# CVEs published 2007-06-04

24 CVEs were published on June 4, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-1862](https://cve.now/CVE-2007-1862.md): The recall\_headers function in mod\_mem\_cache in Apache 2.2.4 does not properly copy all levels of header data, which can cause Apache to ret (no CVSS)
- [CVE-2007-2387](https://cve.now/CVE-2007-2387.md): Apple Xserve Lights-Out Management before Firmware Update 1.0 on Intel hardware does not require a password for remote access to IPMI, which (no CVSS)
- [CVE-2007-2872](https://cve.now/CVE-2007-2872.md): Multiple integer overflows in the chunk\_split function in PHP 5 before 5.2.3 and PHP 4 before 4.4.8 allow remote attackers to cause a denial (no CVSS)
- [CVE-2007-2994](https://cve.now/CVE-2007-2994.md): SQL injection vulnerability in news.php in DGNews 2.1 allows remote attackers to execute arbitrary SQL commands via the newsid parameter in (no CVSS)
- [CVE-2007-2995](https://cve.now/CVE-2007-2995.md): Unspecified vulnerability in sysmgt.websm.rte in IBM AIX 5.2.0 and 5.3.0 has unknown impact and attack vectors. (no CVSS)
- [CVE-2007-2996](https://cve.now/CVE-2007-2996.md): Unspecified vulnerability in perl.rte 5.8.0.10 through 5.8.0.95 on IBM AIX 5.2, and 5.8.2.10 through 5.8.2.50 on AIX 5.3, allows local users (no CVSS)
- [CVE-2007-2997](https://cve.now/CVE-2007-2997.md): Multiple SQL injection vulnerabilities in cgi-bin/reorder2.asp in SalesCart Shopping Cart allow remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2007-2998](https://cve.now/CVE-2007-2998.md): The Pascal run-time library (PAS$RTL.EXE) before 20070418 on OpenVMS for Integrity Servers 8.3, and PAS$RTL.EXE before 20070419 on OpenVMS A (no CVSS)
- [CVE-2007-2999](https://cve.now/CVE-2007-2999.md): Microsoft Windows Server 2003, when time restrictions are in effect for user accounts, generates different error messages for failed login a (no CVSS)
- [CVE-2007-3000](https://cve.now/CVE-2007-3000.md): Multiple SQL injection vulnerabilities in PHP JackKnife (PHPJK) allow remote attackers to execute arbitrary SQL commands via (1) the iCatego (no CVSS)
- [CVE-2007-3001](https://cve.now/CVE-2007-3001.md): Multiple cross-site scripting (XSS) vulnerabilities in PHP JackKnife (PHPJK) allow remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2007-3002](https://cve.now/CVE-2007-3002.md): PHP JackKnife (PHPJK) allows remote attackers to obtain sensitive information via (1) a request to index.php with an invalid value of the iP (no CVSS)
- [CVE-2007-3003](https://cve.now/CVE-2007-3003.md): Multiple SQL injection vulnerabilities in myBloggie 2.1.6 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) c (no CVSS)
- [CVE-2007-3006](https://cve.now/CVE-2007-3006.md): Buffer overflow in Acoustica MP3 CD Burner 4.32 allows user-assisted remote attackers to execute arbitrary code via a .asx playlist file wit (no CVSS)
- [CVE-2007-3007](https://cve.now/CVE-2007-3007.md): PHP 5 before 5.2.3 does not enforce the open\_basedir or safe\_mode restriction in certain cases, which allows context-dependent attackers to (no CVSS)
- [CVE-2007-3008](https://cve.now/CVE-2007-3008.md): Mbedthis AppWeb before 2.2.2 enables the HTTP TRACE method, which has unspecified impact probably related to remote information leaks and cr (no CVSS)
- [CVE-2007-3009](https://cve.now/CVE-2007-3009.md): Format string vulnerability in the MprLogToFile::logEvent function in Mbedthis AppWeb 2.0.5-4, when the build supports logging but the confi (no CVSS)
- [CVE-2007-1593](https://cve.now/CVE-2007-1593.md): The administrative service in Symantec Veritas Volume Replicator (VVR) for Windows 3.1 through 4.3, and VVR for Unix 3.5 through 5.0, in Sym (no CVSS)
- [CVE-2007-2279](https://cve.now/CVE-2007-2279.md): The Scheduler Service (VxSchedService.exe) in Symantec Storage Foundation for Windows 5.0 allows remote attackers to bypass authentication a (no CVSS)
- [CVE-2007-2452](https://cve.now/CVE-2007-2452.md): Heap-based buffer overflow in the visit\_old\_format function in locate/locate.c in locate in GNU findutils before 4.2.31 might allow context- (no CVSS)
- [CVE-2007-2513](https://cve.now/CVE-2007-2513.md): Novell GroupWise 7 before SP2 20070524, and GroupWise 6 before 6.5 post-SP6 20070522, allows remote attackers to obtain credentials via a ma (no CVSS)
- [CVE-2007-2991](https://cve.now/CVE-2007-2991.md): Cross-site scripting (XSS) vulnerability in includes/send.inc.php in Evenzia CMS allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2007-2992](https://cve.now/CVE-2007-2992.md): Multiple SQL injection vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow remote attackers to ex (no CVSS)
- [CVE-2007-2993](https://cve.now/CVE-2007-2993.md): Multiple cross-site scripting (XSS) vulnerabilities in OmegaMw7.asp in OMEGA (aka Omegasoft) INterneSErvicesLosungen (INSEL) allow remote at (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-06-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.