# CVEs published 2007-06-22

35 CVEs were published on June 22, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-3372](https://cve.now/CVE-2007-3372.md): The Avahi daemon in Avahi before 0.6.20 allows attackers to cause a denial of service (exit) via empty TXT data over D-Bus, which triggers a (no CVSS)
- [CVE-2006-7207](https://cve.now/CVE-2006-7207.md): Buffer overflow in ageet AGEphone before 1.4.0 might allow remote attackers to have an unknown impact via unspecified vectors. (no CVSS)
- [CVE-2007-3336](https://cve.now/CVE-2007-3336.md): Multiple "pointer overwrite" vulnerabilities in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (formerly Comput (no CVSS)
- [CVE-2007-3337](https://cve.now/CVE-2007-3337.md): wakeup in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) products, allows local users to (no CVSS)
- [CVE-2007-3338](https://cve.now/CVE-2007-3338.md): Multiple stack-based buffer overflows in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA (Computer Associates) p (no CVSS)
- [CVE-2007-3343](https://cve.now/CVE-2007-3343.md): Cross-site scripting (XSS) vulnerability in RaidenHTTPD before 2.0.14 allows remote attackers to inject arbitrary web script or HTML via uns (no CVSS)
- [CVE-2007-3344](https://cve.now/CVE-2007-3344.md): Multiple cross-site scripting (XSS) vulnerabilities in netjukebox 4.01b allow remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2007-3345](https://cve.now/CVE-2007-3345.md): Multiple SQL injection vulnerabilities in index.php in PHPAccounts 0.5 allow remote attackers to execute arbitrary SQL commands via the (1) (no CVSS)
- [CVE-2007-3346](https://cve.now/CVE-2007-3346.md): Directory traversal vulnerability in index.php in PHPAccounts 0.5 allows remote attackers to include arbitrary local files via unspecified m (no CVSS)
- [CVE-2007-3347](https://cve.now/CVE-2007-3347.md): The D-Link DPH-540/DPH-541 phone accepts SIP INVITE messages that are not from the Call Server's IP address, which allows remote attackers t (no CVSS)
- [CVE-2007-3348](https://cve.now/CVE-2007-3348.md): The D-Link DPH-540/DPH-541 phone allows remote attackers to cause a denial of service (device outage) via a malformed SDP header in a SIP IN (no CVSS)
- [CVE-2007-3349](https://cve.now/CVE-2007-3349.md): The Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to (1) cause a denial of service (devi (no CVSS)
- [CVE-2007-3350](https://cve.now/CVE-2007-3350.md): AOL Instant Messenger (AIM) 6.1.32.1 on Windows XP allows remote attackers to cause a denial of service (application hang) via a flood of sp (no CVSS)
- [CVE-2007-3351](https://cve.now/CVE-2007-3351.md): The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a den (no CVSS)
- [CVE-2007-3352](https://cve.now/CVE-2007-3352.md): Cross-site scripting (XSS) vulnerability in the preview form in Stephen Ostermiller Contact Form before 2.00.02 allows remote attackers to i (no CVSS)
- [CVE-2007-3353](https://cve.now/CVE-2007-3353.md): PHP remote file inclusion vulnerability in includes/template.php in MyEvent 1.6 allows remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2007-3354](https://cve.now/CVE-2007-3354.md): Multiple SQL injection vulnerabilities in NetClassifieds Premium Edition allow remote attackers to execute arbitrary SQL commands via the s\_ (no CVSS)
- [CVE-2007-3355](https://cve.now/CVE-2007-3355.md): Multiple cross-site scripting (XSS) vulnerabilities in NetClassifieds Premium Edition allow remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2007-3356](https://cve.now/CVE-2007-3356.md): NetClassifieds Premium Edition allows remote attackers to obtain sensitive information via certain requests that reveal the path in an error (no CVSS)
- [CVE-2007-3357](https://cve.now/CVE-2007-3357.md): NetClassifieds Premium Edition does not use encryption for (1) stored passwords or (2) sensitive data, which might allow attackers to obtain (no CVSS)
- [CVE-2007-3358](https://cve.now/CVE-2007-3358.md): PHP remote file inclusion vulnerability in html/load\_lang.php in SerWeb 0.9.6 and earlier allows remote attackers to execute arbitrary PHP c (no CVSS)
- [CVE-2007-3359](https://cve.now/CVE-2007-3359.md): Multiple PHP remote file inclusion vulnerabilities in SerWeb 0.9.6 and earlier allow remote attackers to execute arbitrary PHP code via a UR (no CVSS)
- [CVE-2007-3360](https://cve.now/CVE-2007-3360.md): hook.c in BitchX 1.1-final allows remote IRC servers to execute arbitrary commands by sending a client certain data containing NICK and EXEC (no CVSS)
- [CVE-2007-3361](https://cve.now/CVE-2007-3361.md): The Nortel PC Client SIP Soft Phone 4.1 3.5.208\[20051015\] allows remote attackers to cause a denial of service (device crash) via a SIP mess (no CVSS)
- [CVE-2007-3362](https://cve.now/CVE-2007-3362.md): ageet AGEphone before 1.6.2, running on Windows Mobile 5 on the HTC HyTN Pocket PC device, allows remote attackers to (1) cause a denial of (no CVSS)
- [CVE-2007-3363](https://cve.now/CVE-2007-3363.md): Multiple unspecified vulnerabilities in ageet AGEphone before 1.6.3 allow remote attackers to have an unknown impact via malformed SIP packe (no CVSS)
- [CVE-2007-3364](https://cve.now/CVE-2007-3364.md): Cross-site scripting (XSS) vulnerability in the cgi-bin/post.mscgi sample page in MyServer 0.8.9 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2007-3365](https://cve.now/CVE-2007-3365.md): MyServer 0.8.9 and earlier does not properly handle uppercase characters in filename extensions, which allows remote attackers to obtain sen (no CVSS)
- [CVE-2007-3366](https://cve.now/CVE-2007-3366.md): Cross-site scripting (XSS) vulnerability in Simple CGI Wrapper (scgiwrap) in cPanel before 10.9.1, and 11.x before 11.4.19-R14378, allows re (no CVSS)
- [CVE-2007-3367](https://cve.now/CVE-2007-3367.md): Simple CGI Wrapper (scgiwrap) in cPanel before 10.9.1, and 11.x before 11.4.19-R14378, allows remote attackers to obtain sensitive informati (no CVSS)
- [CVE-2007-3368](https://cve.now/CVE-2007-3368.md): Buffer overflow in the HTTP server on the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ allows remote attackers to cause a denial (no CVSS)
- [CVE-2007-3369](https://cve.now/CVE-2007-3369.md): Buffer overflow in the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ and SIP version 1.6.3.0067 allows remote attackers to cause a (no CVSS)
- [CVE-2007-3370](https://cve.now/CVE-2007-3370.md): Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrary PHP code via a URL (no CVSS)
- [CVE-2007-3371](https://cve.now/CVE-2007-3371.md): PHP remote file inclusion vulnerability in plugins/widgets/htmledit/htmledit.php in Powl 0.94 allows remote attackers to execute arbitrary P (no CVSS)
- [CVE-2006-7206](https://cve.now/CVE-2006-7206.md): Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating a ADODB.Recordset o (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-06-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.