# CVEs published 2007-05-25

3 CVEs were published on May 25, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-1860](https://cve.now/CVE-2007-1860.md): mod\_jk in Apache Tomcat JK Web Server Connector 1.2.x before 1.2.23 decodes request URLs within the Apache HTTP Server before passing the UR (no CVSS)
- [CVE-2007-2865](https://cve.now/CVE-2007-2865.md): Cross-site scripting (XSS) vulnerability in sqledit.php in phpPgAdmin 4.1.1 allows remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2007-2866](https://cve.now/CVE-2007-2866.md): Multiple SQL injection vulnerabilities in modules/admin/modules/gallery.php in PHPEcho CMS 2.0-rc1 and earlier allow remote attackers to exe (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-05-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.