# CVEs published 2007-06-21

36 CVEs were published on June 21, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-3341](https://cve.now/CVE-2007-3341.md): Unspecified vulnerability in the FTP implementation in Microsoft Internet Explorer allows remote attackers to "see a valid memory address" v (no CVSS)
- [CVE-2007-3342](https://cve.now/CVE-2007-3342.md): Multiple cross-site scripting (XSS) vulnerabilities in Movable Type (MT) before 3.34 allow remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2007-3334](https://cve.now/CVE-2007-3334.md): Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingr (no CVSS)
- [CVE-2007-3340](https://cve.now/CVE-2007-3340.md): BugHunter HTTP SERVER (httpsv.exe) 1.6.2 allows remote attackers to cause a denial of service (application crash) via a large number of requ (no CVSS)
- [CVE-2007-3339](https://cve.now/CVE-2007-3339.md): Multiple cross-site scripting (XSS) vulnerabilities in forum/include/error/autherror.cfm in FuseTalk Basic, Standard, Enterprise, and ColdFu (no CVSS)
- [CVE-2007-2833](https://cve.now/CVE-2007-2833.md): Emacs 21 allows user-assisted attackers to cause a denial of service (crash) via certain crafted images, as demonstrated via a GIF image in (no CVSS)
- [CVE-2007-3332](https://cve.now/CVE-2007-3332.md): Directory traversal vulnerability in Satellite.php in Satel Lite for PhpNuke allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2007-3335](https://cve.now/CVE-2007-3335.md): Multiple SQL injection vulnerabilities in the admin panel in PHPEcho CMS before 1.6 allow remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2007-3312](https://cve.now/CVE-2007-3312.md): Directory traversal vulnerability in admin/plugin\_manager.php in Jasmine CMS 1.0 allows remote authenticated administrators to include and e (no CVSS)
- [CVE-2007-3313](https://cve.now/CVE-2007-3313.md): Multiple SQL injection vulnerabilities in Jasmine CMS 1.0 allow remote attackers to execute arbitrary SQL commands via (1) the login\_usernam (no CVSS)
- [CVE-2007-3314](https://cve.now/CVE-2007-3314.md): Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (English Trial), and 2.0 wi (no CVSS)
- [CVE-2007-3315](https://cve.now/CVE-2007-3315.md): Multiple PHP remote file inclusion vulnerabilities in YourFreeScreamer 1.0, when register\_globals is enabled, allow remote attackers to exec (no CVSS)
- [CVE-2007-3316](https://cve.now/CVE-2007-3316.md): Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of ser (no CVSS)
- [CVE-2007-3317](https://cve.now/CVE-2007-3317.md): The Session Initiation Protocol (SIP) User Access Client (UAC) message parsing module in Avaya one-X Desktop Edition 2.1.0.70 and earlier al (no CVSS)
- [CVE-2007-3318](https://cve.now/CVE-2007-3318.md): Buffer overflow in the Session Initiation Protocol (SIP) User Access Client (UAC) message parsing module in Avaya one-X Desktop Edition 2.1. (no CVSS)
- [CVE-2007-3319](https://cve.now/CVE-2007-3319.md): The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware does not use the cnonce parameter in the Authorization header (no CVSS)
- [CVE-2007-3320](https://cve.now/CVE-2007-3320.md): The Avaya 4602SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware accepts SIP INVITE requests from arbitrary source IP addresse (no CVSS)
- [CVE-2007-3321](https://cve.now/CVE-2007-3321.md): The Avaya 4602 SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware allows remote attackers to cause a denial of service (device (no CVSS)
- [CVE-2007-3322](https://cve.now/CVE-2007-3322.md): The Avaya 4602 SW IP Phone (Model 4602D02A) with 2.2.2 and earlier SIP firmware uses a constant media port number for calls, which allows re (no CVSS)
- [CVE-2007-3323](https://cve.now/CVE-2007-3323.md): SQL injection vulnerability in comersus\_optReviewReadExec.asp in Comersus Shop Cart 7.07 allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2007-3324](https://cve.now/CVE-2007-3324.md): Multiple cross-site scripting (XSS) vulnerabilities in Comersus Cart 7.07 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2007-3325](https://cve.now/CVE-2007-3325.md): PHP remote file inclusion vulnerability in lib/language.php in LAN Management System (LMS) 1.9.6 and earlier allows remote attackers to exec (no CVSS)
- [CVE-2007-3326](https://cve.now/CVE-2007-3326.md): Multiple directory traversal vulnerabilities in vBulletin 3.x.x allow remote attackers to redirect visitors to arbitrary local files via a . (no CVSS)
- [CVE-2007-3327](https://cve.now/CVE-2007-3327.md): httpsv.exe in HTTP Server 1.6.2 allows remote attackers to obtain sensitive information (script source code) via a URI with a trailing %20 ( (no CVSS)
- [CVE-2007-3328](https://cve.now/CVE-2007-3328.md): Multiple cross-site scripting (XSS) vulnerabilities in Interact 2.4 beta 1 allow remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2007-3329](https://cve.now/CVE-2007-3329.md): Multiple array index errors in the (1) get\_intra\_block, (2) get\_inter\_block\_h263, and (3) get\_inter\_block\_mpeg functions in src/bitstream/mb (no CVSS)
- [CVE-2007-3330](https://cve.now/CVE-2007-3330.md): Cross-site scripting (XSS) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to inject arbitrary web script or HTML via a news (no CVSS)
- [CVE-2007-3331](https://cve.now/CVE-2007-3331.md): Cross-site request forgery (CSRF) vulnerability in STphp EasyNews PRO 4.0 allows remote attackers to change the admin password via (1) a cer (no CVSS)
- [CVE-2007-2398](https://cve.now/CVE-2007-2398.md): Apple Safari 3.0.1 beta (522.12.12) on Windows allows remote attackers to modify the window title and address bar while filling the main win (no CVSS)
- [CVE-2007-3311](https://cve.now/CVE-2007-3311.md): SQL injection vulnerability in print.php in the Articles 1.02 and earlier module for Xoops allows remote attackers to execute arbitrary SQL (no CVSS)
- [CVE-2007-3305](https://cve.now/CVE-2007-3305.md): Heap-based buffer overflow in Cerulean Studios Trillian 3.x before 3.1.6.0 allows remote attackers to execute arbitrary code via a message s (no CVSS)
- [CVE-2007-3306](https://cve.now/CVE-2007-3306.md): PHP remote file inclusion vulnerability in crontab/run\_billing.php in MiniBill 1.2.5 allows remote attackers to execute arbitrary PHP code v (no CVSS)
- [CVE-2007-3307](https://cve.now/CVE-2007-3307.md): SQL injection vulnerability in game\_listing.php in Solar Empire 2.9.1.1 and earlier allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2007-3308](https://cve.now/CVE-2007-3308.md): Simple Machines Forum (SMF) 1.1.2 uses a concatenation method with insufficient randomization when creating a WAV file CAPTCHA, which allows (no CVSS)
- [CVE-2007-3309](https://cve.now/CVE-2007-3309.md): Unspecified vulnerability in Simple Machines Forum (SMF) 1.1.2 allows remote attackers to execute arbitrary PHP code during (1) creation or (no CVSS)
- [CVE-2007-3310](https://cve.now/CVE-2007-3310.md): Cross-site scripting (XSS) vulnerability in arama.asp in TDizin allows remote attackers to inject arbitrary web script or HTML via the ara p (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-06-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.