rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-1918 
The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109 implements an option for exclusive access to an RFC server, which allows remote attackers to cause a denial of service (client lockout) via unspecified vectors.  NOTE: This information is based upon a vague initial disclosure. Details will be updated after the grace period has ended.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1919 
Cross-site scripting (XSS) vulnerability in index.php in Arizona Dream Livre d'or (livor) 2.5 allows remote attackers to inject arbitrary web script or HTML via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1920 
SQL injection vulnerability in index.php in the aktualnosci module in SmodBIP 1.06 and earlier allows remote attackers to execute arbitrary SQL commands via the zoom parameter, possibly related to home.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1921 
LIBSNDFILE.DLL, as used by AOL Nullsoft Winamp 5.33 and possibly other products, allows remote attackers to execute arbitrary code via a crafted .MAT file that contains a value that is used as an offset, which triggers memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1922 
The Impulse Tracker (IT) and ScreamTracker 3 (S3M) modules in IN_MOD.DLL in AOL Nullsoft Winamp 5.33 allows remote attackers to execute arbitrary code via a crafted (1) .IT or (2) .S3M file containing integer values that are used as memory offsets, which triggers memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1923 
(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remote attackers to access restricted functionality via direct requests. The LedgerSMB affected versions are before 1.3.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T00:00:00.000Z
CVE-2007-1924 
Multiple PHP remote file inclusion vulnerabilities in phpContact allow remote attackers to execute arbitrary PHP code via a URL in the include_path parameter to (1) contact_business.php or (2) contact_person.php.  NOTE: this issue is disputed by CVE and a reliable third party, because include_path is initialized to a fixed value before use
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1925 
The borrado function in modules/Your_Account/index.php in Tru-Zone Nuke ET 3.4 before fix 7 does not verify that account deletion requests come from the account owner, which allows remote authenticated users to delete arbitrary accounts via a modified cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1926 
Cross-site scripting (XSS) vulnerability in JBMC Software DirectAdmin before 1.293 does not properly display log files, which allows remote authenticated users to inject arbitrary web script or HTML via (1) http or (2) ftp requests logged in /var/log/directadmin/security.log; (3) allows context-dependent attackers to inject arbitrary web script or HTML into /var/log/messages via a PHP script that invokes /usr/bin/logger; (4) allows local users to inject arbitrary web script or HTML into /var/log/messages by invoking /usr/bin/logger at the command line; and allows remote attackers to inject arbitrary web script or HTML via remote requests logged in the (5) /var/log/exim/rejectlog, (6) /var/log/exim/mainlog, (7) /var/log/proftpd/auth.log, (8) /var/log/httpd/error_log, (9) /var/log/httpd/access_log, (10) /var/log/directadmin/error.log, and (11) /var/log/directadmin/security.log files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1927 
Cross-site scripting (XSS) vulnerability in signup.asp in CmailServer WebMail 5.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the POP3Mail parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1928 
Directory traversal vulnerability in index.php in witshare 0.9 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the menu parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1929 
Directory traversal vulnerability in downloadpic.php in Beryo 2.0, and possibly other versions including 2.4, allows remote attackers to read arbitrary files via a .. (dot dot) in the chemin parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1930 
Directory traversal vulnerability in download2.php in cattaDoc 2.21, and possibly other versions including 3.0, allows remote attackers to read arbitrary files via a .. (dot dot) in the fn1 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1931 
SQL injection vulnerability in index.php in the slownik module in SmodCMS 2.10 and earlier allows remote attackers to execute arbitrary SQL commands via the ssid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1932 
Directory traversal vulnerability in scarnews.inc.php in ScarNews 1.2.1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the sn_admin_dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1933 
