# CVEs published 2007-10-18

94 CVEs were published on October 18, 2007: 1 critical, 0 high. Days are UTC.

- [CVE-2007-5578](https://cve.now/CVE-2007-5578.md): Basic Analysis and Security Engine (BASE) before 1.3.8 sends a redirect to the web browser but does not exit, which allows remote attackers (no CVSS)
- [CVE-2007-5579](https://cve.now/CVE-2007-5579.md): login.php in Pligg CMS 9.5 uses a guessable confirmation code when resetting a forgotten password, which allows remote attackers with knowle (no CVSS)
- [CVE-2007-5565](https://cve.now/CVE-2007-5565.md): PHP remote file inclusion vulnerability in includes/functions.php in phpSCMS 0.0.1-Alpha1 allows remote attackers to execute arbitrary PHP c (CVSS 9.8)
- [CVE-2007-5566](https://cve.now/CVE-2007-5566.md): Multiple PHP remote file inclusion vulnerabilities in PHPBlog 0.1 Alpha allow remote attackers to execute arbitrary PHP code via a URL in th (no CVSS)
- [CVE-2007-5567](https://cve.now/CVE-2007-5567.md): PHP remote file inclusion vulnerability in \_lib/fckeditor/upload\_config.php in Galmeta Post 0.11 allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2007-5568](https://cve.now/CVE-2007-5568.md): Cisco PIX and ASA appliances with 7.0 through 8.0 software, and Cisco Firewall Services Module (FWSM) 3.1(5) and earlier, allow remote attac (no CVSS)
- [CVE-2007-5569](https://cve.now/CVE-2007-5569.md): Cisco PIX and ASA appliances with 7.1 and 7.2 software, when configured for TLS sessions to the device, allow remote attackers to cause a de (no CVSS)
- [CVE-2007-5570](https://cve.now/CVE-2007-5570.md): Cisco Firewall Services Module (FWSM) 3.2(1), and 3.1(5) and earlier, allows remote attackers to cause a denial of service (device reload) v (no CVSS)
- [CVE-2007-5571](https://cve.now/CVE-2007-5571.md): Cisco Firewall Services Module (FWSM) 3.1(6), and 3.2(2) and earlier, does not properly enforce edited ACLs, which might allow remote attack (no CVSS)
- [CVE-2007-5572](https://cve.now/CVE-2007-5572.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Simple PHP Blog (SPHPBlog) 0.4.9 allow remote attackers to perform delete acti (no CVSS)
- [CVE-2007-5573](https://cve.now/CVE-2007-5573.md): PHP remote file inclusion vulnerability in classes/core/language.php in LimeSurvey 1.5.2 and earlier allows remote attackers to execute arbi (no CVSS)
- [CVE-2007-5574](https://cve.now/CVE-2007-5574.md): PHP remote file inclusion vulnerability in djpage.php in PHPDJ 0.5 allows remote attackers to execute arbitrary PHP code via a URL in the pa (no CVSS)
- [CVE-2007-5575](https://cve.now/CVE-2007-5575.md): Cross-site request forgery (CSRF) vulnerability in 1024 CMS 1.2.5 allows remote attackers to perform some actions as administrators, as demo (no CVSS)
- [CVE-2007-5576](https://cve.now/CVE-2007-5576.md): BEA Tuxedo 8.0 before RP392 and 8.1 before RP293, and WebLogic Enterprise 5.1 before RP174, echo the password in cleartext, which allows phy (no CVSS)
- [CVE-2007-5577](https://cve.now/CVE-2007-5577.md): Multiple cross-site scripting (XSS) vulnerabilities in Joomla! before 1.0.13 (aka Sunglow) allow remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2007-3102](https://cve.now/CVE-2007-3102.md): Unspecified vulnerability in the linux\_audit\_record\_event function in OpenSSH 4.3p2, as used on Fedora Core 6 and possibly other systems, al (no CVSS)
- [CVE-2007-4600](https://cve.now/CVE-2007-4600.md): The "Protect Worksheet" functionality in Mathsoft Mathcad 12 through 13.1, and PTC Mathcad 14, implements file access restrictions via a pro (no CVSS)
- [CVE-2007-5545](https://cve.now/CVE-2007-5545.md): Format string vulnerability in TIBCO SmartPGM FX allows remote attackers to execute arbitrary code via format string specifiers in unspecifi (no CVSS)
