Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: September 2007

54 records · 1 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2007-3997
    34Monitor

    The (1) MySQL and (2) MySQLi extensions in PHP 4 before 4.4.8, and PHP 5 before 5.2.4, allow remote attackers to bypass safe_mode and open_b

    HighCVSS 7.5Proof of conceptEPSS 13%

    php · phpSep 4, 2007

  • CVE-2007-4476
    34Monitor

    Buffer overflow in the safer_name_suffix function in GNU tar has unspecified attack vectors and impact, resulting in a "crashing stack."

    HighCVSS 7.5Proof of conceptEPSS 14%

    gnu · tarSep 4, 2007

  • CVE-2007-3999
    43Plan

    Stack-based buffer overflow in the svcauth_gss_validate function in lib/rpc/svc_auth_gss.c in the RPCSEC_GSS RPC library (librpcsecgss) in M

    CriticalCVSS 10.0No exploitEPSS 10%

    mit · kerberos 5Sep 5, 2007

  • CVE-2007-4712
    47Plan

    PHP remote file inclusion vulnerability in index.php in eNetman 1 allows remote attackers to execute arbitrary PHP code via a URL in the pag

    HighCVSS 7.5Proof of conceptEPSS 57%

    enetman · enetmanSep 5, 2007

  • CVE-2007-4722
    30Monitor

    Multiple stack-based buffer overflows in the Quantum Streaming Internet Explorer Player ActiveX control in qsp2ie07051001.dll 1.0.0.1 in Mov

    MediumCVSS 6.8Proof of conceptEPSS 10%

    move networks inc · move media playerSep 5, 2007

  • CVE-2007-4738
    33Monitor

    Multiple PHP remote file inclusion vulnerabilities in SpeedTech PHP Library (STPHPLibrary) 0.8.0 allow remote attackers to execute arbitrary

    HighCVSS 7.5Proof of conceptEPSS 10%

    speedtech · stphplibrarySep 6, 2007

  • CVE-2007-4744
    45Plan

    PHP remote file inclusion vulnerability in environment.php in AnyInventory 1.9.1 and 2.0, when register_globals is enabled, allows remote at

    MediumCVSS 6.8Proof of conceptEPSS 60%

    anyinventory · anyinventorySep 6, 2007

  • CVE-2007-4757
    49Plan

    PHP remote file inclusion vulnerability in menu.php in phpMytourney allows remote attackers to execute arbitrary PHP code via a URL in the f

    HighCVSS 7.5Proof of conceptEPSS 64%

    phpmytourney · phpmytourneySep 8, 2007

  • CVE-2007-4776
    52Plan

    Buffer overflow in Microsoft Visual Basic 6.0 and Enterprise Edition 6.0 SP6 allows user-assisted remote attackers to execute arbitrary code

    CriticalCVSS 9.3WeaponizedEPSS 48%

    microsoft · visual basicSep 10, 2007

  • CVE-2007-4790
    46Plan

    Stack-based buffer overflow in certain ActiveX controls in (1) FPOLE.OCX 6.0.8450.0 and (2) Foxtlib.ocx, as used in the Microsoft Visual Fox

    HighCVSS 7.5Proof of conceptEPSS 54%

    microsoft · internet explorerSep 10, 2007

  • CVE-2007-4809
    47Plan

    Multiple PHP remote file inclusion vulnerabilities in Online Fantasy Football League (OFFL) 0.2.6 allow remote attackers to execute arbitrar

    HighCVSS 7.5Proof of conceptEPSS 56%

    online fantasy football league · offlSep 11, 2007

  • CVE-2007-4814
    44Plan

    Buffer overflow in the SQLServer ActiveX control in the Distributed Management Objects OLE DLL (sqldmo.dll) 2000.085.2004.00 in Microsoft SQ

    HighCVSS 7.5Proof of conceptEPSS 45%

    microsoft · sql serverSep 11, 2007

  • CVE-2007-4815
    39Monitor

    Multiple PHP remote file inclusion vulnerabilities in WebED in Markus Iser ED Engine 0.8999 alpha allow remote attackers to execute arbitrar

