# CVEs published 2007-06-01 31 CVEs were published on June 1, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-2984](https://cve.now/CVE-2007-2984.md): Multiple stack-based buffer overflows in the Media Technology Group CDPass ActiveX control in CDPass.dll allow remote attackers to execute a (no CVSS) - [CVE-2007-2985](https://cve.now/CVE-2007-2985.md): Pheap 2.0 allows remote attackers to bypass authentication by setting a pheap\_login cookie value to the administrator's username, which can (no CVSS) - [CVE-2007-2986](https://cve.now/CVE-2007-2986.md): PHP remote file inclusion vulnerability in lib/live\_status.lib.php in AdminBot MX 9.0.5 allows remote attackers to execute arbitrary PHP cod (no CVSS) - [CVE-2007-2987](https://cve.now/CVE-2007-2987.md): Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to execute arbitrary co (no CVSS) - [CVE-2007-2988](https://cve.now/CVE-2007-2988.md): A certain admin script in Inout Meta Search Engine sends a redirect to the web browser but does not exit when administrative credentials are (no CVSS) - [CVE-2007-2989](https://cve.now/CVE-2007-2989.md): The libike library in Sun Solaris 9 before 20070529 contains a logic error related to a certain pointer, which allows remote attackers to ca (no CVSS) - [CVE-2007-2990](https://cve.now/CVE-2007-2990.md): Unspecified vulnerability in inetd in Sun Solaris 10 before 20070529 allows local users to cause a denial of service (daemon termination) vi (no CVSS) - [CVE-2007-2917](https://cve.now/CVE-2007-2917.md): Multiple buffer overflows in a certain ActiveX control in odapi.dll in Authentium Command Antivirus before 4.93.8 allow remote attackers to (no CVSS) - [CVE-2007-2918](https://cve.now/CVE-2007-2918.md): Multiple stack-based buffer overflows in ActiveX controls (1) VibeC in (a) vibecontrol.dll, (2) CallManager and (3) ViewerClient in (b) Star (no CVSS) - [CVE-2007-2968](https://cve.now/CVE-2007-2968.md): Cross-site scripting (XSS) vulnerability in register.php in cpCommerce 1.1.0 and earlier allows remote attackers to inject arbitrary web scr (no CVSS) - [CVE-2007-2969](https://cve.now/CVE-2007-2969.md): PHP remote file inclusion vulnerability in newsletter.php in WAnewsletter 2.1.3 and earlier allows remote attackers to execute arbitrary PHP (no CVSS) - [CVE-2007-2970](https://cve.now/CVE-2007-2970.md): Multiple cross-site scripting (XSS) vulnerabilities in cgi/block.cgi in 8e6 R3000 Internet Filter allow remote attackers to inject arbitrary (no CVSS) - [CVE-2007-2971](https://cve.now/CVE-2007-2971.md): SQL injection vulnerability in getnewsitem.php in gCards 1.46 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS) - [CVE-2007-2972](https://cve.now/CVE-2007-2972.md): The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service (application crash (no CVSS) - [CVE-2007-2973](https://cve.now/CVE-2007-2973.md): Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a mal (no CVSS) - [CVE-2007-2974](https://cve.now/CVE-2007-2974.md): Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code vi (no CVSS) - [CVE-2007-2975](https://cve.now/CVE-2007-2975.md): The admin console in Ignite Realtime Openfire 3.3.0 and earlier (formerly Wildfire) does not properly specify a filter mapping in web.xml, w (no CVSS) - [CVE-2007-2976](https://cve.now/CVE-2007-2976.md): Centrinity FirstClass 8.3 and earlier, and Server and Internet Services 8.0 and earlier, do not properly handle a URL with a null ("%00") ch (no CVSS) - [CVE-2007-2977](https://cve.now/CVE-2007-2977.md): Buffer overflow in the receive function in submit/submitcommon.c in the submit daemon in DOMjudge before 2.0.0RC1 allows remote attackers to (no CVSS) - [CVE-2007-2978](https://cve.now/CVE-2007-2978.md): Session fixation vulnerability in eggblog 3.1.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID paramete (no CVSS) - [CVE-2007-2979](https://cve.now/CVE-2007-2979.md): Techno Dreams Web Directory / Search Engine 2.0 stores sensitive information under the web root with insufficient access control, which allo (no CVSS) - [CVE-2007-2980](https://cve.now/CVE-2007-2980.md): Heap-based buffer overflow in a certain ActiveX control in LEADTOOLS LEAD Raster ISIS Object (LTRIS14e.DLL) 14.5.0.44 allows remote attacker (no CVSS) - [CVE-2007-2981](https://cve.now/CVE-2007-2981.md): Buffer overflow in a certain ActiveX control in LEAD Technologies LEADTOOLS Raster OCR Document Object Library (ltrdc14e.dll) 14.5.0.44 allo (no CVSS) - [CVE-2007-2982](https://cve.now/CVE-2007-2982.md): Multiple buffer overflows in the British Telecommunications Business Connect webhelper ActiveX control before 1.0.0.7 in btbconnectwebcontro (no CVSS) - [CVE-2007-0328](https://cve.now/CVE-2007-0328.md): The DWUpdateService ActiveX control in the agent (agent.exe) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allows remote (no CVSS) - [CVE-2007-1362](https://cve.now/CVE-2007-1362.md): Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to cause a denial of se (no CVSS) - [CVE-2007-2867](https://cve.now/CVE-2007-2867.md): Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5 (no CVSS) - [CVE-2007-2868](https://cve.now/CVE-2007-2868.md): Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before (no CVSS) - [CVE-2007-2869](https://cve.now/CVE-2007-2869.md): The form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12, 2.x before 2.0.0.4, and possibly earlier versions, allows remote att (no CVSS) - [CVE-2007-2870](https://cve.now/CVE-2007-2870.md): Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to bypass the same-orig (no CVSS) - [CVE-2007-2871](https://cve.now/CVE-2007-2871.md): Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to spoof or hide the br (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-06-01 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.