# CVEs published 2007-06-15

15 CVEs were published on June 15, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-3232](https://cve.now/CVE-2007-3232.md): The IBM TotalStorage DS400 with firmware 4.15 uses a blank password for the (1) root, (2) user, (3) manager, (4) administrator, and (5) oper (no CVSS)
- [CVE-2007-3233](https://cve.now/CVE-2007-3233.md): The TEC-IT TBarCode OCX ActiveX control (TBarCode7.ocx) 7.0.2.3524 allows remote attackers to overwrite arbitrary files via the SaveImage me (no CVSS)
- [CVE-2007-3234](https://cve.now/CVE-2007-3234.md): SQL injection vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to execute arbitrary SQL commands via the topic parame (no CVSS)
- [CVE-2007-3235](https://cve.now/CVE-2007-3235.md): Cross-site scripting (XSS) vulnerability in low.php in Fuzzylime Forum 1.0 allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)
- [CVE-2007-3236](https://cve.now/CVE-2007-3236.md): PHP remote file inclusion vulnerability in footer.php in the Horoscope 1.0 module for XOOPS allows remote attackers to execute arbitrary PHP (no CVSS)
- [CVE-2007-3237](https://cve.now/CVE-2007-3237.md): PHP remote file inclusion vulnerability in admin/spaw/spaw\_control.class.php in the TinyContent 1.5 module for XOOPS allows remote attackers (no CVSS)
- [CVE-2007-3238](https://cve.now/CVE-2007-3238.md): Cross-site scripting (XSS) vulnerability in functions.php in the default theme in WordPress 2.2 allows remote authenticated administrators t (no CVSS)
- [CVE-2007-3239](https://cve.now/CVE-2007-3239.md): Cross-site scripting (XSS) vulnerability in searchform.php in the AndyBlue theme before 20070607 for WordPress allows remote attackers to in (no CVSS)
- [CVE-2007-3240](https://cve.now/CVE-2007-3240.md): Cross-site scripting (XSS) vulnerability in 404.php in the Vistered-Little theme for WordPress allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2007-3241](https://cve.now/CVE-2007-3241.md): Cross-site scripting (XSS) vulnerability in blogroll.php in the cordobo-green-park theme for WordPress allows remote attackers to inject arb (no CVSS)
- [CVE-2007-3242](https://cve.now/CVE-2007-3242.md): The Menu Manager Mod for (1) web-app.net WebAPP (aka WebAPP NE) 0.9.9.3.3 through 0.9.9.8, and (2) web-app.org WebAPP before 0.9.9.6, allows (no CVSS)
- [CVE-2007-3243](https://cve.now/CVE-2007-3243.md): Cross-site scripting (XSS) vulnerability in bb-login.php in bbPress 0.8.1 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2007-3244](https://cve.now/CVE-2007-3244.md): SQL injection vulnerability in bb-includes/formatting-functions.php in bbPress before 0.8.1 might allow remote attackers to execute arbitrar (no CVSS)
- [CVE-2007-3245](https://cve.now/CVE-2007-3245.md): IRC Services before 5.0.62, and 5.1 before 5.1pre3, allows remote attackers to disconnect users with guest nicknames by linking a guest nick (no CVSS)
- [CVE-2007-3246](https://cve.now/CVE-2007-3246.md): The do\_set\_password function in modules/chanserv/set.c in IRC Services before 5.0.60 preserves channel founder privileges across a channel p (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-06-15
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.