# CVEs published 2008-01-03

11 CVEs were published on January 3, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6614](https://cve.now/CVE-2007-6614.md): PHP remote file inclusion vulnerability in admin/frontpage\_right.php in Agares Media phpAutoVideo 2.21 allows remote attackers to execute ar (no CVSS)
- [CVE-2007-6615](https://cve.now/CVE-2007-6615.md): Directory traversal vulnerability in includes/block.php in Agares Media phpAutoVideo 2.21 allows remote attackers to include and execute arb (no CVSS)
- [CVE-2007-6616](https://cve.now/CVE-2007-6616.md): Cross-site scripting (XSS) vulnerability in simpleforum.cgi in SimpleForum 4.6.2 and earlier allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2007-6617](https://cve.now/CVE-2007-6617.md): Cross-site scripting (XSS) vulnerability in 500page.jsp in JIRA Enterprise Edition before 3.12.1 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2007-6618](https://cve.now/CVE-2007-6618.md): JIRA Enterprise Edition before 3.12.1 allows remote attackers to delete another user's shared filter via a modified filter ID. (no CVSS)
- [CVE-2007-6619](https://cve.now/CVE-2007-6619.md): The Setup Wizard in Atlassian JIRA Enterprise Edition before 3.12.1 does not properly restrict setup attempts after setup is complete, which (no CVSS)
- [CVE-2007-6611](https://cve.now/CVE-2007-6611.md): Cross-site scripting (XSS) vulnerability in view.php in Mantis before 1.1.0 allows remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2007-6612](https://cve.now/CVE-2007-6612.md): Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to (no CVSS, mongrel)
- [CVE-2007-6613](https://cve.now/CVE-2007-6613.md): Stack-based buffer overflow in the print\_iso9660\_recurse function in iso-info (src/iso-info.c) in GNU Compact Disc Input and Control Library (no CVSS)
- [CVE-2008-0061](https://cve.now/CVE-2008-0061.md): MaraDNS 1.0 before 1.0.41, 1.2 before 1.2.12.08, and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of service via a crafted (no CVSS)
- [CVE-2007-6610](https://cve.now/CVE-2007-6610.md): unp 1.0.12, and other versions before 1.0.14, does not properly escape file names, which might allow context-dependent attackers to execute (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-01-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.