# CVEs published 2007-10-31

44 CVEs were published on October 31, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2004-2745](https://cve.now/CVE-2004-2745.md): Directory traversal vulnerability in Anteco Visual Technologies OwnServer 1.0 and earlier allows remote attackers to read arbitrary files vi (no CVSS)
- [CVE-2007-2957](https://cve.now/CVE-2007-2957.md): Integer overflow in McAfee E-Business Server before 8.5.3 for Solaris, and before 8.1.2 for Linux, HP-UX, and AIX, allows remote attackers t (no CVSS)
- [CVE-2007-4351](https://cve.now/CVE-2007-4351.md): Off-by-one error in the ippReadIO function in cups/ipp.c in CUPS 1.3.3 allows remote attackers to cause a denial of service (crash) via a cr (no CVSS)
- [CVE-2007-5768](https://cve.now/CVE-2007-5768.md): The Globe7 soft phone client 7.3 sends username and password information in cleartext, which allows remote attackers to obtain sensitive inf (no CVSS)
- [CVE-2007-2263](https://cve.now/CVE-2007-2263.md): Heap-based buffer overflow in RealNetworks RealPlayer 10.0, 10.1, and possibly 10.5, RealOne Player, and RealPlayer Enterprise allows remote (no CVSS)
- [CVE-2007-2264](https://cve.now/CVE-2007-2264.md): Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allo (no CVSS)
- [CVE-2007-4345](https://cve.now/CVE-2007-4345.md): Buffer overflow in IMail Client 9.22, as shipped with IPSwitch IMail Server 2006.22, allows remote attackers to execute arbitrary code via a (no CVSS)
- [CVE-2007-4599](https://cve.now/CVE-2007-4599.md): Stack-based buffer overflow in RealNetworks RealPlayer 10 and possibly 10.5, and RealOne Player 1 and 2, for Windows allows remote attackers (no CVSS)
- [CVE-2007-5080](https://cve.now/CVE-2007-5080.md): Integer overflow in RealNetworks RealPlayer 10 and 10.5, RealOne Player 1, and RealPlayer Enterprise for Windows allows remote attackers to (no CVSS)
- [CVE-2007-5081](https://cve.now/CVE-2007-5081.md): Heap-based buffer overflow in RealNetworks RealPlayer 8, 10, 10.1, and possibly 10.5; RealOne Player 1 and 2; and RealPlayer Enterprise allo (no CVSS)
- [CVE-2007-5751](https://cve.now/CVE-2007-5751.md): Liferea before 1.4.6 uses weak permissions (0644) for the feedlist.opml backup file, which allows local users to obtain credentials. (no CVSS)
- [CVE-2007-5752](https://cve.now/CVE-2007-5752.md): adduser.php in PHP-AGTC Membership (AGTC-Membership) System 1.1a does not require authentication, which allows remote attackers to create ac (no CVSS)
- [CVE-2007-5753](https://cve.now/CVE-2007-5753.md): Unspecified vulnerability in Light FMan PHP (lfman or lightfman) before 2.0rc1 has unknown impact and attack vectors related to "actions." (no CVSS)
- [CVE-2007-5754](https://cve.now/CVE-2007-5754.md): PHP remote file inclusion vulnerability in urlinn\_includes/config.php in phpFaber URLInn 2.0.5 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2002-2365](https://cve.now/CVE-2002-2365.md): Simple WAIS (SWAIS) 1.11 allows remote attackers to execute arbitrary commands via the shell metacharacters in the search field, as demonstr (no CVSS)
- [CVE-2002-2366](https://cve.now/CVE-2002-2366.md): Buffer overflow in the XML parser of Trillian 0.6351, 0.725 and 0.73 allows remote attackers to cause a denial of service (crash) and possib (no CVSS)
- [CVE-2002-2367](https://cve.now/CVE-2002-2367.md): Off-by-one buffer overflow in NEC SOCKS5 1.0 r11 and earlier allows remote attackers to cause a denial of service and possibly execute arbit (no CVSS)
- [CVE-2002-2368](https://cve.now/CVE-2002-2368.md): Multiple buffer overflows in NEC SOCKS5 1.0 r11 and earlier allow remote attackers to cause a denial of service and possibly execute arbitra (no CVSS)
- [CVE-2002-2369](https://cve.now/CVE-2002-2369.md): Perception LiteServe 2.0 allows remote attackers to read password protected files via a leading "/./" in a URL. (no CVSS)
- [CVE-2002-2370](https://cve.now/CVE-2002-2370.md): SWS web server 0.0.4, 0.0.3 and 0.1.0 allows remote attackers to cause a denial of service (crash) via a URL request that does not end with (no CVSS)
- [CVE-2002-2371](https://cve.now/CVE-2002-2371.md): Linksys WET11 firmware 1.31 and 1.32 allows remote attackers to cause a denial of service (crash) via a packet containing the device's hardw (no CVSS)
- [CVE-2002-2372](https://cve.now/CVE-2002-2372.md): The telnet server in Infoprint 21 running controller software before 1.056007 allows remote attackers to cause a denial of service (crash) v (no CVSS)
