# CVEs published 2007-06-06

58 CVEs were published on June 6, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-2919](https://cve.now/CVE-2007-2919.md): Multiple stack-based buffer overflows in the FViewerLoading ActiveX control (FlipViewerX.dll) in E-Book Systems FlipViewer before 4.1 allow (no CVSS)
- [CVE-2007-3095](https://cve.now/CVE-2007-3095.md): Unspecified vulnerability in Symantec Reporting Server 1.0.197.0, and other versions before 1.0.224.0, as used in Symantec Client Security 3 (no CVSS)
- [CVE-2007-3096](https://cve.now/CVE-2007-3096.md): Directory traversal vulnerability in login.php in PBLang (PBL) 4.67.16.a and earlier, when magic\_quotes\_gpc is disabled, allows remote attac (no CVSS)
- [CVE-2007-3097](https://cve.now/CVE-2007-3097.md): my.activation.php3 in F5 FirePass 4100 SSL VPN allows remote attackers to execute arbitrary shell commands via shell metacharacters in the u (no CVSS)
- [CVE-2007-3098](https://cve.now/CVE-2007-3098.md): The SNMPc Server (crserv.exe) process in Castle Rock Computing SNMPc before 7.0.19 allows remote attackers to cause a denial of service (cra (no CVSS)
- [CVE-2007-0068](https://cve.now/CVE-2007-0068.md): IBM Lotus Domino 7.0.x before 7.0.3 does not revalidate the signature on a signed scheduled agent after the agent is modified, which allows (no CVSS)
- [CVE-2007-2863](https://cve.now/CVE-2007-2863.md): Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allow (no CVSS)
- [CVE-2007-2864](https://cve.now/CVE-2007-2864.md): Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allow (no CVSS)
- [CVE-2007-3089](https://cve.now/CVE-2007-3089.md): Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of a (no CVSS)
- [CVE-2007-3091](https://cve.now/CVE-2007-3091.md): Race condition in Microsoft Internet Explorer 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, (no CVSS)
- [CVE-2007-3092](https://cve.now/CVE-2007-3092.md): Microsoft Internet Explorer 6 allows remote attackers to spoof the URL bar, and page properties including SSL certificates, by interrupting (no CVSS)
- [CVE-2007-3093](https://cve.now/CVE-2007-3093.md): Unspecified vulnerability in the logging mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through 10 before 20070605 allows re (no CVSS)
- [CVE-2007-3094](https://cve.now/CVE-2007-3094.md): Unspecified vulnerability in the authentication mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through 10 before 20070605 al (no CVSS)
- [CVE-2007-2237](https://cve.now/CVE-2007-2237.md): Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent attackers to cause a denial of service (crash) via (no CVSS)
- [CVE-2000-1243](https://cve.now/CVE-2000-1243.md): Privacy leak in Dansie Shopping Cart 3.04, and probably earlier versions, sends sensitive information such as user credentials to an e-mail (no CVSS)
- [CVE-2007-0067](https://cve.now/CVE-2007-0067.md): Unspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x before 7.0.3 allows remote attackers to cause a (no CVSS)
- [CVE-2007-2419](https://cve.now/CVE-2007-2419.md): Multiple buffer overflows in an ActiveX control (boisweb.dll) in Macrovision FLEXnet Connect 6.0 and Update Service 3.x to 5.x allow remote (no CVSS)
- [CVE-2007-2514](https://cve.now/CVE-2007-2514.md): Stack-based buffer overflow in XferWan.exe as used in multiple products including (1) Symantec Discovery 6.5, (2) Numara Asset Manager 8.0, (no CVSS)
- [CVE-2007-3069](https://cve.now/CVE-2007-3069.md): xscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allows attackers with phy (no CVSS)
- [CVE-2007-3070](https://cve.now/CVE-2007-3070.md): Cross-site scripting (XSS) vulnerability in index.php in BDigital Web Solutions WebStudio allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2007-3071](https://cve.now/CVE-2007-3071.md): Buffer overflow in the GetWebStoreURL function in a certain ActiveX control in eSellerateControl365.dll 3.6.5.0 in eSellerate SDK allows use (no CVSS)