Multiple directory traversal vulnerabilities in PcP-Guestbook (PcP-Book) 3.0 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter to (1) index.php, (2) gb.php, or (3) faq.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1934 
Directory traversal vulnerability in member.php in the eBoard 1.0.7 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[name] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1935 
PHP file inclusion vulnerability in admin/index.php in ScarAdControl (ScarAdController) 1.1 allows remote attackers to execute arbitrary PHP code via a UNC share pathname or a local file pathname in the site parameter, which is accessed by the file_exists function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1936 
PHP remote file inclusion vulnerability in scaradcontrol.php in ScarAdControl (ScarAdController) 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the sac_config_dir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1937 
PHP remote file inclusion vulnerability in smilies.php in Scorp Book 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the config parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1938 
Ichitaro 2005 through 2007, and possibly related products, allows remote attackers to have an unknown impact via unspecified vectors in a document distributed through e-mail or a web site, possibly due to a buffer overflow or cross-site scripting (XSS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1939 
Cross-site scripting (XSS) vulnerability in the embedded webserver in Daniel Naber LanguageTool before 0.8.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors involving an error message, possibly the demultiplex method in HTTPServer.java.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-10T23:00:00.000Z
CVE-2007-1940 
IBM Tivoli Business Service Manager (TBSM) 4.1 before Interim Fix 1 logs passwords in plaintext, which allows local users to obtain sensitive information by reading (1) ncisetup.db or (2) msi.log.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T01:00:00.000Z
CVE-2007-1941 
Cross-site scripting (XSS) vulnerability in the Active Content Filter feature in Domino Web Access (DWA) in IBM Lotus Notes before 6.5.6 and 7.x before 7.0.2 FP1 allows remote attackers to inject arbitrary web script or HTML via a multipart/related e-mail message, a different issue than CVE-2006-4843.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T01:00:00.000Z
CVE-2007-1942 
Integer overflow in FastStone Image Viewer 2.9 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via a crafted BMP image, as demonstrated by wh3intof.bmp and wh4intof.bmp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T01:00:00.000Z
CVE-2007-1943 
Integer overflow in ACDSee Photo Manager 9.0 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via large width image sizes in a crafted BMP image, as demonstrated by w3intof.bmp and w4intof.bmp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T01:00:00.000Z
CVE-2007-1944 
The Java Message Service (JMS) in IBM WebSphere Application Server (WAS) before 6.1.0.7 allows attackers to cause a denial of service via unknown vectors involving the "double release [of] a bytebuffer input stream," possibly a double free vulnerability.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T01:00:00.000Z
CVE-2007-1945 
Unspecified vulnerability in the Servlet Engine/Web Container in IBM WebSphere Application Server (WAS) before 6.1.0.7 has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T01:00:00.000Z
CVE-2007-1946 
Integer overflow in Windows Explorer in Microsoft Windows XP SP1 might allow user-assisted remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large width dimension in a crafted BMP image, as demonstrated by w4intof.bmp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T01:00:00.000Z
CVE-2007-1947 
Cross-zone scripting vulnerability in the DOM templates (domplates) used by the console.log function in the Firebug extension before 1.04 for Mozilla Firefox allows remote attackers to bypass zone restrictions, read arbitrary file:// URIs, or execute arbitrary code in the browser chrome by overwriting the toString function via a certain function declaration, related to incorrect identification of anonymous JavaScript functions, a different issue than CVE-2007-1878.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T01:00:00.000Z
CVE-2007-1948 
Buffer overflow in IrfanView 3.99 allows context-dependent attackers to cause a denial of service and possibly execute arbitrary code via the (1) xoffset or (2) yoffset RLE command, or (3) large non-RLE encoded blocks in a crafted BMP image, as demonstrated by rle8of3.bmp and rle8of4.bmp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T01:00:00.000Z
CVE-2007-1949 
Session fixation vulnerability in WebBlizzard CMS allows remote attackers to hijack web sessions by setting a PHPSESSID cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T01:00:00.000Z
