# CVEs published 2007-05-31

27 CVEs were published on May 31, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-2959](https://cve.now/CVE-2007-2959.md): SQL injection vulnerability in manufacturer.php in cpCommerce before 1.1.0 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2007-2960](https://cve.now/CVE-2007-2960.md): Multiple directory traversal vulnerabilities in Scallywag 2005-04-25 allow remote attackers to include and execute arbitrary local files via (no CVSS)
- [CVE-2007-2961](https://cve.now/CVE-2007-2961.md): Unrestricted file upload vulnerability in FileCloset before 1.1.5 allows remote attackers to upload arbitrary PHP files via unspecified vect (no CVSS)
- [CVE-2007-2962](https://cve.now/CVE-2007-2962.md): Cross-site scripting (XSS) vulnerability in search.php in Particle Gallery 1.0.1 and earlier allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2007-2963](https://cve.now/CVE-2007-2963.md): Multiple cross-site scripting (XSS) vulnerabilities in Invision Power Board (IPB or IP.Board) 2.2.2, and possibly earlier, allows remote att (no CVSS)
- [CVE-2007-2964](https://cve.now/CVE-2007-2964.md): The fsmsh.dll host module in F-Secure Policy Manager Server 7.00 and earlier allows remote attackers to cause a denial of service (applicati (no CVSS)
- [CVE-2007-2965](https://cve.now/CVE-2007-2965.md): Unspecified vulnerability in the Real-time Scanning component in multiple F-Secure products, including Internet Security 2005, 2006 and 2007 (no CVSS)
- [CVE-2007-2966](https://cve.now/CVE-2007-2966.md): Buffer overflow in the LHA decompression component in F-Secure anti-virus products for Microsoft Windows and Linux before 20070529 allows re (no CVSS)
- [CVE-2007-2967](https://cve.now/CVE-2007-2967.md): Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070522 allow remote attackers to cause a denial of service (f (no CVSS)
- [CVE-2001-1581](https://cve.now/CVE-2001-1581.md): The File Blocker feature in Clearswift MAILsweeper for SMTP 4.2 allows remote attackers to bypass e-mail attachment filtering policies via a (no CVSS)
- [CVE-2003-1330](https://cve.now/CVE-2003-1330.md): Clearswift MAILsweeper for SMTP 4.3.6 SP1 does not execute custom "on strip unsuccessful" hooks, which allows remote attackers to bypass e-m (no CVSS)
- [CVE-2007-2932](https://cve.now/CVE-2007-2932.md): Cross-site scripting (XSS) vulnerability in index.php in BoastMachine allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2007-2933](https://cve.now/CVE-2007-2933.md): SQL injection vulnerability in index.php in the Phil-a-Form (com\_philaform) 1.2.0.0 and earlier component for Joomla! allows remote attacker (no CVSS)
- [CVE-2007-2934](https://cve.now/CVE-2007-2934.md): Directory traversal vulnerability in skins/common.css.php in Vistered Little 1.6a allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2007-2935](https://cve.now/CVE-2007-2935.md): core/spellcheck/spellcheck.php in Fundanemt before 2.2.0.1 allows remote attackers to execute arbitrary commands via shell metacharacters in (no CVSS)
- [CVE-2007-2936](https://cve.now/CVE-2007-2936.md): Multiple PHP remote file inclusion vulnerabilities in Frequency Clock 0.1b (Beta 0.1) allow remote attackers to execute arbitrary PHP code v (no CVSS)
- [CVE-2007-2937](https://cve.now/CVE-2007-2937.md): PHP remote file inclusion vulnerability in admin/admin.php in TROforum 0.1 allows remote attackers to execute arbitrary PHP code via a URL i (no CVSS)
- [CVE-2007-2938](https://cve.now/CVE-2007-2938.md): Buffer overflow in the BaseRunner ActiveX control in the Ademco ATNBaseLoader100 Module (ATNBaseLoader100.dll) 5.4.0.6, when Internet Explor (no CVSS)
- [CVE-2007-2939](https://cve.now/CVE-2007-2939.md): Multiple PHP remote file inclusion vulnerabilities in Mazen's PHP Chat 3.0.0 allow remote attackers to execute arbitrary PHP code via a URL (no CVSS)
- [CVE-2007-2940](https://cve.now/CVE-2007-2940.md): Multiple PHP remote file inclusion vulnerabilities in FlaP 1.0b (1.0 Beta) allow remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2007-2941](https://cve.now/CVE-2007-2941.md): Multiple PHP remote file inclusion vulnerabilities in the creator in vBulletin Google Yahoo Site Map (vBGSiteMap) 2.41 for vBulletin allow r (no CVSS)
- [CVE-2007-2942](https://cve.now/CVE-2007-2942.md): SQL injection vulnerability in user.php in My Little Forum 1.7 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2007-2943](https://cve.now/CVE-2007-2943.md): PHP remote file inclusion vulnerability in class/class.php in Webavis 0.1.1 allows remote attackers to execute arbitrary PHP code via a URL (no CVSS)
- [CVE-2007-2944](https://cve.now/CVE-2007-2944.md): WabCMS 1.0 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a dat (no CVSS)
- [CVE-2007-2945](https://cve.now/CVE-2007-2945.md): RMForum stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a databa (no CVSS)
- [CVE-2007-2946](https://cve.now/CVE-2007-2946.md): Buffer overflow in a certain ActiveX control in LeadTools Raster Dialog File\_D Object (LTRDFD14e.DLL) 14.5.0.44 allows remote attackers to c (no CVSS)
- [CVE-2007-2947](https://cve.now/CVE-2007-2947.md): Multiple PHP remote file inclusion vulnerabilities in OpenBASE Alpha 0.6 allow remote attackers to execute arbitrary PHP code via a URL in t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-05-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.