- [CVE-2007-3072](https://cve.now/CVE-2007-3072.md): Directory traversal vulnerability in Mozilla Firefox before 2.0.0.4 on Windows allows remote attackers to read arbitrary files via ..%5C (do (no CVSS)
- [CVE-2007-3073](https://cve.now/CVE-2007-3073.md): Directory traversal vulnerability in Mozilla Firefox 2.0.0.4 and earlier on Mac OS X and Unix allows remote attackers to read arbitrary file (no CVSS)
- [CVE-2007-3074](https://cve.now/CVE-2007-3074.md): Mozilla Firefox 2.0.0.4 and earlier allows remote attackers to read files in the local Firefox installation directory via a resource:// URI. (no CVSS)
- [CVE-2007-3075](https://cve.now/CVE-2007-3075.md): Directory traversal vulnerability in Microsoft Internet Explorer allows remote attackers to read arbitrary files via directory traversal seq (no CVSS)
- [CVE-2007-3076](https://cve.now/CVE-2007-3076.md): A certain ActiveX control in sasatl.dll in Zenturi ProgramChecker allows remote attackers to download arbitrary files to the client system v (no CVSS)
- [CVE-2007-3077](https://cve.now/CVE-2007-3077.md): SQL injection vulnerability in listmembers.php in EQdkp 1.3.2 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2007-3078](https://cve.now/CVE-2007-3078.md): Multiple cross-site scripting (XSS) vulnerabilities in Aigaion before 1.3.3 allow remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2007-3079](https://cve.now/CVE-2007-3079.md): listmembers.php in EQdkp 1.3.2c and earlier allows remote attackers to obtain sensitive information via an invalid compare parameter, which (no CVSS)
- [CVE-2007-3080](https://cve.now/CVE-2007-3080.md): SQL injection vulnerability in haberoku.asp in Hunkaray Okul Portaly 1.1 allows remote attackers to execute arbitrary SQL commands via the i (no CVSS)
- [CVE-2007-3081](https://cve.now/CVE-2007-3081.md): PHP remote file inclusion vulnerability in sampleecommerce.php in Comdev eCommerce 4.1 allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2007-3082](https://cve.now/CVE-2007-3082.md): Directory traversal vulnerability in sendcard.php in Sendcard 3.4.1 and earlier allows remote attackers to include and execute arbitrary loc (no CVSS)
- [CVE-2007-3083](https://cve.now/CVE-2007-3083.md): Z-Blog 1.7 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a dat (no CVSS)
- [CVE-2007-3084](https://cve.now/CVE-2007-3084.md): PHP remote file inclusion vulnerability in sampleblogger.php in Comdev Web Blogger 4.1 allows remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2007-3085](https://cve.now/CVE-2007-3085.md): Multiple PHP remote file inclusion vulnerabilities in PBSite allow remote attackers to execute arbitrary PHP code via a URL in the (1) dbpat (no CVSS)
- [CVE-2007-3086](https://cve.now/CVE-2007-3086.md): Unrestricted critical resource lock in Agnitum Outpost Firewall PRO 4.0 1007.591.145 and earlier allows local users to cause a denial of ser (no CVSS)
- [CVE-2007-3087](https://cve.now/CVE-2007-3087.md): Peercast places a cleartext password in a query string, which might allow attackers to obtain sensitive information by sniffing the network, (no CVSS)
- [CVE-2007-3088](https://cve.now/CVE-2007-3088.md): SQL injection vulnerability in index.php in Comicsense allows remote attackers to execute arbitrary SQL commands via the epi parameter. (no CVSS)
- [CVE-2007-3049](https://cve.now/CVE-2007-3049.md): Cross-site scripting (XSS) vulnerability in index.php in Buttercup web file manager (BWFM) May 2007 allows remote attackers to inject arbitr (no CVSS)
