# CVEs published 2007-06-29

20 CVEs were published on June 29, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4848](https://cve.now/CVE-2005-4848.md): Buffer overflow in the decompression algorithm in Research in Motion BlackBerry Enterprise Server 4.0 SP1 and earlier before 20050607 might (no CVSS)
- [CVE-2006-7211](https://cve.now/CVE-2006-7211.md): fb\_lock\_mgr in Firebird 1.5 uses weak permissions (0666) for the semaphore array, which allows local users to cause a denial of service (blo (no CVSS)
- [CVE-2006-7212](https://cve.now/CVE-2006-7212.md): Multiple buffer overflows in Firebird 1.5, one of which affects WNET, have unknown impact and attack vectors. (no CVSS)
- [CVE-2006-7213](https://cve.now/CVE-2006-7213.md): Firebird 1.5 allows remote authenticated users without SYSDBA and owner permissions to overwrite a database by creating a database. (no CVSS)
- [CVE-2006-7214](https://cve.now/CVE-2006-7214.md): Multiple unspecified vulnerabilities in Firebird 1.5 allow remote attackers to (1) cause a denial of service (application crash) by sending (no CVSS)
- [CVE-2007-3378](https://cve.now/CVE-2007-3378.md): The (1) session\_save\_path, (2) ini\_set, and (3) error\_log functions in PHP 4.4.7 and earlier, and PHP 5 5.2.3 and earlier, when invoked from (no CVSS)
- [CVE-2007-3487](https://cve.now/CVE-2007-3487.md): Absolute path traversal in a certain ActiveX control in hpqxml.dll 2.0.0.133 in Hewlett-Packard (HP) Photo Digital Imaging allows remote att (no CVSS)
- [CVE-2007-3488](https://cve.now/CVE-2007-3488.md): Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS (no CVSS)
- [CVE-2007-3489](https://cve.now/CVE-2007-3489.md): Cross-site request forgery (CSRF) vulnerability in pop/WizU.html in the management interface in Check Point VPN-1 Edge X Embedded NGX 7.0.33 (no CVSS)
- [CVE-2007-3490](https://cve.now/CVE-2007-3490.md): Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly re (no CVSS)
- [CVE-2007-3491](https://cve.now/CVE-2007-3491.md): Buffer overflow in \_mprosrv in Progress Software OpenEdge before 9.1E0422, and 10.x before 10.1B01, allows remote attackers to have an unkno (no CVSS)
- [CVE-2007-3492](https://cve.now/CVE-2007-3492.md): Conti FtpServer 1.0 allows remote authenticated users to cause a denial of service (daemon crash) via a certain string containing "//A:" in (no CVSS)
- [CVE-2007-3493](https://cve.now/CVE-2007-3493.md): A certain ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 in NCTAudioStudio (NCTAudioStudio2) 2.7, as used by Sienzo DMM and probably o (no CVSS)
- [CVE-2007-3494](https://cve.now/CVE-2007-3494.md): Papoo CMS 3.6, and possibly earlier, does not verify user privileges when accessing the backend administration plugins, which allows remote (no CVSS)
- [CVE-2007-3495](https://cve.now/CVE-2007-3495.md): Multiple cross-site scripting (XSS) vulnerabilities in the SAP Internet Communication Framework (BC-MID-ICF) in the SAP Basis component 700 (no CVSS)
- [CVE-2007-3496](https://cve.now/CVE-2007-3496.md): Cross-site scripting (XSS) vulnerability in SAP Web Dynpro Java (BC-WD-JAV) in SAP NetWeaver Nw04 SP15 through SP19 and Nw04s SP7 through SP (no CVSS)
- [CVE-2007-3497](https://cve.now/CVE-2007-3497.md): Microsoft Internet Explorer 7 allows remote attackers to determine the existence of page history via the history.length JavaScript variable. (no CVSS)
- [CVE-2007-3498](https://cve.now/CVE-2007-3498.md): Cross-site scripting (XSS) vulnerability in smoketests/configForm.php in HTML Purifier before 2.0.1 allows remote attackers to inject arbitr (no CVSS, ezyang/htmlpurifier)
- [CVE-2007-3499](https://cve.now/CVE-2007-3499.md): SlackRoll before 8 accepts gpg exit codes other than 0 and 1 as evidence of a valid signature, which allows remote Slackware mirror sites or (no CVSS)
- [CVE-2007-3500](https://cve.now/CVE-2007-3500.md): Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-06-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.