# CVEs published 2007-06-21

36 CVEs were published on June 21, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-3341](https://cve.now/CVE-2007-3341.md): Unspecified vulnerability in the FTP implementation in Microsoft Internet Explorer allows remote attackers to "see a valid memory address"… (no CVSS)
- [CVE-2007-3342](https://cve.now/CVE-2007-3342.md): Multiple cross-site scripting (XSS) vulnerabilities in Movable Type (MT) before 3.34 allow remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2007-3334](https://cve.now/CVE-2007-3334.md): Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for… (no CVSS)
- [CVE-2007-3340](https://cve.now/CVE-2007-3340.md): BugHunter HTTP SERVER (httpsv.exe) 1.6.2 allows remote attackers to cause a denial of service (application crash) via a large number of… (no CVSS)
- [CVE-2007-3339](https://cve.now/CVE-2007-3339.md): Multiple cross-site scripting (XSS) vulnerabilities in forum/include/error/autherror.cfm in FuseTalk Basic, Standard, Enterprise, and… (no CVSS)
- [CVE-2007-2833](https://cve.now/CVE-2007-2833.md): Emacs 21 allows user-assisted attackers to cause a denial of service (crash) via certain crafted images, as demonstrated via a GIF image… (no CVSS)
- [CVE-2007-3332](https://cve.now/CVE-2007-3332.md): Directory traversal vulnerability in Satellite.php in Satel Lite for PhpNuke allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2007-3335](https://cve.now/CVE-2007-3335.md): Multiple SQL injection vulnerabilities in the admin panel in PHPEcho CMS before 1.6 allow remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2007-3312](https://cve.now/CVE-2007-3312.md): Directory traversal vulnerability in admin/plugin\_manager.php in Jasmine CMS 1.0 allows remote authenticated administrators to include and… (no CVSS)
- [CVE-2007-3313](https://cve.now/CVE-2007-3313.md): Multiple SQL injection vulnerabilities in Jasmine CMS 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the… (no CVSS)
- [CVE-2007-3314](https://cve.now/CVE-2007-3314.md): Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (English Trial), and 2.0… (no CVSS)
- [CVE-2007-3315](https://cve.now/CVE-2007-3315.md): Multiple PHP remote file inclusion vulnerabilities in YourFreeScreamer 1.0, when register\_globals is enabled, allow remote attackers to… (no CVSS)
- [CVE-2007-3316](https://cve.now/CVE-2007-3316.md): Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of… (no CVSS)
- [CVE-2007-3317](https://cve.now/CVE-2007-3317.md): The Session Initiation Protocol (SIP) User Access Client (UAC) message parsing module in Avaya one-X Desktop Edition 2.1.0.70 and earlier… (no CVSS)
- [CVE-2007-3318](https://cve.now/CVE-2007-3318.md): Buffer overflow in the Session Initiation Protocol (SIP) User Access Client (UAC) message parsing module in Avaya one-X Desktop Edition… (no CVSS)
- [CVE-2007-3319](https://cve.now/CVE-2007-3319.md): The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware does not use the cnonce parameter in the Authorization… (no CVSS)
- [CVE-2007-3320](https://cve.now/CVE-2007-3320.md): The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware accepts SIP INVITE requests from arbitrary source IP… (no CVSS)
- [CVE-2007-3321](https://cve.now/CVE-2007-3321.md): The Avaya 4602 SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2007-3322](https://cve.now/CVE-2007-3322.md): The Avaya 4602 SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware uses a constant media port number for calls, which allows… (no CVSS)
- [CVE-2007-3323](https://cve.now/CVE-2007-3323.md): SQL injection vulnerability in comersus\_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2007-3324](https://cve.now/CVE-2007-3324.md): Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2007-3325](https://cve.now/CVE-2007-3325.md): PHP remote file inclusion vulnerability in lib/language.php in LAN Management System (LMS) 1.9.6 and earlier allows remote attackers to… (no CVSS)
- [CVE-2007-3326](https://cve.now/CVE-2007-3326.md): Multiple directory traversal vulnerabilities in vBulletin 3.x.x allow remote attackers to redirect visitors to arbitrary local files via a… (no CVSS)
- [CVE-2007-3327](https://cve.now/CVE-2007-3327.md): httpsv.exe in HTTP Server 1.6.2 allows remote attackers to obtain sensitive information (script source code) via a URI with a trailing %20… (no CVSS)
- [CVE-2007-3328](https://cve.now/CVE-2007-3328.md): Multiple cross-site scripting (XSS) vulnerabilities in Interact 2.4 beta 1 allow remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2007-3329](https://cve.now/CVE-2007-3329.md): Multiple array index errors in the (1) get\_intra\_block, (2) get\_inter\_block\_h263, and (3) get\_inter\_block\_mpeg functions in… (no CVSS)
- [CVE-2007-3330](https://cve.now/CVE-2007-3330.md): Cross-site scripting (XSS) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to inject arbitrary web script or HTML via a… (no CVSS)
- [CVE-2007-3331](https://cve.now/CVE-2007-3331.md): Cross-site request forgery (CSRF) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to change the admin password via (1) a… (no CVSS)
- [CVE-2007-2398](https://cve.now/CVE-2007-2398.md): Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while filling the main… (no CVSS)
- [CVE-2007-3311](https://cve.now/CVE-2007-3311.md): SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2007-3305](https://cve.now/CVE-2007-3305.md): Heap-based buffer overflow in Cerulean Studios Trillian 3.x before 3.1.6.0 allows remote attackers to execute arbitrary code via a message… (no CVSS)
- [CVE-2007-3306](https://cve.now/CVE-2007-3306.md): PHP remote file inclusion vulnerability in crontab/run\_billing.php in MiniBill 1.2.5 allows remote attackers to execute arbitrary PHP code… (no CVSS)
- [CVE-2007-3307](https://cve.now/CVE-2007-3307.md): SQL injection vulnerability in game\_listing.php in Solar Empire 2.9.1.1 and earlier allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2007-3308](https://cve.now/CVE-2007-3308.md): Simple Machines Forum (SMF) 1.1.2 uses a concatenation method with insufficient randomization when creating a WAV file CAPTCHA, which… (no CVSS)
- [CVE-2007-3309](https://cve.now/CVE-2007-3309.md): Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.2 allows remote attackers to execute arbitrary PHP code during (1) creation… (no CVSS)
- [CVE-2007-3310](https://cve.now/CVE-2007-3310.md): Cross-site scripting (XSS) vulnerability in arama.asp in TDizin allows remote attackers to inject arbitrary web script or HTML via the ara… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2007-06-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.