    MediumCVSS 6.8Proof of conceptEPSS 39%

    markus iser · ed engineSep 11, 2007

  • CVE-2007-4818
    47Plan

    Multiple PHP remote file inclusion vulnerabilities in Txx CMS 0.2 allow remote attackers to execute arbitrary PHP code via a URL in the doc_

    HighCVSS 7.5Proof of conceptEPSS 55%

    txx cms · txx cmsSep 11, 2007

  • CVE-2007-3040
    53Plan

    Stack-based buffer overflow in agentdpv.dll 2.0.0.3425 in Microsoft Agent on Windows 2000 SP4 allows remote attackers to execute arbitrary c

    CriticalCVSS 9.3Proof of conceptEPSS 54%

    microsoft · windows 2000Sep 11, 2007

  • CVE-2007-4727
    31Monitor

    Buffer overflow in the fcgi_env_add function in mod_proxy_backend_fastcgi.c in the mod_fastcgi extension in lighttpd before 1.4.18 allows re

    MediumCVSS 6.8No exploitEPSS 12%

    lighttpd · lighttpdSep 12, 2007

  • CVE-2007-4834
    48Plan

    Multiple PHP remote file inclusion vulnerabilities in phpRealty 0.02 allow remote attackers to execute arbitrary PHP code via a URL in the M

    HighCVSS 7.5Proof of conceptEPSS 58%

    phprealty · phprealtySep 12, 2007

  • CVE-2007-4465
    32Monitor

    Cross-site scripting (XSS) vulnerability in mod_autoindex.c in the Apache HTTP Server before 2.2.6, when the charset on a server-generated p

    MediumCVSS 6.1No exploitEPSS 26%

    apache · http serverSep 13, 2007

  • CVE-2007-4890
    28Monitor

    Absolute directory traversal vulnerability in a certain ActiveX control in the VB To VSI Support Library (VBTOVSI.DLL) 1.0.0.0 in Microsoft

    MediumCVSS 5.8Proof of conceptEPSS 16%

    microsoft · visual studioSep 13, 2007

  • CVE-2007-4891
    36Monitor

    A certain ActiveX control in PDWizard.ocx 6.0.0.9782 and earlier in Microsoft Visual Studio 6.0 exposes dangerous (1) StartProcess, (2) Sync

    MediumCVSS 6.8Proof of conceptEPSS 31%

    microsoft · visual studioSep 13, 2007

  • CVE-2007-4897
    23Monitor

    pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service (application crash) via a lo

    MediumCVSS 5.0Proof of conceptEPSS 10%

    ekiga · ekigaSep 14, 2007

  • CVE-2007-4906
    39Monitor

    PHP remote file inclusion vulnerability in tasks/send_queued_emails.php in NuclearBB Alpha 2, when register_globals is enabled, allows remot

    MediumCVSS 6.8Proof of conceptEPSS 38%

    nuclearbb · nuclearbbSep 17, 2007

  • CVE-2007-4915
    60This week

    The Intersil isl3893 extensions for Boa 0.93.15, as used on the FreeLan RO80211G-AP and other devices, do not prevent stack writes from ente

    CriticalCVSS 10.0WeaponizedEPSS 68%

    boa · boa webserverSep 17, 2007

  • CVE-2007-4916
    46Plan

    Heap-based buffer overflow in the FileFind::FindFile method in (1) MFC42.dll, (2) MFC42u.dll, (3) MFC71.dll, and (4) MFC71u.dll in Microsoft

    CriticalCVSS 10.0Proof of conceptEPSS 19%

    hp · photo and imaging gallerySep 17, 2007

  • CVE-2007-4921
    46Plan

    PHP remote file inclusion vulnerability in _includes/settings.inc.php in Ajax File Browser 3 Beta allows remote attackers to execute arbitra

    HighCVSS 7.5Proof of conceptEPSS 52%

    ajax · file browserSep 17, 2007

  • CVE-2007-4923
    39Monitor

    PHP remote file inclusion vulnerability in admin.joomlaradiov5.php in the Joomla Radio 5 (com_joomlaradiov5) component for Joomla! allows re

