# CVEs published 2007-12-27

18 CVEs were published on December 27, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6533](https://cve.now/CVE-2007-6533.md): Buffer overflow in Zoom Player 6.00 beta 2 and earlier allows user-assisted remote attackers to execute arbitrary code via an HTTP link to a (no CVSS)
- [CVE-2007-6534](https://cve.now/CVE-2007-6534.md): Multiple unspecified vulnerabilities in Microsoft Office Publisher allow user-assisted remote attackers to cause a denial of service (applic (no CVSS)
- [CVE-2007-6535](https://cve.now/CVE-2007-6535.md): Buffer overflow in the YShortcut ActiveX control in YShortcut.dll 2006.8.15.1 in Yahoo! Toolbar might allow attackers to execute arbitrary c (no CVSS)
- [CVE-2007-6536](https://cve.now/CVE-2007-6536.md): The Custom Button Installer dialog in Google Toolbar 4 and 5 beta presents certain domain names in the (1) "Downloaded from" and (2) "Privac (no CVSS)
- [CVE-2007-6537](https://cve.now/CVE-2007-6537.md): Stack-based buffer overflow in the zfile\_gunzip function in zfile.c in WinUAE 1.4.4 and earlier allows user-assisted remote attackers to exe (no CVSS)
- [CVE-2007-6538](https://cve.now/CVE-2007-6538.md): SQL injection vulnerability in ing/blocks/mrbs/code/web/view\_entry.php in the MRBS plugin for Moodle allows remote attackers to execute arbi (no CVSS)
- [CVE-2007-6539](https://cve.now/CVE-2007-6539.md): PHP local file inclusion vulnerability in index.php in IDevspot iSupport 1.8 allows remote attackers to include local files via the include\_ (no CVSS)
- [CVE-2007-6540](https://cve.now/CVE-2007-6540.md): SQL injection vulnerability in neuron news 1.0 allows remote attackers to execute arbitrary SQL commands via the q parameter to the default (no CVSS)
- [CVE-2007-6541](https://cve.now/CVE-2007-6541.md): Multiple cross-site scripting (XSS) vulnerabilities in neuron news 1.0 allow remote attackers to inject arbitrary web script or HTML via (1) (no CVSS)
- [CVE-2007-6542](https://cve.now/CVE-2007-6542.md): PHP remote file inclusion vulnerability in admin/frontpage\_right.php in Arcadem LE 2.04 and earlier allows remote attackers to execute arbit (no CVSS)
- [CVE-2007-4474](https://cve.now/CVE-2007-4474.md): Multiple stack-based buffer overflows in the IBM Lotus Domino Web Access ActiveX control, as provided by inotes6.dll, inotes6w.dll, dwa7.dll (no CVSS)
- [CVE-2007-5342](https://cve.now/CVE-2007-5342.md): The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict c (no CVSS, org.apache.tomcat:tomcat-juli)
- [CVE-2007-6525](https://cve.now/CVE-2007-6525.md): Unspecified vulnerability in eClient in IBM DB2 Content Manager (CM) Toolkit 8.3 before fix pack 7 for z/OS has unknown impact and attack ve (no CVSS)
- [CVE-2007-6526](https://cve.now/CVE-2007-6526.md): Cross-site scripting (XSS) vulnerability in tiki-special\_chars.php in TikiWiki before 1.9.9 allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2007-6527](https://cve.now/CVE-2007-6527.md): uploadimg.php in the Automatic Image Upload with Thumbnails (imgUpload) module 1.3.2 for PunBB only verifies the Content-type field of uploa (no CVSS)
- [CVE-2007-6528](https://cve.now/CVE-2007-6528.md): Directory traversal vulnerability in tiki-listmovies.php in TikiWiki before 1.9.9 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2007-6529](https://cve.now/CVE-2007-6529.md): Multiple unspecified vulnerabilities in TikiWiki before 1.9.9 have unknown impact and attack vectors involving (1) tiki-edit\_css.php, (2) ti (no CVSS)
- [CVE-2007-6530](https://cve.now/CVE-2007-6530.md): Buffer overflow in the XUpload.ocx ActiveX control in Persits Software XUpload 2.1.0.1, and probably other versions before 3.0, as used by H (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-12-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.