- [CVE-2007-5546](https://cve.now/CVE-2007-5546.md): Multiple stack-based buffer overflows in TIBCO SmartPGM FX allow remote attackers to execute arbitrary code or cause a denial of service (se (no CVSS)
- [CVE-2007-5547](https://cve.now/CVE-2007-5547.md): Cross-site scripting (XSS) vulnerability in Cisco IOS allows remote attackers to inject arbitrary web script or HTML, and execute IOS comman (no CVSS)
- [CVE-2007-5548](https://cve.now/CVE-2007-5548.md): Multiple stack-based buffer overflows in Command EXEC in Cisco IOS allow local users to gain privileges via unspecified vectors, aka (1) PSI (no CVSS)
- [CVE-2007-5549](https://cve.now/CVE-2007-5549.md): Unspecified vulnerability in Command EXEC in Cisco IOS allows local users to bypass command restrictions and obtain sensitive information vi (no CVSS)
- [CVE-2007-5550](https://cve.now/CVE-2007-5550.md): Unspecified vulnerability in Cisco IOS allows remote attackers to obtain the IOS version via unspecified vectors involving a "common network (no CVSS)
- [CVE-2007-5551](https://cve.now/CVE-2007-5551.md): Off-by-one error in Cisco IOS allows remote attackers to execute arbitrary code via unspecified vectors that trigger a heap-based buffer ove (no CVSS)
- [CVE-2007-5552](https://cve.now/CVE-2007-5552.md): Integer overflow in Cisco IOS allows remote attackers to execute arbitrary code via unspecified vectors. (no CVSS)
- [CVE-2007-5554](https://cve.now/CVE-2007-5554.md): Oracle allows remote attackers to obtain server memory contents via crafted packets, aka Oracle reference number 7892711. (no CVSS)
- [CVE-2007-5555](https://cve.now/CVE-2007-5555.md): Unspecified vulnerability in Symantec Altiris Deployment Solution allows attackers to obtain authentication credentials via unknown vectors, (no CVSS)
- [CVE-2007-5556](https://cve.now/CVE-2007-5556.md): Unspecified vulnerability in the Avaya VoIP Handset allows remote attackers to cause a denial of service (reboot) via crafted packets. (no CVSS)
- [CVE-2007-5557](https://cve.now/CVE-2007-5557.md): Unspecified vulnerability in the NEC mobile handset allows remote attackers to cause a denial of service (reboot) via crafted packets. (no CVSS)
- [CVE-2007-5558](https://cve.now/CVE-2007-5558.md): Integer overflow in the LG Mobile handset allows remote attackers to cause a denial of service (reboot) via a crafted HTTP packet. (no CVSS)
- [CVE-2007-5559](https://cve.now/CVE-2007-5559.md): Heap-based buffer overflow in the IBM ThinkVantage TPM Service allows remote attackers to execute arbitrary code via a crafted HTTP packet. (no CVSS)
- [CVE-2007-5560](https://cve.now/CVE-2007-5560.md): Heap-based buffer overflow in the Juniper HTTP Service allows remote attackers to execute arbitrary code via a crafted HTTP packet. (no CVSS)
- [CVE-2007-5561](https://cve.now/CVE-2007-5561.md): Format string vulnerability in the logging function in the Oracle OPMN daemon, as used on Oracle Enterprise Grid Console server 10.2.0.1, al (no CVSS)
- [CVE-2007-5562](https://cve.now/CVE-2007-5562.md): Cross-site scripting (XSS) vulnerability in cgi-bin/welcome (aka the login page) in Netgear SSL312 PROSAFE SSL VPN-Concentrator 25 allows re (no CVSS)
- [CVE-2007-5563](https://cve.now/CVE-2007-5563.md): Unspecified vulnerability in VirtueMart before 1.0.13 allows remote attackers to execute arbitrary PHP code via unspecified vectors. (no CVSS)
- [CVE-2007-5564](https://cve.now/CVE-2007-5564.md): Multiple cross-site scripting (XSS) vulnerabilities in NSSboard (formerly Simple PHP Forum) 6.1 allow remote attackers to inject arbitrary w (no CVSS)
- [CVE-2007-5473](https://cve.now/CVE-2007-5473.md): StaticFileHandler.cs in System.Web in Mono before 1.2.5.2, when running on Windows, allows remote attackers to obtain source code of sensiti (no CVSS)