    MediumCVSS 6.8Proof of conceptEPSS 41%

    joomla · joomla radioSep 17, 2007

  • CVE-2007-4934
    25Monitor

    Multiple PHP remote file inclusion vulnerabilities in phpFFL 1.24 allow remote attackers to execute arbitrary PHP code via a URL in the PHPF

    MediumCVSS 4.6Proof of conceptEPSS 21%

    phpffl · phpfflSep 18, 2007

  • CVE-2007-4938
    35Monitor

    Heap-based buffer overflow in libmpdemux/aviheader.c in MPlayer 1.0rc1 and earlier allows remote attackers to cause a denial of service (app

    HighCVSS 7.6Proof of conceptEPSS 16%

    ibm · aixSep 18, 2007

  • CVE-2007-4939
    41Plan

    Heap-based buffer overflow in mplayerc.exe in Media Player Classic (MPC) 6.4.9.0 and earlier, as used standalone and in mympc (aka CD-Storm)

    CriticalCVSS 9.3Proof of conceptEPSS 11%

    mympc · cd-stormSep 18, 2007

  • CVE-2007-4954
    36Monitor

    PHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (com_joom12pic) 1.0 component for Joomla! allows remote atta

    MediumCVSS 6.8Proof of conceptEPSS 28%

    joomla · joom12pic componentSep 18, 2007

  • CVE-2007-4955
    36Monitor

    PHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun! (com_joomlaflashfun) 1.0 component for Joomla! allows

    MediumCVSS 6.8Proof of conceptEPSS 29%

    joomla · flash fun componentSep 18, 2007

  • CVE-2007-2834
    41Plan

    Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remo

    CriticalCVSS 9.3No exploitEPSS 11%

    sun · starofficeSep 18, 2007

  • CVE-2007-3010
    98Now

    masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server R7.1 and earlier allows remote attackers to exe

    CriticalCVSS 9.8KEVWeaponizedEPSS 97%

    al-enterprise · omnipcx enterprise communication serverSep 18, 2007

  • CVE-2007-4965
    27Monitor

    Multiple integer overflows in the imageop module in Python 2.5.1 and earlier allow context-dependent attackers to cause a denial of service

    MediumCVSS 5.8Proof of conceptEPSS 13%

    python · pythonSep 18, 2007

  • CVE-2007-4982
    43Plan

    Multiple absolute path traversal vulnerabilities in the MW6QRCode.QRCode.1 ActiveX control in MW6QRCode.dll in MW6 Technologies QRCode Activ

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    mw6 technologies · qrcode activexSep 19, 2007

  • CVE-2007-4983
    54Plan

    Directory traversal vulnerability in the JetAudio.Interface.1 ActiveX control in JetFlExt.dll in jetAudio 7.0.3 Basic and 7.0.3.3016 allows

    CriticalCVSS 10.0Proof of conceptEPSS 47%

    cowon america · jetaudioSep 19, 2007

  • CVE-2007-5009
    41Plan

    PHP remote file inclusion vulnerability in language/lang_german/lang_main_album.php in phpBB Plus 1.53, and 1.53a before 20070922, allows re

    MediumCVSS 6.8Proof of conceptEPSS 45%

    phpbb2 · phpbb2 plusSep 20, 2007

  • CVE-2007-5015
    39Monitor

    Multiple PHP remote file inclusion vulnerabilities in Streamline PHP Media Server 1.0-beta4 allow remote attackers to execute arbitrary PHP

    MediumCVSS 6.8Proof of conceptEPSS 38%

    streamline · streamlineSep 20, 2007

  • CVE-2007-5019
    43Plan

    Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attackers to have an unkno

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    sun · java web startSep 20, 2007

  • CVE-2007-5020
    43Plan

    Unspecified vulnerability in Adobe Acrobat and Reader 8.1 on Windows allows remote attackers to execute arbitrary code via a crafted PDF fil

    CriticalCVSS 9.3No exploitEPSS 20%

    adobe · acrobatSep 21, 2007

  • CVE-2007-0063
    46Plan

    Integer underflow in the DHCP server in EMC VMware Workstation before 5.5.5 Build 56455 and 6.x before 6.0.1 Build 55017, Player before 1.0.