- [CVE-2002-2373](https://cve.now/CVE-2002-2373.md): The default configuration of the TCP/IP printer configuration utility in Apple LaserWriter 12/640 PS printer contains a blank Telnet passwor (no CVSS)
- [CVE-2002-2374](https://cve.now/CVE-2002-2374.md): Unspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors related to "unsafe use of temporary files." (no CVSS)
- [CVE-2002-2375](https://cve.now/CVE-2002-2375.md): Directory traversal vulnerability in CommuniGate Pro 4.0b4 and possibly earlier versions allows remote attackers to list the contents of the (no CVSS)
- [CVE-2002-2376](https://cve.now/CVE-2002-2376.md): Cross-site scripting (XSS) vulnerability in E-Guest\_sign.pl in E-Guest 1.1 allows remote attackers to inject arbitrary SSI directives, web s (no CVSS)
- [CVE-2002-2377](https://cve.now/CVE-2002-2377.md): Cross-site scripting (XSS) vulnerability in addentry.cgi in ZAP 1.0.3 allows remote attackers to inject arbitrary SSi directives, web script (no CVSS)
- [CVE-2002-2378](https://cve.now/CVE-2002-2378.md): Cross-site scripting (XSS) vulnerability in AN HTTP 1.41d allows remote attackers to inject arbitrary web script or HTML via a colon (:) in (no CVSS)
- [CVE-2002-2379](https://cve.now/CVE-2002-2379.md): Cisco AS5350 IOS 12.2(11)T with access control lists (ACLs) applied and possibly with ssh running allows remote attackers to cause a denial (no CVSS)
- [CVE-2002-2380](https://cve.now/CVE-2002-2380.md): NetDSL ADSL Modem 800 with Microsoft Network firmware 5.5.11 allows remote attackers to gain access to configuration menus by sniffing undoc (no CVSS)
- [CVE-2002-2381](https://cve.now/CVE-2002-2381.md): Multiple buffer overflows in (1) tetrinet\_inmessage, (2) speclist\_add and (3) config-getthemeinfo of GTetrinet 0.4.3 and earlier allow remot (no CVSS)
- [CVE-2002-2382](https://cve.now/CVE-2002-2382.md): cvsupd.sh in CVSup 1.2 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on /var/tmp/cvsupd.out. (no CVSS)
- [CVE-2002-2383](https://cve.now/CVE-2002-2383.md): SQL injection vulnerability in f2html.pl 0.1 through 0.4 allows remote attackers to execute arbitrary SQL commands via file names. (no CVSS)
- [CVE-2002-2384](https://cve.now/CVE-2002-2384.md): hotfoon4.exe in Hotfoon 4.00 stores user names and passwords in cleartext in the hotfoon2 registry key, which allows local users to gain acc (no CVSS)
- [CVE-2002-2385](https://cve.now/CVE-2002-2385.md): Buffer overflow in hotfoon4.exe in Hotfoon 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary c (no CVSS)
- [CVE-2002-2386](https://cve.now/CVE-2002-2386.md): Cross-site scripting (XSS) vulnerability in the Quizz module for XOOPS 1.0, when allowing on-line question development, allows remote attack (no CVSS)
- [CVE-2002-2387](https://cve.now/CVE-2002-2387.md): Directory traversal vulnerability in Hyperion FTP server 2.8.1 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2002-2388](https://cve.now/CVE-2002-2388.md): Buffer overflow in INweb POP3 mail server 2.01 allows remote attackers to cause a denial of service (crash) via a long HELO command. (no CVSS)
- [CVE-2002-2389](https://cve.now/CVE-2002-2389.md): TheServer 1.74 web server stores server.ini under the web document root with insufficient access control, which allows remote attackers to o (no CVSS)
- [CVE-2002-2390](https://cve.now/CVE-2002-2390.md): Buffer overflow in the IDENT daemon (identd) in Trillian 0.6351, 0.725, 0.73, 0.74 and 1.0 pro allows remote attackers to cause a denial of (no CVSS)
- [CVE-2002-2391](https://cve.now/CVE-2002-2391.md): SQL injection vulnerability in index.php of WebChat 1.5 included in XOOPS 1.0 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2002-2392](https://cve.now/CVE-2002-2392.md): Winamp 2.65 through 3.0 stores skin files in a predictable file location, which allows remote attackers to execute arbitrary code via a URL (no CVSS)
- [CVE-2002-2393](https://cve.now/CVE-2002-2393.md): Serv-U FTP server 3.0, 3.1 and 4.0.0.4 does not accept new connections while validating user folder access rights, which allows remote attac (no CVSS)
- [CVE-2007-5740](https://cve.now/CVE-2007-5740.md): The format string protection mechanism in IMAPD for Perdition Mail Retrieval Proxy 1.17 and earlier allows remote attackers to execute arbit (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-10-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.