# CVEs published 2007-12-12

17 CVEs were published on December 12, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6320](https://cve.now/CVE-2007-6320.md): Feature 4.7.x-dev and 5.x-dev before 20071206, a Drupal module, does not follow Drupal's Forms API submission model, which allows remote att (no CVSS)
- [CVE-2007-6321](https://cve.now/CVE-2007-6321.md): Cross-site scripting (XSS) vulnerability in RoundCube webmail 0.1rc2, 2007-12-09, and earlier versions, when using Internet Explorer, allows (no CVSS)
- [CVE-2007-0064](https://cve.now/CVE-2007-0064.md): Heap-based buffer overflow in Windows Media Format Runtime 7.1, 9, 9.5, 9.5 x64 Edition, 11, and Windows Media Services 9.1 for Microsoft Wi (no CVSS)
- [CVE-2007-3039](https://cve.now/CVE-2007-3039.md): Stack-based buffer overflow in the Microsoft Message Queuing (MSMQ) service in Microsoft Windows 2000 Server SP4, Windows 2000 Professional (no CVSS)
- [CVE-2007-3895](https://cve.now/CVE-2007-3895.md): Buffer overflow in Microsoft DirectShow in Microsoft DirectX 7.0 through 10.0 allows remote attackers to execute arbitrary code via a crafte (no CVSS)
- [CVE-2007-3901](https://cve.now/CVE-2007-3901.md): Stack-based buffer overflow in the DirectShow Synchronized Accessible Media Interchange (SAMI) parser in quartz.dll for Microsoft DirectX 7. (no CVSS)
- [CVE-2007-3902](https://cve.now/CVE-2007-3902.md): Use-after-free vulnerability in the CRecalcProperty function in mshtml.dll in Microsoft Internet Explorer 5.01 through 7 allows remote attac (no CVSS)
- [CVE-2007-3903](https://cve.now/CVE-2007-3903.md): Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code via uninitialized or deleted objects used in repeated (no CVSS)
- [CVE-2007-5344](https://cve.now/CVE-2007-5344.md): Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via a crafted website using Javascript that cre (no CVSS)
- [CVE-2007-5347](https://cve.now/CVE-2007-5347.md): Microsoft Internet Explorer 5.01 through 7 allows remote attackers to execute arbitrary code via "unexpected method calls to HTML objects," (no CVSS)
- [CVE-2007-5350](https://cve.now/CVE-2007-5350.md): Unspecified vulnerability in the Windows Advanced Local Procedure Call (ALPC) in the kernel in Microsoft Windows Vista allows local users to (no CVSS)
- [CVE-2007-5351](https://cve.now/CVE-2007-5351.md): Unspecified vulnerability in Server Message Block Version 2 (SMBv2) signing support in Microsoft Windows Vista allows remote attackers to fo (no CVSS)
- [CVE-2007-6314](https://cve.now/CVE-2007-6314.md): BarracudaDrive Web Server before 3.8 allows remote attackers to read the source code for web scripts by appending a (1) + (plus), (2) . (no CVSS)
- [CVE-2007-6315](https://cve.now/CVE-2007-6315.md): Group Chat in BarracudaDrive Web Server before 3.8 allows remote authenticated users to cause a denial of service (crash) via a HTTP request (no CVSS)
- [CVE-2007-6316](https://cve.now/CVE-2007-6316.md): Cross-site scripting (XSS) vulnerability in BarracudaDrive Web Server before 3.8 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2007-6317](https://cve.now/CVE-2007-6317.md): Multiple directory traversal vulnerabilities in BarracudaDrive Web Server before 3.8 allow (1) remote attackers to read arbitrary files via (no CVSS)
- [CVE-2007-6318](https://cve.now/CVE-2007-6318.md): SQL injection vulnerability in wp-includes/query.php in WordPress 2.3.1 and earlier allows remote attackers to execute arbitrary SQL command (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-12-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.