CVE-2007-1950 
Cross-site scripting (XSS) vulnerability in index_cms.php in WebBlizzard CMS allows remote attackers to inject arbitrary web script or HTML via the Suchzeile parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T01:00:00.000Z
CVE-2007-1951 
Session fixation vulnerability in onelook obo Shop allows remote attackers to hijack web sessions by setting a PHPSESSID cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T01:00:00.000Z
CVE-2007-1952 
Session fixation vulnerability in onelook onebyone CMS allows remote attackers to hijack web sessions by setting a PHPSESSID cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T01:00:00.000Z
CVE-2007-1953 
Session fixation vulnerability in onelook courts on-line allows remote attackers to hijack web sessions by setting a PHPSESSID cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T01:00:00.000Z
CVE-2007-1954 
Multiple directory traversal vulnerabilities in ArchiveXpert 2.02 build 80 allow remote attackers to create files in arbitrary directories via a .. (dot dot) in a (1) .gz, (2) .jar, (3) .rar, (4) .tar.gz, (5) .zip, or (6) .tar file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T01:00:00.000Z
CVE-2007-1955 
Multiple stack-based buffer overflows in the SignKorea SKCrypAX ActiveX control module 5.4.1.2 allow remote attackers to execute arbitrary code via a long string in unspecified arguments to the (1) DownloadCert, (2) DecryptFileByKey, and (3) EncryptFileByKey functions, a different module and vectors than CVE-2007-1722.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T01:00:00.000Z
CVE-2007-1956 
SQL injection vulnerability in ubbthreads.php in Groupee UBB.threads 6.1.1 and earlier allows remote attackers to execute arbitrary SQL commands via the C parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T01:00:00.000Z
CVE-2007-1957 
Multiple PHP remote file inclusion vulnerabilities in Guernion Sylvain Portail Web Php (aka Gsylvain35 Portail Web, PwP) allow remote attackers to execute arbitrary PHP code via a URL in the pageAll parameter to index.php in (1) template/Vert/, or (2) template/Noir/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T01:00:00.000Z
CVE-2007-1958 
Buffer overflow in TinyMUX before 2.4 allows attackers to cause a denial of service via unspecified vectors related to "too many substring matches in a regexp $-command." NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T10:00:00.000Z
CVE-2007-1959 
Unspecified vulnerability in the process_cmdent function in command.cpp in TinyMUX before 2.4 has unknown impact and attack vectors, related to lack of the "'other half' of buffer overflow protection."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T10:00:00.000Z
CVE-2007-1960 
SQL injection vulnerability in visit.php in the Rha7 Downloads (rha7downloads) 1.0 module for XOOPS, and possibly other versions up to 1.10, allows remote attackers to execute arbitrary SQL commands via the lid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T10:00:00.000Z
CVE-2007-1961 
PHP remote file inclusion vulnerability in mutant_functions.php in the Mutant 0.9.2 portal for phpBB 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T10:00:00.000Z
CVE-2007-1962 
SQL injection vulnerability in index.php in the WF-Snippets 1.02 and earlier module for XOOPS allows remote attackers to execute arbitrary SQL commands via the c parameter in a cat action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T10:00:00.000Z
CVE-2007-1963 
SQL injection vulnerability in the create_session function in class_session.php in MyBB (aka MyBulletinBoard) 1.2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the Client-IP HTTP header, as utilized by index.php, a related issue to CVE-2006-3775.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T10:00:00.000Z
CVE-2007-1964 
member.php in MyBB (aka MyBulletinBoard), when debug mode is available, allows remote authenticated users to change the password of any account by providing the account's registered e-mail address in a debug request for a do_lostpw action, which prints the change password verification code in the debug output.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T10:00:00.000Z
CVE-2007-1965 
Multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.0.4.3 and earlier allow remote attackers to inject arbitrary web script or HTML via the set_lang parameter to (1) archive.php, (2) article.php, (3) index.php, or (4) topics.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T10:00:00.000Z
CVE-2007-1966 
Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T10:00:00.000Z
CVE-2007-1967 
PHP remote file inclusion vulnerability in index.php in stat12 allows remote attackers to execute arbitrary PHP code via a URL in the langpath parameter.  NOTE: this issue was published by an unreliable researcher, and there is little information to determine which product is actually affected.  This is probably an invalid report based on analysis by CVE and a third party
