# CVEs published 2007-06-20 19 CVEs were published on June 20, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2005-4846](https://cve.now/CVE-2005-4846.md): Format string vulnerability in Logger.cc for Spey 0.3.3 allows attackers to cause a denial of service (crash) and possibly execute arbitrary (no CVSS) - [CVE-2005-4847](https://cve.now/CVE-2005-4847.md): Unspecified vulnerability in Spey 0.3.3 has unknown impact and attack vectors related to "A number of security holes which could lead to com (no CVSS) - [CVE-2007-3298](https://cve.now/CVE-2007-3298.md): SQL injection vulnerability in Spey before 0.4.1 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related t (no CVSS) - [CVE-2007-3299](https://cve.now/CVE-2007-3299.md): Cross-site scripting (XSS) vulnerability in AWFFull before 3.7.4, when AllSearchStr (aka the All Search Terms report) is enabled, allows rem (no CVSS) - [CVE-2007-3300](https://cve.now/CVE-2007-3300.md): Multiple F-Secure anti-virus products for Microsoft Windows and Linux before 20070619 allow remote attackers to bypass scanning via a crafte (no CVSS) - [CVE-2007-3301](https://cve.now/CVE-2007-3301.md): SQL injection vulnerability in forum/include/error/autherror.cfm in FuseTalk allows remote attackers to execute arbitrary SQL commands via t (no CVSS) - [CVE-2007-3303](https://cve.now/CVE-2007-3303.md): Apache httpd 2.0.59 and 2.2.4, with the Prefork MPM module, allows local users to cause a denial of service via certain code sequences execu (no CVSS) - [CVE-2007-3304](https://cve.now/CVE-2007-3304.md): Apache httpd 1.3.37, 2.0.59, and 2.2.4 with the Prefork MPM module, allows local users to cause a denial of service by modifying the worker\_ (no CVSS) - [CVE-2007-3288](https://cve.now/CVE-2007-3288.md): Cross-site scripting (XSS) vulnerability in the skeltoac stats (Automattic Stats) 1.0 plugin for WordPress allows remote attackers to inject (no CVSS) - [CVE-2007-3289](https://cve.now/CVE-2007-3289.md): PHP remote file inclusion vulnerability in spaw/spaw\_control.class.php in the WiwiMod 0.4 module for XOOPS allows remote attackers to execut (no CVSS) - [CVE-2007-3290](https://cve.now/CVE-2007-3290.md): categoria.php in LiveCMS 3.4 and earlier allows remote attackers to obtain sensitive information via a ' (quote) character in the cid parame (no CVSS) - [CVE-2007-3291](https://cve.now/CVE-2007-3291.md): Cross-site scripting (XSS) vulnerability in LiveCMS 3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via an ar (no CVSS) - [CVE-2007-3292](https://cve.now/CVE-2007-3292.md): Unrestricted file upload vulnerability in LiveCMS 3.4 and earlier allows remote attackers to upload and execute arbitrary PHP code by specif (no CVSS) - [CVE-2007-3293](https://cve.now/CVE-2007-3293.md): SQL injection vulnerability in categoria.php in LiveCMS 3.4 and earlier allows remote attackers to execute arbitrary SQL commands via the ci (no CVSS) - [CVE-2007-3294](https://cve.now/CVE-2007-3294.md): Multiple buffer overflows in libtidy, as used in the Tidy extension for PHP 5.2.3 and possibly other products, allow context-dependent attac (no CVSS) - [CVE-2007-3295](https://cve.now/CVE-2007-3295.md): Directory traversal vulnerability in Yet another Bulletin Board (YaBB) 2.1 and earlier allows remote authenticated users to execute arbitrar (no CVSS) - [CVE-2007-3296](https://cve.now/CVE-2007-3296.md): The ThunderServer.webThunder.1 ActiveX control in xunlei Web Thunderbolt 1.7.3.109 allows remote attackers to download arbitrary files and c (no CVSS) - [CVE-2007-3297](https://cve.now/CVE-2007-3297.md): Multiple PHP remote file inclusion vulnerabilities in Musoo 0.21 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBA (no CVSS) - [CVE-2007-3285](https://cve.now/CVE-2007-3285.md): Mozilla Firefox before 2.0.0.5, when run on Windows, allows remote attackers to bypass file type checks and possibly execute programs via a (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-06-20 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.