rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-2046 
Multiple CRLF injection vulnerabilities in adclick.php in (a) Openads (phpAdsNew) 2.0.11 and earlier and (b) Openads for PostgreSQL (phpPgAds) 2.0.11 and earlier allow remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in (1) the dest parameter and (2) the Referer HTTP header.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-16T22:00:00.000Z
CVE-2007-2047 
CRLF injection vulnerability in www/delivery/ck.php in Openads 2.3 (aka Max Media Manager, MMM) before 0.3.31-alpha-pr3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via CRLF sequences in the destination parameter. NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-16T22:00:00.000Z
CVE-2007-2048 
Directory traversal vulnerability in /console in the Management Console in webMethods Glue 6.5.1 and earlier allows remote attackers to read arbitrary system files via a .. (dot dot) in the resource parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-16T22:00:00.000Z
CVE-2007-2049 
Multiple PHP remote file inclusion vulnerabilities in the Calendar Module (com_calendar) 1.5.5 for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to (1) com_calendar.php or (2) mod_calendar.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-16T22:00:00.000Z
CVE-2007-2050 
Multiple directory traversal vulnerabilities in header.php in RicarGBooK 1.2.1 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) a lang cookie or (2) the language parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-16T22:00:00.000Z
CVE-2007-2051 
Buffer overflow in the parsecmd function in bftpd before 1.8 has unknown impact and attack vectors related to the confstr variable.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-16T22:00:00.000Z
CVE-2007-2052 
Off-by-one error in the PyLocale_strxfrm function in Modules/_localemodule.c for Python 2.4 and 2.5 causes an incorrect buffer size to be used for the strxfrm function, which allows context-dependent attackers to read portions of memory via unknown manipulations that trigger a buffer over-read due to missing null termination.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-16T22:00:00.000Z
CVE-2007-2053 
Multiple stack-based buffer overflows in AFFLIB before 2.2.6 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via (1) a long LastModified value in an S3 XML response in lib/s3.cpp; (2) a long (a) path or (b) bucket in an S3 URL in lib/vnode_s3.cpp; or (3) a long (c) EFW, (d) AFD, or (c) aimage file path.  NOTE: the aimage vector (3c) has since been recalled from the researcher's original advisory, since the code is not called in any version of AFFLIB.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-30T22:00:00.000Z
CVE-2007-2054 
Multiple format string vulnerabilities in AFFLIB before 2.2.6 allow remote attackers to execute arbitrary code via certain command line parameters, which are used in (1) warn and (2) err calls in (a) lib/s3.cpp, (b) tools/afconvert.cpp, (c) tools/afcopy.cpp, (d) tools/afinfo.cpp, (e) aimage/aimage.cpp, (f) aimage/imager.cpp, and (g) tools/afxml.cpp.  NOTE: the aimage.cpp vector (e) has since been recalled from the researcher's original advisory, since the code is not called in any version of AFFLIB.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-30T22:00:00.000Z
CVE-2007-2055 
AFFLIB 2.2.8 and earlier allows attackers to execute arbitrary commands via shell metacharacters involving (1) certain command line parameters in tools/afconvert.cpp and (2) arguments to the get_parameter function in aimage/ident.cpp.  NOTE: it is unknown if the get_parameter vector (2) is ever called.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-30T22:00:00.000Z
CVE-2007-2057 
Stack-based buffer overflow in aircrack-ng airodump-ng 0.7 allows remote attackers to execute arbitrary code via crafted 802.11 authentication packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2058 
Directory traversal vulnerability in Acubix PicoZip 4.02 allows user-assisted remote attackers to overwrite arbitrary files via a .. (dot dot) sequence in the file path in an (1) GZ, (2) TAR, (3) RAR, (4) JAR, or (5) ZIP archive.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2059 
Multiple buffer overflows in the ESA protocol implementation in eIQnetworks Enterprise Security Analyzer (ESA) 2.5 allow remote attackers to execute arbitrary code via a long parameter to the (1) DELETESEARCHFOLDER, (2) DELTASK, (3) HMGR_CHECKHOSTSCSV, (4) TASKUPDATEDUSER, (5) VERIFYUSERKEY, or (6) VERIFYPWD command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2060 
Cross-zone scripting vulnerability in the Wizz RSS Reader before 2.1.9 extension to Mozilla Firefox allows remote attackers to execute arbitrary Javascript in the browser chrome via the RSS feed DOM.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2061 
Cross-site scripting (XSS) vulnerability in check_login.asp in AfterLogic MailBee WebMail Pro 3.4 allows remote attackers to inject arbitrary web script or HTML via the username parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2062 
Stack-based buffer overflow in VCDGear 3.55 and 3.56 BETA allows user-assisted remote attackers to execute arbitrary code via a long FILE argument in a CUE file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2063 
SSH Tectia Server for IBM z/OS before 5.4.0 uses insecure world-writable permissions for (1) the server pid file, which allows local users to cause arbitrary processes to be stopped, or (2) when _BPX_BATCH_UMASK is missing from the environment, creates HFS files with insecure permissions, which allows local users to read or modify these files and have other unknown impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2064 
Multiple PHP remote file inclusion vulnerabilities in Robert Ladstaetter ActionPoll 1.1.0, and possibly 1.1.1, allow remote attackers to execute arbitrary PHP code via a URL in (1) the CONFIG_POLLDB parameter to actionpoll.php or (2) the CONFIG_DB parameter to db/DataReaderWriter.php, different vectors than CVE-2001-1297.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2065 
