rainbutterfly/cve_corpus huggingface dataset:
CVE-2007-5148 
Multiple PHP remote file inclusion vulnerabilities in FrontAccounting (FA) 1.12 allow remote attackers to execute arbitrary PHP code via a URL in the path_to_root parameter to (1) access/logout.php or certain PHP scripts under (2) admin/, (3) dimensions/, (4) gl/, (5) inventory/, (6) manufacturing/, (7) purchasing/, (8) reporting/, (9) sales/, or (10) taxes/.  NOTE: the config.php vector is already covered by CVE-2007-4279, and the login.php and language.php vectors are already covered by CVE-2007-5117.  NOTE: this issue is disputed by CVE because path_to_root is defined before use in all of the other files reported in the original disclosure
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5149 
PHP remote file inclusion vulnerability in NewsCMS/news/newstopic_inc.php in North Country Public Radio Public Media Manager (PMM) 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the indir parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5150 
SQL injection vulnerability in the is_god function in includes/nukesentinel.php in NukeSentinel 2.5.11 allows remote attackers to execute arbitrary SQL commands via base64-encoded data in an admin cookie, a different vector than CVE-2007-5125.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5151 
SQL injection vulnerability in the abget_admin function in includes/nukesentinel.php in NukeSentinel 2.5.12 allows remote attackers to execute arbitrary SQL commands via base64-encoded data in an admin cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5152 
Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 9.1 container, does not demand authentication after a container restart, which allows remote attackers to perform administrative tasks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5153 
Unspecified vulnerability in Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 8.x container, allows remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5154 
Session fixation vulnerability in Aipo and Aipo ASP 3.0.1.0 and earlier allows remote attackers to hijack web sessions via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5155 
IceGUI.DLL in ICEOWS 4.20b invokes a function with incorrect arguments, which allows user-assisted remote attackers to execute arbitrary code via a long filename in the header of an ACE archive, which triggers a stack-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5156 
Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload.php in FCKeditor, as used in SiteX CMS 0.7.3.beta, La-Nai CMS, Syntax CMS, Cardinal Cms, and probably other products, allows remote attackers to upload and execute arbitrary PHP code via a file whose name contains ".php." and has an unknown extension, which is recognized as a .php file by the Apache HTTP server, a different vulnerability than CVE-2006-0658 and CVE-2006-2529.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5157 
PHP remote file inclusion vulnerability in phfito-post.php in Alex Kocharin PHP Fidonet Tosser (PhFiTo) 1.3.0 in phpFidoNode allows remote attackers to execute arbitrary PHP code via a URL in the SRC_PATH parameter to phfito-post.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5158 
The focus handling for the onkeydown event in Microsoft Internet Explorer 6.0 allows remote attackers to change field focus and copy keystrokes via a certain use of a JavaScript htmlFor attribute, as demonstrated by changing focus from a textarea to a file upload field, a related issue to CVE-2007-3511.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5159 
The ntfs-3g package before 1.913-2.fc7 in Fedora 7, and an ntfs-3g package in Ubuntu 7.10/Gutsy, assign incorrect permissions (setuid root) to mount.ntfs-3g, which allows local users with fuse group membership to read from and write to arbitrary block devices, possibly involving a file descriptor leak.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5160 
Multiple PHP remote file inclusion vulnerabilities in Thierry Leriche Restaurant Management System (ReMaSys) 0.5 allow remote attackers to execute arbitrary PHP code via a URL in (1) the DIR_ROOT parameter to (a) global.php, or the (2) DIR_PAGE parameter to (b) template/fr/page.php or (c) page/fr/boxConnection.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5161 
Cross-zone scripting vulnerability in the internal browser in i-Systems Feedreader 3.10 allows remote attackers to inject arbitrary web script or HTML via an item in a feed, as demonstrated by a WordPress blog update.  NOTE: this was originally reported as XSS.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5162 