- [CVE-2007-3050](https://cve.now/CVE-2007-3050.md): Session fixation vulnerability in chameleon cms 3.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID para (no CVSS)
- [CVE-2007-3051](https://cve.now/CVE-2007-3051.md): SQL injection vulnerability in inc/class\_users.php in RevokeSoft RevokeBB 1.0 RC4 and earlier allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2007-3052](https://cve.now/CVE-2007-3052.md): SQL injection vulnerability in index.php in the PNphpBB2 1.2i and earlier module for PostNuke allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2007-3053](https://cve.now/CVE-2007-3053.md): Session fixation vulnerability in Calimero.CMS 3.3.1232 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID (no CVSS)
- [CVE-2007-3054](https://cve.now/CVE-2007-3054.md): Cross-site scripting (XSS) vulnerability in search.php in Codelib Linker 2.0.4 and earlier allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2007-3055](https://cve.now/CVE-2007-3055.md): Cross-site scripting (XSS) vulnerability in index.php in Codelib Linker 2.0.4 and earlier allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2007-3056](https://cve.now/CVE-2007-3056.md): Cross-site scripting (XSS) vulnerability in filedetails.php in WebSVN 2.0rc4, and possibly earlier, allows remote attackers to inject arbitr (no CVSS)
- [CVE-2007-3057](https://cve.now/CVE-2007-3057.md): PHP remote file inclusion vulnerability in include/wysiwyg/spaw\_control.class.php in the icontent 4.5 module for XOOPS allows remote attacke (no CVSS)
- [CVE-2007-3058](https://cve.now/CVE-2007-3058.md): Multiple PHP remote file inclusion vulnerabilities in Madirish Webmail 2.0 allow remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2007-3059](https://cve.now/CVE-2007-3059.md): SendCard 3.3.0 allows remote attackers to obtain sensitive information via an invalid sc\_language parameter to sendcard.php, which reveals t (no CVSS)
- [CVE-2007-3060](https://cve.now/CVE-2007-3060.md): Multiple cross-site scripting (XSS) vulnerabilities in PHP Live! 3.2.2 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2007-3061](https://cve.now/CVE-2007-3061.md): Cactushop 6 and earlier stores sensitive information under the web root with insufficient access control, which allows remote attackers to d (no CVSS)
- [CVE-2007-3062](https://cve.now/CVE-2007-3062.md): Cross-site scripting (XSS) vulnerability in HP System Management Homepage (SMH) before 2.1.2 running on Linux and Windows allows remote atta (no CVSS)
- [CVE-2007-3063](https://cve.now/CVE-2007-3063.md): SQL injection vulnerability in diary.php in My Databook allows remote attackers to execute arbitrary SQL commands via the delete parameter. (no CVSS)
- [CVE-2007-3064](https://cve.now/CVE-2007-3064.md): Cross-site scripting (XSS) vulnerability in diary.php in My Databook allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2007-3065](https://cve.now/CVE-2007-3065.md): SQL injection vulnerability in viewimage.php in Particle Soft Particle Gallery 1.0.1 and earlier allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2007-3066](https://cve.now/CVE-2007-3066.md): Multiple PHP remote file inclusion vulnerabilities in php(Reactor) 1.2.7 and earlier allow remote attackers to execute arbitrary PHP code vi (no CVSS)
- [CVE-2007-3067](https://cve.now/CVE-2007-3067.md): Cross-site scripting (XSS) vulnerability in the Attunement and Key Tracker 0.95 and earlier plugin for EQdkp allows remote attackers to inje (no CVSS)
- [CVE-2007-3068](https://cve.now/CVE-2007-3068.md): Stack-based buffer overflow in DVD X Player 4.1 Professional allows remote attackers to execute arbitrary code via a PLF playlist containing (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-06-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.