PHP remote file inclusion vulnerability in db/PollDB.php in Robert Ladstaetter ActionPoll 1.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the CONFIG_DATAREADERWRITER parameter, a different vector than CVE-2001-1297.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2066 
UseBB before 1.0.6 allows remote attackers to obtain sensitive information via a request with unspecified GET or POST parameters to an unspecified script, which reveals the path in an error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2067 
Multiple PHP remote file inclusion vulnerabilities in Marco Antonio Islas Cruz Web Slider (WebSlider) 0.6 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) index.php, (2) modules/pdf.php, (3) plugins/highlight.php, or (4) include/modules.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2068 
Multiple PHP remote file inclusion vulnerabilities in the StoreFront mods for Gallery allow remote attackers to execute arbitrary PHP code via a URL in the GALLERY_BASEDIR parameter to (1) mods/business_functions.php or (2) mods/ui_functions.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2069 
Directory traversal vulnerability in scr/soustab.php in openMairie 1.11 and earlier allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the dsn[phptype] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2070 
Multiple PHP remote file inclusion vulnerabilities in Turnkey Web Tools SunShop Shopping Cart before 3.5.1 allow remote attackers to execute arbitrary PHP code via a URL in the abs_path parameter to (1) index.php or (2) checkout.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2071 
Multiple cross-site scripting (XSS) vulnerabilities in Open-gorotto 2.0a 2006/02/08 edition, 2006/03/19 edition, and 2006/04/07 edition before 20070416 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters to (1) pub/modules/d/_top.html; (2) /pub/modules/a/_access.html; (3) _circletop.html or (4) _cir66.html in pub/modules/ci/; or (5) _fri66.html, (6) _inv66.html, (7) _top.html, (8) _friends.html, or (9) _fri33.html in pub/modules/f/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2072 
PHP remote file inclusion vulnerability in index.php in Ivan Gallery Script 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter.  NOTE: this issue has been disputed by third party researchers for 0.3, stating that the dir variable is properly initialized before use
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2073 
PHP remote file inclusion vulnerability in index.php in Ivan Gallery Script 0.3 allows remote attackers to execute arbitrary PHP code via a URL in the gallery parameter in a new session.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2074 
Certain programs in containers in ScramDisk 4 Linux before 1.0-1 execute with SUID permissions, which allows local users to gain privileges via mounted containers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2075 
ScramDisk 4 Linux before 1.0-1 does not perform permission checks on mount points, which allows local users to gain privileges by using a system directory as a mount point for a container.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2076 
PHP remote file inclusion vulnerability in index.php in Maian Gallery 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter.  NOTE: this issue was disputed by a third party researcher, but confirmed by the vendor, stating "this problem existed only briefly in v1.0."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2077 
PHP remote file inclusion vulnerability in search.php in Maian Search 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter.  NOTE: this issue was disputed by a third party researcher, but confirmed by the vendor, stating "this issue was fixed last year and [no] is longer a problem."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2078 
PHP remote file inclusion vulnerability in index.php in Maian Weblog 3.1 allows remote attackers to execute arbitrary PHP code via a URL in the path_to_folder parameter.  NOTE: this issue was disputed by a third party researcher, since the path_to_folder variable is initialized before use
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2079 
The ADONewConnection Connect function in adodb.php in XAMPP 1.6.0a and earlier for Windows uses untrusted input for the database server hostname, which allows remote attackers to trigger a library buffer overflow and execute arbitrary code via a long host parameter, or have other unspecified impact.  NOTE: it could be argued that this is an issue in mssql_connect (CVE-2007-1411.1) in PHP, or an issue in the ADOdb Library, and the proper fix should be in one of these products; if so, then this should not be treated as a vulnerability in XAMPP.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2080 
Multiple SQL injection vulnerabilities in XAMPP 1.6.0a for Windows allow remote attackers to execute arbitrary SQL commands via unspecified vectors in certain test scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2081 
MyBlog 0.9.8 and earlier allows remote attackers to bypass authentication requirements via the admin cookie parameter to certain admin files, as demonstrated by admin/settings.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2082 
Direct static code injection vulnerability in admin/settings.php in MyBlog 0.9.8 and earlier allows remote authenticated admin users to inject arbitrary PHP code via the content parameter, which can be executed by accessing index.php.  NOTE: a separate vulnerability could be leveraged to make this issue exploitable by remote unauthenticated attackers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2083 
vsdatant.sys in Check Point Zone Labs ZoneAlarm Pro before 7.0.302.000 does not validate certain arguments before being passed to hooked SSDT function handlers, which allows local users to cause a denial of service (system crash) or possibly execute arbitrary code via crafted arguments to the (1) NtCreateKey and (2) NtDeleteFile functions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T02:20:00.000Z
CVE-2007-2084 
