# CVEs published 2007-06-18

10 CVEs were published on June 18, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-2923](https://cve.now/CVE-2007-2923.md): The launch method in the LocalExec ActiveX control (LocalExec.ocx) in Novell exteNd Director 4.1 and Portal Services allows remote attackers (no CVSS)
- [CVE-2007-3101](https://cve.now/CVE-2007-3101.md): Multiple cross-site scripting (XSS) vulnerabilities in certain JSF applications in Apache MyFaces Tomahawk before 1.1.6 allow remote attacke (no CVSS)
- [CVE-2007-3207](https://cve.now/CVE-2007-3207.md): Buffer overflow in the NFS mount daemon (XNFS.NLM) in Novell NetWare 6.5 SP6, and probably earlier, allows remote attackers to cause a denia (no CVSS)
- [CVE-2007-3247](https://cve.now/CVE-2007-3247.md): SQL injection vulnerability in VirtueMart before 1.0.11 allows remote attackers to execute arbitrary SQL commands via unspecified parameters (no CVSS)
- [CVE-2007-3248](https://cve.now/CVE-2007-3248.md): Unspecified vulnerability in Sun Solaris 10 before 20070614, when IPv6 interfaces are present but not configured for IPsec, allows remote at (no CVSS)
- [CVE-2007-3249](https://cve.now/CVE-2007-3249.md): Cross-site scripting (XSS) vulnerability in mod\_lettermansubscribe.php in the Letterman Subscriber (mod\_letterman) before 1.2.5 module for J (no CVSS)
- [CVE-2007-3250](https://cve.now/CVE-2007-3250.md): SQL injection vulnerability in mod\_banners.php in Elxis CMS before 2006.4 20070613 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2007-3251](https://cve.now/CVE-2007-3251.md): Multiple directory traversal vulnerabilities in e-Vision CMS 2.02 and earlier allow remote attackers to (1) include and execute arbitrary lo (no CVSS)
- [CVE-2007-3252](https://cve.now/CVE-2007-3252.md): PortalApp stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a data (no CVSS)
- [CVE-2007-3253](https://cve.now/CVE-2007-3253.md): Multiple unspecified vulnerabilities in Astaro Security Gateway (ASG) before 7.005 allow remote attackers to cause a denial of service via ( (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-06-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.