    CriticalCVSS 10.0No exploitEPSS 20%

    vmware · aceSep 21, 2007

  • CVE-2007-4991
    25Monitor

    The SOCKS4 Proxy in Microsoft Internet Security and Acceleration (ISA) Server 2004 SP1 and SP2 allows remote attackers to obtain potentially

    MediumCVSS 5.0No exploitEPSS 16%

    microsoft · isa serverSep 21, 2007

  • CVE-2007-5054
    43Plan

    Multiple PHP remote file inclusion vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via

    HighCVSS 7.5Proof of conceptEPSS 42%

    izicontents · izicontentsSep 24, 2007

  • CVE-2007-5056
    35Monitor

    Eval injection vulnerability in adodb-perf-module.inc.php in ADOdb Lite 1.42 and earlier, as used in products including CMS Made Simple, SAP

    MediumCVSS 6.8Proof of conceptEPSS 27%

    adodb lite · adodb liteSep 24, 2007

  • CVE-2007-5065
    43Plan

    PHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show (com_slideshow) component for Joomla! allows remote

    HighCVSS 7.5Proof of conceptEPSS 42%

    joomla · joomlaSep 24, 2007

  • CVE-2007-5067
    52Plan

    Multiple buffer overflows in iMatix Xitami Web Server 2.5c2 allow remote attackers to execute arbitrary code via a long If-Modified-Since he

    HighCVSS 7.5WeaponizedEPSS 73%

    imatix · xitamiSep 24, 2007

  • CVE-2007-5095
    35Monitor

    Microsoft Windows Media Player (WMP) 9 on Windows XP SP2 invokes Internet Explorer to render HTML documents contained inside some media file

    HighCVSS 7.5No exploitEPSS 15%

    microsoft · windows xpSep 26, 2007

  • CVE-2007-5098
    41Plan

    Multiple PHP remote file inclusion vulnerabilities in DFD Cart 1.1.4 and earlier, when register_globals is enabled, allow remote attackers t

    MediumCVSS 6.8Proof of conceptEPSS 45%

    dragonfrugal · dfd cartSep 26, 2007

  • CVE-2007-5099
    46Plan

    PHP remote file inclusion vulnerability in show.php in David Watters Helplink 0.1.0 allows remote attackers to execute arbitrary PHP code vi

    HighCVSS 7.5Proof of conceptEPSS 52%

    david watters · helplinkSep 26, 2007

  • CVE-2007-5102
    39Monitor

    PHP remote file inclusion vulnerability in config.inc.php in Wordsmith 1.0 RC1, when register_globals is enabled, allows remote attackers to

    MediumCVSS 6.8Proof of conceptEPSS 38%

    wordsmith · wordsmithSep 26, 2007

  • CVE-2007-5107
    48Plan

    Stack-based buffer overflow in the AskJeevesToolBar.SettingsPlugin.1 ActiveX control in askBar.dll in IAC Search & Media ask.com Ask Toolbar

    CriticalCVSS 9.3WeaponizedEPSS 35%

    ask.com · ask toolbarSep 26, 2007

  • CVE-2007-5133
    35Monitor

    Microsoft Windows Explorer (explorer.exe) allows user-assisted remote attackers to cause a denial of service (CPU consumption) via a certain

    HighCVSS 7.1Proof of conceptEPSS 22%

    microsoft · windows 2003 serverSep 27, 2007

  • CVE-2007-5135
    32Monitor

    Off-by-one error in the SSL_get_shared_ciphers function in OpenSSL 0.9.7 up to 0.9.7l, and 0.9.8 up to 0.9.8f, might allow remote attackers

    MediumCVSS 6.8No exploitEPSS 16%

    openssl · opensslSep 27, 2007

  • CVE-2007-4880
    63This week

    Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2

    CriticalCVSS 10.0WeaponizedEPSS 75%

    ibm · tivoli storage manager clientSep 27, 2007