PHP remote file inclusion vulnerability in MobilePublisherphp 1.1.2 allows remote attackers to execute arbitrary PHP code via a URL in the auth_method parameter to (1) index.php, (2) list.php, (3) postreview.php, (4) reindex.php, (5) sections.php, (6) templates.php, (7) userinfo.php, (8) users.php, and (9) view.php in admin/.  NOTE: this issue has been disputed by a reliable third party, who states that $auth_method is defined before use
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2085 
Cross-site scripting (XSS) vulnerability in oe2edit.cgi in oe2edit CMS allows remote attackers to inject arbitrary web script or HTML via the q parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2086 
Multiple PHP remote file inclusion vulnerabilities in CNStats 2.9 allow remote attackers to execute arbitrary PHP code via a URL in the bj parameter to (1) who_r.php or (2) who_s.php in reports/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2087 
Multiple PHP remote file inclusion vulnerabilities in CNStats 2.12, when register_globals is enabled and .htaccess is not recognized, allow remote attackers to execute arbitrary PHP code via a URL in the bn parameter to (1) who_r.php or (2) who_s.php in reports/.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2088 
Multiple PHP remote file inclusion vulnerabilities in Sitebar 3.3.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) writerFile parameter to index.php and the (2) file parameter to Integrator.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2089 
Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to com_articles.php in (1) components/ or (2) classes/html/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2090 
Cross-site scripting (XSS) vulnerability in index.php in TuMusika Evolution 1.6 allows remote attackers to inject arbitrary web script or HTML via the msg parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2091 
PHP remote file inclusion vulnerability in blocks/tsdisplay4xoops_block2.php in tsdisplay4xoops (TSD4XOOPS, aka the TeamSpeak display module) 0.1 allows remote attackers to execute arbitrary PHP code via a URL in the xoops_url parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2092 
Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) allows remote attackers to inject arbitrary PHP code into posts.txt via the name parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2093 
Direct static code injection vulnerability in index.php in Limesoft Guestbook (LS Simple Guestbook) 1.0 allows remote attackers to inject arbitrary PHP code into posts.txt via the message parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2094 
PHP remote file inclusion vulnerability in index.php in Anthologia 0.5.2 allows remote attackers to execute arbitrary PHP code via a URL in the ads_file parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2095 
PHP remote file inclusion vulnerability in chat.php in MySpeach 1.9 allows remote attackers to execute arbitrary PHP code via a URL in the my[root] parameter, a different vector than CVE-2007-0498.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2096 
PHP remote file inclusion vulnerability in common.php in Hinton Design PHPHD Download System (phphd_downloads) allows remote attackers to execute arbitrary PHP code via a URL in the phphd_real_path parameter. NOTE: this issue may be present in versions from 2006.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2097 
Multiple PHP remote file inclusion vulnerabilities in OpenConcept Back-End CMS 0.4.7 allow remote attackers to execute arbitrary PHP code via a URL in the includes_path parameter to (1) click.php or (2) pollcollector.php in htdocs/; or (3) index.php, (4) articlepages.php, (5) articles.php, (6) articleform.php, (7) articlesections.php, (8) createArticlesPage.php, (9) guestbook.php, (10) helpguide.php, (11) helpguideeditor.php, (12) links.php, (13) upload.php, (14) sitestatistics.php, (15) nav.php, (16) tpl_upload.php, (17) linksections, or (18) pophelp.php in htdocs/site-admin/; different vectors than CVE-2006-5076.  NOTE: this issue is disputed by a third party, who states that $includes_path is defined before use
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2098 
Multiple cross-site scripting (XSS) vulnerabilities in showpic.php in Wabbit PHP Gallery 0.9 allow remote attackers to inject arbitrary web script or HTML via the (1) pic and (2) gal parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2099 
Cross-site scripting (XSS) vulnerability in htdocs/php.php in OpenConcept Back-End CMS 0.4.7 allows remote attackers to inject arbitrary web script or HTML via the page[] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2100 
FAC Guestbook 2.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/Gdb.mdb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2101 
FAC Guestbook 3.01 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for db/gbdb.mdb.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2102 
Cross-site scripting (XSS) vulnerability in weblog.php in my little weblog allows remote attackers to inject arbitrary web script or HTML via the id parameter, a different vector than CVE-2006-6087.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2103 
Multiple PHP remote file inclusion vulnerabilities in my little forum 1.7 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to (1) admin.php and (2) timedifference.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2104 
Multiple directory traversal vulnerabilities in iXon CMS 0.30 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the theme_url parameter to (1) index.php, (2) page.php, (3) search.php, (4) single.php, and (5) archives.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2105 
Directory traversal vulnerability in admin/index.php in Monkey CMS 0.0.3 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the admin_skin parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z
CVE-2007-2106 
Directory traversal vulnerability in index.php in Kai Content Management System (K-CMS) 1.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the current_theme parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-18T10:00:00.000Z