# CVEs published 2007-05-29 9 CVEs were published on May 29, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-0246](https://cve.now/CVE-2007-0246.md): plugins/scmcvs/www/cvsweb.php in the CVSWeb CGI in GForge 4.5.16 before 20070524, aka gforge-plugin-scmcvs, allows remote attackers to execu (no CVSS) - [CVE-2007-2388](https://cve.now/CVE-2007-2388.md): Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not properly restrict QTObject subclassing, which allows remote attackers to exe (no CVSS) - [CVE-2007-2389](https://cve.now/CVE-2007-2389.md): Apple QuickTime for Java 7.1.6 on Mac OS X and Windows does not clear potentially sensitive memory before use, which allows remote attackers (no CVSS) - [CVE-2007-2451](https://cve.now/CVE-2007-2451.md): Unspecified vulnerability in drivers/crypto/geode-aes.c in GEODE-AES in the Linux kernel before 2.6.21.3 allows attackers to obtain sensitiv (no CVSS) - [CVE-2007-2877](https://cve.now/CVE-2007-2877.md): Buffer overflow in tcl/win/tclWinReg.c in Tcl (Tcl/Tk) before 8.5a6 allows local users to gain privileges via long registry key paths. (no CVSS) - [CVE-2007-2878](https://cve.now/CVE-2007-2878.md): The VFAT compat ioctls in the Linux kernel before 2.6.21.2, when run on a 64-bit system, allow local users to corrupt a kernel\_dirent struct (no CVSS) - [CVE-2007-2879](https://cve.now/CVE-2007-2879.md): Cross-site scripting (XSS) vulnerability in mods.php in GTP GNUTurk Portal System 3G allows remote attackers to inject arbitrary web script (no CVSS) - [CVE-2007-2880](https://cve.now/CVE-2007-2880.md): Multiple cross-site scripting (XSS) vulnerabilities in Digirez 3.4 allow remote attackers to inject arbitrary web script or HTML via the (1) (no CVSS) - [CVE-2007-2881](https://cve.now/CVE-2007-2881.md): Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-05-29 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.