# CVEs published 2007-06-12

37 CVEs were published on June 12, 2007: 1 critical, 0 high. Days are UTC.

- [CVE-2007-3181](https://cve.now/CVE-2007-3181.md): Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large p\_cnct\_count va (no CVSS)
- [CVE-2007-3188](https://cve.now/CVE-2007-3188.md): SQL injection vulnerability in down\_indir.asp in Fullaspsite GeometriX Download Portal allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2007-3189](https://cve.now/CVE-2007-3189.md): Cross-site scripting (XSS) vulnerability in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to inj (no CVSS)
- [CVE-2007-3190](https://cve.now/CVE-2007-3190.md): Multiple SQL injection vulnerabilities in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.3, when magic\_quotes\_gpc is disabl (no CVSS)
- [CVE-2007-3191](https://cve.now/CVE-2007-3191.md): Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to obtain configuration information via a direct request to ad (no CVSS)
- [CVE-2007-3192](https://cve.now/CVE-2007-3192.md): admin/setup.php in Just For Fun Network Management System (JFFNMS) 0.8.3 allows remote attackers to read and modify configuration settings v (no CVSS)
- [CVE-2007-3193](https://cve.now/CVE-2007-3193.md): lib/WikiUser/LDAP.php in PhpWiki before 1.3.13p1, when the configuration lacks a nonzero PASSWORD\_LENGTH\_MINIMUM, might allow remote attacke (no CVSS)
- [CVE-2007-3194](https://cve.now/CVE-2007-3194.md): Multiple PHP remote file inclusion vulnerabilities in myBloggie 2.1.5 allow remote attackers to execute arbitrary PHP code via a URL in the (CVSS 9.8)
- [CVE-2007-3195](https://cve.now/CVE-2007-3195.md): Cross-site scripting (XSS) vulnerability in index.php in ERFAN WIKI 1.00 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2007-3196](https://cve.now/CVE-2007-3196.md): SQL injection vulnerability in vBSupport.php in vSupport Integrated Ticket System 3.x.x allows remote attackers to execute arbitrary SQL com (no CVSS)
- [CVE-2007-3197](https://cve.now/CVE-2007-3197.md): SQL injection vulnerability in vBSupport.php in vBSupport 1.1 before 1.1a allows remote attackers to execute arbitrary SQL commands via unsp (no CVSS)
- [CVE-2007-3198](https://cve.now/CVE-2007-3198.md): Cross-site scripting (XSS) vulnerability in comments.php in Maran PHP Blog (Maran Blog), possibly only versions before 20070610, allows remo (no CVSS)
- [CVE-2007-3199](https://cve.now/CVE-2007-3199.md): Unrestricted file upload vulnerability in Link Request Contact Form 3.4 allows remote attackers to execute arbitrary PHP code by uploading a (no CVSS)
- [CVE-2007-3200](https://cve.now/CVE-2007-3200.md): NMASINST in Novell Modular Authentication Service (NMAS) 3.1.2 and earlier on NetWare logs its invoking command line to NMASINST.LOG, which (no CVSS)
- [CVE-2007-3201](https://cve.now/CVE-2007-3201.md): Visual truncation vulnerability in Windows Privacy Tray (WinPT) 1.2.0 allows user-assisted remote attackers to install a key listed under th (no CVSS)
- [CVE-2007-3202](https://cve.now/CVE-2007-3202.md): Cross-site scripting (XSS) vulnerability in the rich text editor in Webwiz allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2007-3203](https://cve.now/CVE-2007-3203.md): Stack-based buffer overflow in smtpdll.dll in the SMTP service in 602Pro LAN SUITE 2003 2003.0.03.0828 allows remote attackers to execute ar (no CVSS)
- [CVE-2007-3204](https://cve.now/CVE-2007-3204.md): SQL injection vulnerability in auth.php in Just For Fun Network Management System (JFFNMS) 0.8.4-pre2 allows remote attackers to execute arb (no CVSS)
- [CVE-2007-3185](https://cve.now/CVE-2007-3185.md): Apple Safari Beta 3.0.1 for Windows public beta allows remote attackers to cause a denial of service (crash) via unspecified DHTML manipulat (no CVSS)
- [CVE-2007-3186](https://cve.now/CVE-2007-3186.md): Apple Safari Beta 3.0.1 for Windows allows remote attackers to execute arbitrary commands via shell metacharacters in a URI in the SRC of an (no CVSS)
- [CVE-2007-3187](https://cve.now/CVE-2007-3187.md): Multiple unspecified vulnerabilities in Apple Safari for Windows allow remote attackers to cause a denial of service or execute arbitrary co (no CVSS)
- [CVE-2007-0245](https://cve.now/CVE-2007-0245.md): Heap-based buffer overflow in OpenOffice.org (OOo) 2.2.1 and earlier allows remote attackers to execute arbitrary code via a RTF file with a (no CVSS)
- [CVE-2007-2227](https://cve.now/CVE-2007-2227.md): The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition "no (no CVSS)
- [CVE-2007-3184](https://cve.now/CVE-2007-3184.md): Cisco Trust Agent (CTA) before 2.1.104.0, when running on MacOS X, allows attackers with physical access to bypass authentication and modify (no CVSS)
- [CVE-2007-2219](https://cve.now/CVE-2007-2219.md): Unspecified vulnerability in the Win32 API on Microsoft Windows 2000, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute (no CVSS)
- [CVE-2007-2225](https://cve.now/CVE-2007-2225.md): A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing M (no CVSS)
- [CVE-2007-0218](https://cve.now/CVE-2007-0218.md): Microsoft Internet Explorer 5.01 and 6 allows remote attackers to execute arbitrary code by instantiating certain COM objects from Urlmon.dl (no CVSS)
- [CVE-2007-0934](https://cve.now/CVE-2007-0934.md): Unspecified vulnerability in Microsoft Visio 2002 allows remote user-assisted attackers to execute arbitrary code via a Visio (.VSD, VSS, .V (no CVSS)
- [CVE-2007-0936](https://cve.now/CVE-2007-0936.md): Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-assisted attackers to execute arbitrary code via a Visio (.VS (no CVSS)
- [CVE-2007-1750](https://cve.now/CVE-2007-1750.md): Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via a crafted Cascading Style S (no CVSS)
- [CVE-2007-1751](https://cve.now/CVE-2007-1751.md): Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to access an unini (no CVSS)
- [CVE-2007-2218](https://cve.now/CVE-2007-2218.md): Unspecified vulnerability in the Windows Schannel Security Package for Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, allo (no CVSS)
- [CVE-2007-2222](https://cve.now/CVE-2007-2222.md): Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as used by Microsoft Inter (no CVSS)
- [CVE-2007-2229](https://cve.now/CVE-2007-2229.md): Microsoft Windows Vista uses insecure default permissions for unspecified "local user information data stores" in the registry and the file (no CVSS)
- [CVE-2007-3027](https://cve.now/CVE-2007-3027.md): Race condition in Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer (no CVSS)
- [CVE-2007-2796](https://cve.now/CVE-2007-2796.md): Arris Cadant C3 CMTS allows remote attackers to cause a denial of service (service termination) via a malformed IP packet with an invalid IP (no CVSS)
- [CVE-2007-3180](https://cve.now/CVE-2007-3180.md): Buffer overflow in Help and Support Center before 4.4 C on HP Windows systems allows remote attackers to read or write arbitrary files via u (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-06-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.