- [CVE-2000-1244](https://cve.now/CVE-2000-1244.md): Computer Associates InoculateIT Agent for Exchange Server does not recognize an e-mail virus attachment if the SMTP header is missing the "F (no CVSS)
- [CVE-2002-2259](https://cve.now/CVE-2002-2259.md): Buffer overflow in the French documentation patch for Gnuplot 3.7 in SuSE Linux before 8.0 allows local users to execute arbitrary code as r (no CVSS)
- [CVE-2002-2260](https://cve.now/CVE-2002-2260.md): Cross-site scripting (XSS) vulnerability in the quips feature in Mozilla Bugzilla 2.10 through 2.17 allows remote attackers to inject arbitr (no CVSS)
- [CVE-2002-2261](https://cve.now/CVE-2002-2261.md): Sendmail 8.9.0 through 8.12.6 allows remote attackers to bypass relaying restrictions enforced by the 'check\_relay' function by spoofing a b (no CVSS)
- [CVE-2002-2262](https://cve.now/CVE-2002-2262.md): Unspecified vulnerability in xntpd of HP-UX 10.20 through 11.11 allows remote attackers to cause a denial of service (hang) via unknown atta (no CVSS)
- [CVE-2002-2263](https://cve.now/CVE-2002-2263.md): The installation program for HP-UX Visualize Conference B.11.00.11 running on HP-UX 11.00 and 11.11 installs /etc/dt and its subdirecties wi (no CVSS)
- [CVE-2002-2264](https://cve.now/CVE-2002-2264.md): Unspecified vulnerability in Internet Group Management Protocol (IGMP) of HP Tru64 4.0F through 5.1A allows remote attackers to cause a deni (no CVSS)
- [CVE-2002-2265](https://cve.now/CVE-2002-2265.md): Unspecified vulnerability in LDAP Module in System Authentication of Open Source Internet Solutions (OSIS) 5.4 running on Tru64 UNIX 4.0G an (no CVSS)
- [CVE-2002-2266](https://cve.now/CVE-2002-2266.md): NetScreen ScreenOS 2.8 through 4.0, when forwarding H.323 or Netmeeting traffic, allows remote attackers to cause a denial of service (firew (no CVSS)
- [CVE-2002-2267](https://cve.now/CVE-2002-2267.md): bogopass in bogofilter 0.9.0.4 allows local users to overwrite arbitrary files via a symlink attack on the bogopass temporary file. (no CVSS)
- [CVE-2002-2268](https://cve.now/CVE-2002-2268.md): Buffer overflow in Webster HTTP Server allows remote attackers to execute arbitrary code via a long URL. (no CVSS)
- [CVE-2002-2269](https://cve.now/CVE-2002-2269.md): Directory traversal vulnerability in Webster HTTP Server allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2002-2270](https://cve.now/CVE-2002-2270.md): Unspecified vulnerability in the ied command in HP-UX 10.10, 10.20, and 11.0 allows local users to view "normally invisible data" via unknow (no CVSS)
- [CVE-2002-2271](https://cve.now/CVE-2002-2271.md): Buffer overflow in BigFun 1.51b IRC client, when the Direct Client Connection (DCC) option is used, allows remote attackers to cause a denia (no CVSS)
- [CVE-2002-2272](https://cve.now/CVE-2002-2272.md): Tomcat 4.0 through 4.1.12, using mod\_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (des (no CVSS, org.apache.tomcat:tomcat)
- [CVE-2002-2273](https://cve.now/CVE-2002-2273.md): Cross-site scripting (XSS) vulnerability in Webster HTTP Server allows remote attackers to inject arbitrary web script or HTML via the URL. (no CVSS)
- [CVE-2002-2274](https://cve.now/CVE-2002-2274.md): akfingerd 0.5 allows local users to read arbitrary files as the akfingerd user (nobody) via a symlink attack on the .plan file. (no CVSS)
- [CVE-2002-2275](https://cve.now/CVE-2002-2275.md): Fortres 101 4.1 allows local users to bypass Fortres by pressing the Windows and "F" key together for 30 seconds, which opens multiple windo (no CVSS)
- [CVE-2002-2276](https://cve.now/CVE-2002-2276.md): Ultimate PHP Board (UPB) 1.0 allows remote attackers to view the physical path of the message board via a direct request to add.php, which l (no CVSS)
- [CVE-2002-2277](https://cve.now/CVE-2002-2277.md): SQL injection vulnerability in mod\_search/index.php in PortailPHP 0.99 allows remote attackers to execute arbitrary SQL commands via the (1) (no CVSS)
