# CVEs published 2007-06-28

19 CVEs were published on June 28, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-3483](https://cve.now/CVE-2007-3483.md): Research in Motion BlackBerry Enterprise Server 4.0 through 4.1 has a default configuration that permits installation of arbitrary third-par (no CVSS)
- [CVE-2007-3484](https://cve.now/CVE-2007-3484.md): Cross-site scripting (XSS) vulnerability in search.php in Google Custom Search Engine allows remote attackers to inject arbitrary web script (CVSS 6.1)
- [CVE-2007-3485](https://cve.now/CVE-2007-3485.md): Multiple cross-site scripting (XSS) vulnerabilities in Yandex.Server allow remote attackers to inject arbitrary web script or HTML via the ( (no CVSS)
- [CVE-2007-3486](https://cve.now/CVE-2007-3486.md): Cross-site scripting (XSS) vulnerability in AltaVista search engine allows remote attackers to inject arbitrary web script or HTML via the t (no CVSS)
- [CVE-2007-2800](https://cve.now/CVE-2007-2800.md): index.php in eTicket 1.5.5.1 and earlier allows remote attackers to obtain sensitive information via the (1) name\[\], (2) email\[\], (3) phone\[ (no CVSS)
- [CVE-2007-3469](https://cve.now/CVE-2007-3469.md): Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local users to cause a denial of service (resou (no CVSS)
- [CVE-2007-3470](https://cve.now/CVE-2007-3470.md): Multiple unspecified vulnerabilities in the KSSL kernel module in Sun Solaris 10, when configured with the KSSL proxy, allow remote attacker (no CVSS)
- [CVE-2007-3471](https://cve.now/CVE-2007-3471.md): Buffer overflow in the dtsession Common Desktop Environment (CDE) Session Manager in Sun Solaris 8, 9, and 10 allows local users to execute (no CVSS)
- [CVE-2007-3472](https://cve.now/CVE-2007-3472.md): Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers t (no CVSS)
- [CVE-2007-3473](https://cve.now/CVE-2007-3473.md): The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of se (no CVSS)
- [CVE-2007-3474](https://cve.now/CVE-2007-3474.md): Multiple unspecified vulnerabilities in the GIF reader in the GD Graphics Library (libgd) before 2.0.35 have unspecified impact and user-ass (no CVSS)
- [CVE-2007-3475](https://cve.now/CVE-2007-3475.md): The GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of service (crash) via a GIF image tha (no CVSS)
- [CVE-2007-3476](https://cve.now/CVE-2007-3476.md): Array index error in gd\_gif\_in.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of (no CVSS)
- [CVE-2007-3477](https://cve.now/CVE-2007-3477.md): The (a) imagearc and (b) imagefilledarc functions in GD Graphics Library (libgd) before 2.0.35 allow attackers to cause a denial of service (no CVSS)
- [CVE-2007-3478](https://cve.now/CVE-2007-3478.md): Race condition in gdImageStringFTEx (gdft\_draw\_bitmap) in gdft.c in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remot (no CVSS)
- [CVE-2007-3479](https://cve.now/CVE-2007-3479.md): Stack-based buffer overflow in PCSoft WinDEV 11 (01F110053p) allows user-assisted remote attackers to execute arbitrary code via a long stri (no CVSS)
- [CVE-2007-3480](https://cve.now/CVE-2007-3480.md): PCSoft WinDEV 11 (01F110053p) allows user-assisted remote attackers to cause a denial of service (infinite loop and resource consumption) vi (no CVSS)
- [CVE-2007-3481](https://cve.now/CVE-2007-3481.md): Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to bypass the Same Origin Policy and access restri (no CVSS)
- [CVE-2007-3482](https://cve.now/CVE-2007-3482.md): Cross-domain vulnerability in Apple Safari for Windows 3.0.1 allows remote attackers to bypass the "same origin policy" and access restricte (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-06-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.