# CVEs published 2007-06-04

24 CVEs were published on June 4, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-1862](https://cve.now/CVE-2007-1862.md): The recall\_headers function in mod\_mem\_cache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to… (no CVSS)
- [CVE-2007-2387](https://cve.now/CVE-2007-2387.md): Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI… (no CVSS)
- [CVE-2007-2872](https://cve.now/CVE-2007-2872.md): Multiple integer overflows in the chunk\_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4.8 allow remote attackers to cause a… (no CVSS)
- [CVE-2007-2994](https://cve.now/CVE-2007-2994.md): SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the newsid parameter… (no CVSS)
- [CVE-2007-2995](https://cve.now/CVE-2007-2995.md): Unspecified vulnerability in sysmgt.websm.rte in IBM AIX 5.2.0 and 5.3.0 has unknown impact and attack vectors. (no CVSS)
- [CVE-2007-2996](https://cve.now/CVE-2007-2996.md): Unspecified vulnerability in perl.rte 5.8.0.10 through 5.8.0.95 on IBM AIX 5.2, and 5.8.2.10 through 5.8.2.50 on AIX 5.3, allows local… (no CVSS)
- [CVE-2007-2997](https://cve.now/CVE-2007-2997.md): Multiple SQL injection vulnerabilities in cgi-bin/reorder2.asp in SalesCart Shopping Cart allow remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2007-2998](https://cve.now/CVE-2007-2998.md): The Pascal run-time library (PAS$RTL.EXE) before 20070418 on OpenVMS for Integrity Servers 8.3, and PAS$RTL.EXE before 20070419 on OpenVMS… (no CVSS)
- [CVE-2007-2999](https://cve.now/CVE-2007-2999.md): Microsoft Windows Server 2003, when time restrictions are in effect for user accounts, generates different error messages for failed login… (no CVSS)
- [CVE-2007-3000](https://cve.now/CVE-2007-3000.md): Multiple SQL injection vulnerabilities in PHP JackKnife (PHPJK) allow remote attackers to execute arbitrary SQL commands via (1) the… (no CVSS)
- [CVE-2007-3001](https://cve.now/CVE-2007-3001.md): Multiple cross-site scripting (XSS) vulnerabilities in PHP JackKnife (PHPJK) allow remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2007-3002](https://cve.now/CVE-2007-3002.md): PHP JackKnife (PHPJK) allows remote attackers to obtain sensitive information via (1) a request to index.php with an invalid value of the… (no CVSS)
- [CVE-2007-3003](https://cve.now/CVE-2007-3003.md): Multiple SQL injection vulnerabilities in myBloggie 2.1.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1)… (no CVSS)
- [CVE-2007-3006](https://cve.now/CVE-2007-3006.md): Buffer overflow in Acoustica MP3 CD Burner 4.32 allows user-assisted remote attackers to execute arbitrary code via a .asx playlist file… (no CVSS)
- [CVE-2007-3007](https://cve.now/CVE-2007-3007.md): PHP 5 before 5.2.3 does not enforce the open\_basedir or safe\_mode restriction in certain cases, which allows context-dependent attackers… (no CVSS)
- [CVE-2007-3008](https://cve.now/CVE-2007-3008.md): Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote information leaks and… (no CVSS)
- [CVE-2007-3009](https://cve.now/CVE-2007-3009.md): Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports logging but the… (no CVSS)
- [CVE-2007-1593](https://cve.now/CVE-2007-1593.md): The administrative service in Symantec Veritas Volume Replicator (VVR) for Windows 3.1 through 4.3, and VVR for Unix 3.5 through 5.0, in… (no CVSS)
- [CVE-2007-2279](https://cve.now/CVE-2007-2279.md): The Scheduler Service (VxSchedService.exe) in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication… (no CVSS)
- [CVE-2007-2452](https://cve.now/CVE-2007-2452.md): Heap-based buffer overflow in the visit\_old\_format function in locate/locate.c in locate in GNU findutils before 4.2.31 might allow… (no CVSS)
- [CVE-2007-2513](https://cve.now/CVE-2007-2513.md): Novell GroupWise 7 before SP2 20070524, and GroupWise 6 before 6.5 post-SP6 20070522, allows remote attackers to obtain credentials via a… (no CVSS)
- [CVE-2007-2991](https://cve.now/CVE-2007-2991.md): Cross-site scripting (XSS) vulnerability in includes/send.inc.php in Evenzia CMS allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2007-2992](https://cve.now/CVE-2007-2992.md): Multiple SQL injection vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow remote attackers to… (no CVSS)
- [CVE-2007-2993](https://cve.now/CVE-2007-2993.md): Multiple cross-site scripting (XSS) vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow remote… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2007-06-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.