The connect method in lib/net/http.rb in the (1) Net::HTTP and (2) Net::HTTPS libraries in Ruby 1.8.5 and 1.8.6 does not verify that the commonName (CN) field in a server certificate matches the domain name in an HTTPS request, which makes it easier for remote attackers to intercept SSL transmissions via a man-in-the-middle attack or spoofed web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5163 
PHP remote file inclusion vulnerability in includes/functions/layout.php in Nexty 1.01.A Beta allows remote attackers to execute arbitrary PHP code via a URL in the rel parameter.  NOTE: this issue is disputed by CVE because the applicable include is in a function that is not called on a direct request
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5164 
PHP remote file inclusion vulnerability in htmls/forum/includes/topic_review.php in UniversiBO 1.3.4 allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path parameter.  NOTE: this issue is disputed by CVE because the applicable include is in a function that is not called on a direct request
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5165 
PHP remote file inclusion vulnerability in init.php in Jens Tkotz myIpacNG-stats (MINGS) 0.05 allows remote attackers to execute arbitrary PHP code via a URL in the MINGS_BASE parameter.  NOTE: this issue is disputed by CVE because MINGS_BASE is defined before use
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5166 
Multiple PHP remote file inclusion vulnerabilities in SiteSys 1.0a allow remote attackers to execute arbitrary PHP code via a URL in the doc_root parameter to (1) inc/pagehead.inc.php or (2) inc/pageinit.inc.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5167 
PHP remote file inclusion vulnerability in .systeme/fonctions.php in phpLister 0.5-pre2 allows remote attackers to execute arbitrary PHP code via a URL in the nom_rep_systeme parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5168 
Multiple PHP remote file inclusion vulnerabilities in ClanLite 1.23.01.2005 allow remote attackers to execute arbitrary PHP code via a URL in the root_path parameter to (1) modules/serveur_jeux.php or (2) conf/conf-php.php.  NOTE: vector 1 is disputed by CVE because the require_once is only reached when a certain constant has already been defined.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T00:00:00.000Z
CVE-2007-5169 
Stack-based buffer overflow in MAIPM6.dll in Adobe PageMaker 7.0.1 and 7.0.2 on Windows allows user-assisted remote attackers to execute arbitrary code via a long font name in a .PMD file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-11T10:00:00.000Z
CVE-2007-5170 
Unspecified vulnerability in the embedded service processor (SP) before 3.09 in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager (ELOM) allows remote attackers to send arbitrary network traffic and use ELOM as a spam proxy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T20:00:00.000Z
CVE-2007-5171 
Unspecified vulnerability in Quicksilver Forums before 1.4.1 allows remote attackers to delete arbitrary PMs via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T20:00:00.000Z
CVE-2007-5172 
Quicksilver Forums before 1.4.1 allows remote attackers to obtain sensitive information by causing unspecified connection errors, which reveals the database password in the resulting error message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-01T20:00:00.000Z
CVE-2007-5173 
PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the openid_root_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-03T14:00:00.000Z
CVE-2007-5174 
Directory traversal vulnerability in phpinc/news.php in actSite 1.56 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the do parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-03T14:00:00.000Z
CVE-2007-5175 
PHP remote file inclusion vulnerability lib/base.php in actSite 1.991 Beta allows remote attackers to execute arbitrary PHP code via a URL in the BaseCfg[BaseDir] parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-03T14:00:00.000Z
CVE-2007-5176 
Multiple cross-site scripting (XSS) vulnerabilities in GroupLink eHelpDesk 6.2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) NA_DISPLAYNAME parameter in helpdesk/user/rf_create.jsp and the (2) username and (3) LDAPError parameters in index2.jsp.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-03T14:00:00.000Z
CVE-2007-5177 
SQL injection vulnerability in index.php in the MambAds (com_mambads) 1.5 and earlier component for Mambo allows remote attackers to execute arbitrary SQL commands via the caid parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-03T14:00:00.000Z
CVE-2007-5178 
