.now/CVE-2007-5490.md): SQL injection vulnerability in default.asp in Okul Otomasyon Portal 2.0 allows remote attackers to execute arbitrary SQL commands via the id (no CVSS)
- [CVE-2003-1358](https://cve.now/CVE-2003-1358.md): rs.F300 for HP-UX 10.0 through 11.22 uses the PATH environment variable to find and execute programs such as rm while operating at raised pr (no CVSS)
- [CVE-2003-1359](https://cve.now/CVE-2003-1359.md): Buffer overflow in stmkfont utility of HP-UX 10.0 through 11.22 allows local users to gain privileges via a long command line argument. (no CVSS)
- [CVE-2003-1360](https://cve.now/CVE-2003-1360.md): Buffer overflow in the setupterm function of (1) lanadmin and (2) landiag programs of HP-UX 10.0 through 10.34 allows local users to execute (no CVSS)
- [CVE-2003-1361](https://cve.now/CVE-2003-1361.md): Unknown vulnerability in VERITAS Bare Metal Restore (BMR) of Tivoli Storage Manager (TSM) 3.1.0 through 3.2.1 allows remote attackers to gai (no CVSS)
- [CVE-2003-1362](https://cve.now/CVE-2003-1362.md): Bastille B.02.00.00 of HP-UX 11.00 and 11.11 does not properly configure the (1) NOVRFY and (2) NOEXPN options in the sendmail.cf file, whic (no CVSS)
- [CVE-2003-1363](https://cve.now/CVE-2003-1363.md): The remote web management interface of Aprelium Technologies Abyss Web Server 1.1.2 and earlier does not log connection attempts to the web (no CVSS)
- [CVE-2003-1364](https://cve.now/CVE-2003-1364.md): Aprelium Technologies Abyss Web Server 1.1.2, and possibly other versions before 1.1.4, allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2003-1365](https://cve.now/CVE-2003-1365.md): The escape\_dangerous\_chars function in CGI::Lite 2.0 and earlier does not correctly remove special characters including (1) "\\" (backslash), (no CVSS)
- [CVE-2003-1366](https://cve.now/CVE-2003-1366.md): chpass in OpenBSD 2.0 through 3.2 allows local users to read portions of arbitrary files via a hard link attack on a temporary file used to (no CVSS)
- [CVE-2003-1367](https://cve.now/CVE-2003-1367.md): The which\_access variable for Majordomo 2.0 through 1.94.4, and possibly earlier versions, is set to "open" by default, which allows remote (no CVSS)
- [CVE-2003-1368](https://cve.now/CVE-2003-1368.md): Buffer overflow in the 32bit FTP client 9.49.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary c (no CVSS)
- [CVE-2003-1369](https://cve.now/CVE-2003-1369.md): Buffer overflow in ByteCatcher FTP client 1.04b allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary (no CVSS)
- [CVE-2003-1370](https://cve.now/CVE-2003-1370.md): Multiple cross-site scripting (XSS) vulnerabilities in Nuked-Klan 1.2b allow remote attackers to inject arbitrary HTML or web script via (1) (no CVSS)
- [CVE-2003-1371](https://cve.now/CVE-2003-1371.md): Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an op parameter set to ph (no CVSS)
- [CVE-2003-1372](https://cve.now/CVE-2003-1372.md): Cross-site scripting (XSS) vulnerability in links.php script in myPHPNuke 1.8.8, and possibly earlier versions, allows remote attackers to i (no CVSS)
- [CVE-2003-1373](https://cve.now/CVE-2003-1373.md): Directory traversal vulnerability in auth.php for PhpBB 1.4.0 through 1.4.4 allows remote attackers to read and include arbitrary files via (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-10-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.