- [CVE-2002-2278](https://cve.now/CVE-2002-2278.md): Cross-site scripting (XSS) vulnerability in mod\_search/index.php in PortailPHP 0.99 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2002-2279](https://cve.now/CVE-2002-2279.md): Unspecified vulnerability in the bind function in config.inc of aldap 0.09 allows remote attackers to authenticate with Manager permissions. (no CVSS)
- [CVE-2002-2280](https://cve.now/CVE-2002-2280.md): syslogd on OpenBSD 2.9 through 3.2 does not change the source IP address of syslog packets when the machine's IP addressed is changed withou (no CVSS)
- [CVE-2002-2281](https://cve.now/CVE-2002-2281.md): Symantec Java! JIT (Just-In-Time) Compiler for Netscape Communicator 4.0 through 4.8 allows remote attackers to execute arbitrary Java comma (no CVSS)
- [CVE-2002-2282](https://cve.now/CVE-2002-2282.md): McAfee VirusScan 4.5.1, when the WebScanX.exe module is enabled, searches for particular DLLs from the user's home directory, even when brow (no CVSS)
- [CVE-2002-2283](https://cve.now/CVE-2002-2283.md): Microsoft Windows XP with Fast User Switching (FUS) enabled does not remove the "show processes from all users" privilege when the user is r (no CVSS)
- [CVE-2002-2284](https://cve.now/CVE-2002-2284.md): Netscape Communicator 4.0 through 4.79 allows remote attackers to bypass JVM security and execute arbitrary Java code via an applet that loa (no CVSS)
- [CVE-2002-2285](https://cve.now/CVE-2002-2285.md): eTrust InoculateIT 6.0 with the "Incremental Scan" option enabled may certify that a file is free of viruses before the file has been comple (no CVSS)
- [CVE-2002-2286](https://cve.now/CVE-2002-2286.md): The parse-get function in utils.c for apt-www-proxy 0.1 allows remote attackers to cause a denial of service (crash) via an empty HTTP reque (no CVSS)
- [CVE-2002-2287](https://cve.now/CVE-2002-2287.md): PHP remote file inclusion vulnerability in quick\_reply.php for phpBB Advanced Quick Reply Hack 1.0.0 and 1.1.0 allows remote attackers to ex (no CVSS)
- [CVE-2002-2288](https://cve.now/CVE-2002-2288.md): Mambo Site Server 4.0.11 allows remote attackers to obtain the physical path of the server via an HTTP request to index.php with a parameter (no CVSS)
- [CVE-2002-2289](https://cve.now/CVE-2002-2289.md): soinfo.php in BadBlue 1.7.1 calls the phpinfo function, which allows remote attackers to gain sensitive information including ODBC passwords (no CVSS)
- [CVE-2002-2290](https://cve.now/CVE-2002-2290.md): Mambo Site Server 4.0.11 installs with a default username and password of admin, which allows remote attackers to gain privileges. (no CVSS)
- [CVE-2002-2291](https://cve.now/CVE-2002-2291.md): Calisto Internet Talker 0.04 and earlier allows remote attackers to cause a denial of service (hang) via a long request, possibly triggering (no CVSS)
- [CVE-2002-2292](https://cve.now/CVE-2002-2292.md): Directory traversal vulnerability in Remote Console Applet in Halycon Software iASP 1.0.9 allows remote attackers to read arbitrary files vi (no CVSS)
- [CVE-2002-2293](https://cve.now/CVE-2002-2293.md): Webshots Desktop screensaver allows local users to bypass the password on the screensaver by pressing CTRL-ALT-DELETE and (1) hitting the ca (no CVSS)
- [CVE-2002-2294](https://cve.now/CVE-2002-2294.md): Multiple buffer overflows in Symantec Raptor Firewall 6.5 and 6.5.3, Enterprise Firewall 6.5.2 and 7.0, VelociRaptor 500/700/1000 and 1100/1 (no CVSS)
- [CVE-2002-2295](https://cve.now/CVE-2002-2295.md): Buffer overflow in Pico Server (pServ) 2.0 beta 1 through beta 5 allows remote attackers to cause a denial of service (crash) and possibly e (no CVSS)