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T10:00:00.000Z
CVE-2007-1968 
PHP remote file inclusion vulnerability in games.php in Sam Crew MyBlog, possibly 1.0 through 1.6, allows remote attackers to execute arbitrary PHP code via a URL in the scoreid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T10:00:00.000Z
CVE-2007-1969 
Cross-site scripting (XSS) vulnerability in admin/modify.php in Sam Crew MyBlog remote attackers to inject arbitrary web script or HTML via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T10:00:00.000Z
CVE-2007-1970 
Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically created by a delayed document.write, which allows remote attackers to supply unauthenticated content and conduct phishing attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T10:00:00.000Z
CVE-2007-1971 
SQL injection vulnerability in fotokategori.asp in Gazi Okul Sitesi 2007 allows remote attackers to execute arbitrary SQL commands via the query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T10:00:00.000Z
CVE-2007-1972 
PatrolAgent.exe in BMC Performance Manager does not require authentication for requests to modify configuration files, which allows remote attackers to execute arbitrary code via a request on TCP port 3181 for modification of the masterAgentName and masterAgentStartLine SNMP parameters.  NOTE: the vendor disputes this vulnerability, stating that it does not exist when the system is properly configured
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-22T19:00:00.000Z
CVE-2007-1973 
Race condition in the Virtual DOS Machine (VDM) in the Windows Kernel in Microsoft Windows NT 4.0 allows local users to modify memory and gain privileges via the temporary \Device\PhysicalMemory section handle, a related issue to CVE-2007-1206.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-11T23:00:00.000Z
CVE-2007-1974 
SQL injection vulnerability in the getArticle function in class/wfsarticle.php in WF-Section (aka WF-Sections) 1.0.1, as used in Xoops modules such as (1) Zmagazine 1.0, (2) Happy Linux XFsection 1.07 and earlier, and possibly other modules, allows remote attackers to execute arbitrary SQL commands via the articleid parameter to print.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-12T00:00:00.000Z
CVE-2007-1975 
Multiple PHP remote file inclusion vulnerabilities in SLAED CMS 2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) path parameter to admin/admin.php or the (2) modpath parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-12T00:00:00.000Z
CVE-2007-1976 
PHP remote file inclusion vulnerability in index.php in the Virii Info 1.10 and earlier module for Xoops allows remote attackers to execute arbitrary PHP code via a URL in the xoopsConfig[root_path] parameter. NOTE: the issue has been disputed by a reliable third party, stating that the application's checkSuperglobals function defends against the attack
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-12T00:00:00.000Z
CVE-2007-1977 
Cross-site scripting (XSS) vulnerability in index_cms.php in holaCMS 1.4.10 allows remote attackers to inject arbitrary web script or HTML via the acuparam parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-12T00:00:00.000Z
CVE-2007-1978 
SQL injection vulnerability in index.php in the Arcade 1.00 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter in a view_game_list action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-12T00:00:00.000Z
CVE-2007-1979 
SQL injection vulnerability in index.php in the PopnupBlog 2.52 and earlier module for Xoops allows remote attackers to execute arbitrary SQL commands via the postid parameter, possibly involving the get_blogid_from_postid function in class/PopnupBlogUtils.php.  NOTE: later versions such as 3.03 and 3.05 might also be affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-12T01:00:00.000Z
CVE-2007-1980 
SQL injection vulnerability in index.php in the Topliste 1.0 module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the cid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-12T01:00:00.000Z
CVE-2007-1981 
The safevoid_vsnprintf function in Metamod-P 1.19p29 and earlier on Windows allows remote attackers to cause a denial of service (daemon crash) via a long meta list command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-12T01:00:00.000Z
CVE-2007-1982 
Multiple PHP remote file inclusion vulnerabilities in Really Simple PHP and Ajax (RSPA) 2007-03-23 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) __IncludeFilePHPClass, (2) __ClassPath, and (3) __class parameters to (a) rspa/framework/Controller_v5.php, and (b) rspa/framework/Controller_v4.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-04-12T01:00:00.000Z