contrib/mx_glance_sdesc.php in the mx_glance 2.3.3 module for mxBB places a critical security check within a comment because of a missing comment delimiter, which allows remote attackers to conduct remote file inclusion attacks and execute arbitrary PHP code via a URL in the mx_root_path parameter.  NOTE: some sources incorrectly state that phpbb_root_path is the affected parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-03T14:00:00.000Z
CVE-2007-5179 
Multiple cross-site scripting (XSS) vulnerabilities in iletisim.asp in Y&K Iletisim Formu allow remote attackers to inject arbitrary web script or HTML via the (1) ad, (2) sehir, (3) yas, (4) cins, (5) tel, (6) mail, and (7) mesaj parameters.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-03T14:00:00.000Z
CVE-2007-5180 
Multiple SQL injection vulnerabilities in Ohesa Emlak Portali allow remote attackers to execute arbitrary SQL commands via the (1) Kategori parameter in satilik.asp and the (2) Emlak parameter in detay.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-03T14:00:00.000Z
CVE-2007-5181 
SQL injection vulnerability in detay.asp in Netkamp Emlak Scripti allows remote attackers to execute arbitrary SQL commands via the ilan_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-03T14:00:00.000Z
CVE-2007-5182 
Cross-site scripting (XSS) vulnerability in mail.asp in Netkamp Emlak Scripti allows remote attackers to inject arbitrary web script or HTML via the (1) Email parameter, and possibly the (2) Ad, (3) Soyad, (4) Konu, and (5) Mesaj parameters to iletisim.asp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-03T14:00:00.000Z
CVE-2007-5183 
Cross-site scripting (XSS) vulnerability in Mailbox.mws in OdysseySuite, possibly 4.0.729, allows remote attackers to inject arbitrary web script or HTML via the idkey parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-03T14:00:00.000Z
CVE-2007-5184 
Format string vulnerability in the SMBDirList function in dirlist.c in SmbFTPD 0.96 allows remote attackers to execute arbitrary code via format string specifiers in a directory name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-03T14:00:00.000Z
CVE-2007-5185 
Multiple PHP remote file inclusion vulnerabilities in phpWCMS XT 0.0.7 BETA and earlier allow remote attackers to execute arbitrary PHP code via a URL in the HTML_MENU_DirPath parameter to (1) config_HTML_MENU.php and (2) config_PHPLM.php in phpwcms_template/inc_script/frontend_render/navigation/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-03T14:00:00.000Z
CVE-2007-5186 
PHP remote file inclusion vulnerability in index.php in Segue CMS 1.8.4 and earlier, when register_globals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the themesdir parameter, a different vector than CVE-2006-5497.  NOTE: this issue was disputed, but the dispute was retracted after additional analysis.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-03T14:00:00.000Z
CVE-2007-5187 
SQL injection vulnerability in infusions/calendar_events_panel/show_single.php in the Expanded Calendar 2.x module for PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the sel parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-03T14:00:00.000Z
CVE-2007-5188 
Unspecified vulnerability in the XOOPS uploader class in Xoops 2.0.17.1-RC1 and earlier allows remote attackers to upload arbitrary files via unspecified vectors related to improper upload configuration settings in class/uploader.php and class/mimetypes.inc.php, possibly an incomplete blacklist that omits the .php4 extension.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-03T14:00:00.000Z
CVE-2007-5189 
Multiple SQL injection vulnerabilities in mes_add.php in x-script GuestBook 1.3a, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) email, (3) icq, and (4) website parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-03T14:00:00.000Z
CVE-2007-5190 
Multiple cross-site scripting (XSS) vulnerabilities in Alcatel OmniVista 4760 R4.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the action parameter to php-bin/Webclient.php or (2) the Langue parameter to the default URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-22T19:00:00.000Z
CVE-2007-5191 
mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-04T16:00:00.000Z
CVE-2007-5193 
The default configuration for twiki 4.1.2 on Debian GNU/Linux, and possibly other operating systems, specifies the work area directory (cfg{RCS}{WorkAreaDir}) under the web document root, which might allow remote attackers to obtain sensitive information when .htaccess restrictions are not applied.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-04T16:00:00.000Z
CVE-2007-5194 
The Chroot server in rMake 1.0.11 creates a /dev/zero device file with read/write permissions for the rMake user and the same minor device number as /dev/port, which might allow local users to gain root privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-04T17:00:00.000Z
CVE-2007-5195 
Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package in SUSE Linux Enterprise Desktop 10 allows remote attackers to obtain credentials via a man-in-the-middle attack, a different vulnerability than CVE-2007-5196.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T18:00:00.000Z
CVE-2007-5196 
Unspecified vulnerability in the SSL implementation in Groupwise client system in the novell-groupwise-client package in SUSE Linux Enterprise Desktop 10 allows remote attackers to obtain credentials via a man-in-the-middle attack, a different vulnerability than CVE-2007-5195.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T18:00:00.000Z
CVE-2007-5197 
Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context-dependent attackers to execute arbitrary code via unspecified vectors related to Reduce in Montgomery-based Pow methods.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-11-02T16:00:00.000Z
CVE-2007-5198 
Buffer overflow in the redir function in check_http.c in Nagios Plugins before 1.4.10, when running with the -f (follow) option, allows remote web servers to execute arbitrary code via Location header responses (redirects) with a large number of leading "L" characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-04T17:00:00.000Z
CVE-2007-5199 
A single byte overflow in catalogue.c in X.Org libXfont 1.3.1 allows remote attackers to have unspecified impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-18T20:00:00.000Z
CVE-2007-5200 
hugin, as used on various operating systems including SUSE openSUSE 10.2 and 10.3, allows local users to overwrite arbitrary files via a symlink attack on the hugin_debug_optim_results.txt temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-14T18:00:00.000Z
CVE-2007-5201 
The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-04T17:00:00.000Z
CVE-2007-5207 
guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.[PID] temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-04T21:00:00.000Z
CVE-2007-5208 
hpssd in Hewlett-Packard Linux Imaging and Printing Project (hplip) 1.x and 2.x before 2.7.10 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a from address, which is not properly handled when invoking sendmail.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-13T00:00:00.000Z
CVE-2007-5209 
Stack-based buffer overflow in DriveLock.exe in CenterTools DriveLock 5.0 allows remote attackers to execute arbitrary code via a long HTTP request to TCP port 6061.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-04T23:00:00.000Z
CVE-2007-5210 
Arbor Networks Peakflow SP before 3.5.1 patch 14, and 3.6.x before 3.6.1 patch 5, allows remote authenticated users to bypass access restrictions and read or write unspecified data via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-04T23:00:00.000Z
CVE-2007-5211 
Multiple cross-site scripting (XSS) vulnerabilities in Arbor Networks Peakflow SP 3.5.1 before patch 14, and 3.6.1 before patch 5, when scope accounts are enabled, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving GET or POST requests.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-04T23:00:00.000Z
CVE-2007-5212 
Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware before 2.43 allow remote attackers to inject arbitrary web script or HTML via (1) parameters associated with saved settings, as demonstrated by the conf_SMTP_MailServer1 parameter to ServerManager.srv; or (2) the subpage parameter to wizard/first/wizard_main_first.shtml.  NOTE: an attacker can leverage a CSRF vulnerability to modify saved settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-04T23:00:00.000Z
CVE-2007-5213 
Multiple cross-site request forgery (CSRF) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to perform actions as administrators, as demonstrated by (1) an SMTP server change through the conf_SMTP_MailServer1 parameter to ServerManager.srv and (2) a hostname change through the conf_Network_HostName parameter on the Network page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-04T23:00:00.000Z
CVE-2007-5214 
Multiple cross-site scripting (XSS) vulnerabilities in the AXIS 2100 Network Camera 2.02 with firmware 2.43 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PATH_INFO to the default URI associated with a directory, as demonstrated by (a) the root directory and (b) the view/ directory; (2) parameters associated with saved settings, as demonstrated by (c) the conf_Network_HostName parameter on the Network page and (d) the conf_Layout_OwnTitle parameter to ServerManager.srv; and (3) the query string to ServerManager.srv, which is displayed on the logs page. NOTE: an attacker can leverage a CSRF vulnerability to modify saved settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2007-10-04T23:00:00.000Z