# CVEs published 2007-10-25

34 CVEs were published on October 25, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2003-1495](https://cve.now/CVE-2003-1495.md): Unspecified vulnerability in the non-SSL web agent in various HP Management Agent products allows local users or remote attackers to gain pr (no CVSS)
- [CVE-2003-1496](https://cve.now/CVE-2003-1496.md): Unspecified vulnerability in CDE dtmailpr of HP Tru64 4.0F through 5.1B allows local users to gain privileges via unknown attack vectors. (no CVSS)
- [CVE-2003-1497](https://cve.now/CVE-2003-1497.md): Buffer overflow in the system log viewer of Linksys BEFSX41 1.44.3 allows remote attackers to cause a denial of service via an HTTP request (no CVSS)
- [CVE-2003-1498](https://cve.now/CVE-2003-1498.md): Cross-site scripting (XSS) vulnerability in search.php for WRENSOFT Zoom Search Engine 2.0 Build 1018 and earlier allows remote attackers to (no CVSS)
- [CVE-2003-1499](https://cve.now/CVE-2003-1499.md): Directory traversal vulnerability in index.php in Bytehoard 0.7 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2003-1500](https://cve.now/CVE-2003-1500.md): PHP remote file inclusion vulnerability in \_functions.php in cpCommerce 0.5f allows remote attackers to execute arbitrary code via the prefi (no CVSS)
- [CVE-2003-1501](https://cve.now/CVE-2003-1501.md): Directory traversal vulnerability in the file upload CGI of Gast Arbeiter 1.3 allows remote attackers to write arbitrary files via a .. (no CVSS)
- [CVE-2003-1502](https://cve.now/CVE-2003-1502.md): mod\_throttle 3.0 allows local users with Apache privileges to access shared memory that points to a file that is writable by the apache user (no CVSS)
- [CVE-2003-1503](https://cve.now/CVE-2003-1503.md): Buffer overflow in AOL Instant Messenger (AIM) 5.2.3292 allows remote attackers to execute arbitrary code via an aim:getfile URL with a long (no CVSS)
- [CVE-2003-1504](https://cve.now/CVE-2003-1504.md): SQL injection vulnerability in variables.php in Goldlink 3.0 allows remote attackers to execute arbitrary SQL commands via the (1) vadmin\_lo (no CVSS)
- [CVE-2003-1505](https://cve.now/CVE-2003-1505.md): Microsoft Internet Explorer 6.0 allows remote attackers to cause a denial of service (crash) by creating a web page or HTML e-mail with a te (no CVSS)
- [CVE-2003-1506](https://cve.now/CVE-2003-1506.md): Cross-site scripting (XSS) vulnerability in dansguardian.pl in Adelix CensorNet 3.0 through 3.2 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2003-1507](https://cve.now/CVE-2003-1507.md): Planet Technology WGSD-1020 and WSW-2401 Ethernet switches use a default "superuser" account with the "planet" password, which allows remote (no CVSS)
- [CVE-2003-1508](https://cve.now/CVE-2003-1508.md): Buffer overflow in mIRC 6.12, when the DCC get dialog window has been minimized and the user opens the minimized window, allows remote attac (no CVSS)
- [CVE-2003-1509](https://cve.now/CVE-2003-1509.md): Real Networks RealOne Enterprise Desktop 6.0.11.774, RealOne Player 2.0, and RealOne Player 6.0.11.818 through RealOne Player 6.0.11.853 all (no CVSS)
- [CVE-2003-1510](https://cve.now/CVE-2003-1510.md): TinyWeb 1.9 allows remote attackers to cause a denial of service (CPU consumption) via a ".%00." in an HTTP GET request to the cgi-bin direc (no CVSS)
- [CVE-2003-1511](https://cve.now/CVE-2003-1511.md): Cross-site scripting (XSS) vulnerability in Bajie Java HTTP Server 0.95 through 0.95zxv4 allows remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2003-1512](https://cve.now/CVE-2003-1512.md): Buffer overflow in mIRC 6.1 and 6.11 allows remote attackers to cause a denial of service (crash) via a long DCC SEND request. (no CVSS)
- [CVE-2003-1513](https://cve.now/CVE-2003-1513.md): Multiple cross-site scripting (XSS) vulnerabilities in example scripts in Caucho Technology Resin 2.0 through 2.1.2 allow remote attackers t (no CVSS)
- [CVE-2003-1514](https://cve.now/CVE-2003-1514.md): eMule 0.29c allows remote attackers to cause a denial of service (crash) via a long password, possibly due to a buffer overflow. (no CVSS)
- [CVE-2003-1515](https://cve.now/CVE-2003-1515.md): Origo ASR-8100 ADSL Router 3.21 has an administration service running on port 254 that does not require a password, which allows remote atta (no CVSS)
- [CVE-2003-1516](https://cve.now/CVE-2003-1516.md): The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2\_01 allows signed and unsigned applets to share variables, whi (no CVSS)
- [CVE-2003-1517](https://cve.now/CVE-2003-1517.md): cart.pl in Dansie shopping cart allows remote attackers to obtain the installation path via an invalid db parameter, which leaks the path in (no CVSS)
- [CVE-2003-1518](https://cve.now/CVE-2003-1518.md): Adiscon WinSyslog 4.21 SP1 allows remote attackers to cause a denial of service (CPU consumption) via a long syslog message. (no CVSS)
- [CVE-2003-1519](https://cve.now/CVE-2003-1519.md): Cross-site scripting (XSS) vulnerability in Vivisimo clustering engine allows remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2003-1520](https://cve.now/CVE-2003-1520.md): SQL injection vulnerability in FuzzyMonkey My Classifieds 2.11 allows remote attackers to execute arbitrary SQL commands via the email param (no CVSS)
- [CVE-2003-1521](https://cve.now/CVE-2003-1521.md): Sun Java Plug-In 1.4 through 1.4.2\_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the (no CVSS)
- [CVE-2003-1522](https://cve.now/CVE-2003-1522.md): Cross-site scripting (XSS) vulnerability in PSCS VPOP3 Web Mail server 2.0e and 2.0f allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2003-1523](https://cve.now/CVE-2003-1523.md): SQL injection vulnerability in the IMAP daemon in dbmail 1.1 allows remote attackers to execute arbitrary SQL commands via the (1) login use (no CVSS)
- [CVE-2003-1524](https://cve.now/CVE-2003-1524.md): PGPi PGPDisk 6.0.2i does not unmount a PGP partition when the switch user function in Windows XP is used, which could allow local users to a (no CVSS)
- [CVE-2003-1525](https://cve.now/CVE-2003-1525.md): Unspecified vulnerability in My Photo Gallery 3.5, and possibly earlier versions, has unknown impact and attack vectors. (no CVSS)
- [CVE-2003-1526](https://cve.now/CVE-2003-1526.md): PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) ", (2) ', or (3) \> in the search fie (no CVSS)
- [CVE-2007-2983](https://cve.now/CVE-2007-2983.md): Multiple buffer overflows in the British Telecommunications Consumer webhelper ActiveX control before 2.0.0.8 in btwebcontrol.dll allow remo (no CVSS)
- [CVE-2007-5679](https://cve.now/CVE-2007-5679.md): SQL injection vulnerability in index.php in DeeEmm.com DM CMS 0.7.0.Beta allows remote attackers to execute arbitrary SQL commands via the i (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-10-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.