- [CVE-2002-2296](https://cve.now/CVE-2002-2296.md): Cross-site scripting (XSS) vulnerability in YaBB.pl in Yet Another Bulletin Board (YaBB) 1 Gold SP 1 allows remote attackers to inject arbit (no CVSS)
- [CVE-2002-2297](https://cve.now/CVE-2002-2297.md): PHP remote file inclusion vulnerability in artlist.php in Thatware 0.5.2 and 0.5.3 allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2002-2298](https://cve.now/CVE-2002-2298.md): PHP remote file inclusion vulnerability in config.php in Thatware 0.3 through 0.5.3 allows remote attackers to execute arbitrary PHP code vi (no CVSS)
- [CVE-2002-2299](https://cve.now/CVE-2002-2299.md): PHP remote file inclusion vulnerability in thatfile.php in Thatware 0.3 through 0.5.2 allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2002-2300](https://cve.now/CVE-2002-2300.md): Buffer overflow in ftpd 5.4 in 3Com NBX 4.0.17 or ftpd 5.4.2 in 3Com NBX 4.1.4 allows remote attackers to cause a denial of service (crash) (no CVSS)
- [CVE-2002-2301](https://cve.now/CVE-2002-2301.md): Lawson Financials 8.0, when configured to use a third party relational database, stores usernames and passwords in a world-readable file, wh (no CVSS)
- [CVE-2002-2302](https://cve.now/CVE-2002-2302.md): 3D3.Com ShopFactory 5.5 through 5.8 allows remote attackers to modify the prices in their shopping carts by modifying the price in a hidden (no CVSS)
- [CVE-2002-2303](https://cve.now/CVE-2002-2303.md): 3D3.Com ShopFactory 5.8 uses client-side encryption and decryption for sensitive price data, which allows remote attackers to modify shoppin (no CVSS)
- [CVE-2002-2304](https://cve.now/CVE-2002-2304.md): SQL injection vulnerability in admin/auth/checksession.php in MyPHPLinks 2.1.9 and 2.2.0 allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2002-2305](https://cve.now/CVE-2002-2305.md): SQL injection vulnerability in agentadmin.php in Immobilier allows remote attackers to execute arbitrary SQL commands via the (1) agentname (no CVSS)
- [CVE-2007-5476](https://cve.now/CVE-2007-5476.md): Unspecified vulnerability in Adobe Flash Player 9.0.47.0 and earlier, when running on Opera before 9.24 on Mac OS X, has unknown "Highly Sev (no CVSS)
- [CVE-2007-5493](https://cve.now/CVE-2007-5493.md): The SMS handler for Windows Mobile 2005 Pocket PC Phone edition allows attackers to hide the sender field of an SMS message via a malformed (no CVSS)
- [CVE-2007-5535](https://cve.now/CVE-2007-5535.md): Unspecified vulnerability in newbb\_plus in RunCms 1.5.2 has unknown impact and attack vectors. (no CVSS)
- [CVE-2007-5536](https://cve.now/CVE-2007-5536.md): Unspecified vulnerability in OpenSSL before A.00.09.07l on HP-UX B.11.11, B.11.23, and B.11.31 allows local users to cause a denial of servi (no CVSS)
- [CVE-2007-5537](https://cve.now/CVE-2007-5537.md): Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before 5.1(2), and Unified CallManager 5.0, allow remote attackers to (no CVSS)
- [CVE-2007-5538](https://cve.now/CVE-2007-5538.md): Buffer overflow in the Centralized TFTP File Locator Service in Cisco Unified Communications Manager (CUCM, formerly CallManager) 5.1 before (no CVSS)
- [CVE-2007-5539](https://cve.now/CVE-2007-5539.md): Unspecified vulnerability in Cisco Unified Intelligent Contact Management Enterprise (ICME), Unified ICM Hosted (ICMH), Unified Contact Cent (no CVSS)
- [CVE-2007-5540](https://cve.now/CVE-2007-5540.md): Unspecified vulnerability in Opera before 9.24 allows remote attackers to overwrite functions on pages from other domains and bypass the sam (no CVSS)
- [CVE-2007-5541](https://cve.now/CVE-2007-5541.md): Unspecified vulnerability in Opera before 9.24, when using an "external" newsgroup or e-mail client, allows remote attackers to execute arbi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-10-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.