Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: June 2007

73 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

  • CVE-2007-2986
    49Plan

    PHP remote file inclusion vulnerability in lib/live_status.lib.php in AdminBot MX 9.0.5 allows remote attackers to execute arbitrary PHP cod

    HighCVSS 7.5Proof of conceptEPSS 64%

    nexen · adminbot mxJun 1, 2007

  • CVE-2007-2987
    47Plan

    Multiple buffer overflows in certain ActiveX controls in sasatl.dll in Zenturi ProgramChecker allow remote attackers to execute arbitrary co

    CriticalCVSS 9.3WeaponizedEPSS 33%

    zenturi · zenturi programcheckerJun 1, 2007

  • CVE-2007-0933
    39Monitor

    Buffer overflow in the wireless driver 6.0.0.18 for D-Link DWL-G650+ (Rev.

    HighCVSS 7.8No exploitEPSS 27%

    d-link · dwl-g650\+Jun 5, 2007

  • CVE-2007-3045
    20Monitor

    Unspecified vulnerability in Hitachi TP1/NET/OSI-TP-Extended on HI-UX/WE2 before 20070213, and on HP-UX before 20070314, allows remote attac

    MediumCVSS 5.0No exploitEPSS 1%

    hitachi · hi ux we2Jun 5, 2007

  • CVE-2007-3057
    48Plan

    PHP remote file inclusion vulnerability in include/wysiwyg/spaw_control.class.php in the icontent 4.5 module for XOOPS allows remote attacke

    MediumCVSS 6.8Proof of conceptEPSS 68%

    xoops · icontent moduleJun 5, 2007

  • CVE-2007-3068
    40Plan

    Stack-based buffer overflow in DVD X Player 4.1 Professional allows remote attackers to execute arbitrary code via a PLF playlist containing

    MediumCVSS 6.8WeaponizedEPSS 32%

    dvd x studios · dvd x playerJun 5, 2007

  • CVE-2007-0067
    35Monitor

    Unspecified vulnerability in the Lotus Domino Web Server 6.0, 6.5.x before 6.5.6, and 7.0.x before 7.0.3 allows remote attackers to cause a

    HighCVSS 7.8No exploitEPSS 13%

    ibm · lotus domino web serverJun 6, 2007

  • CVE-2007-3075
    36Monitor

    Directory traversal vulnerability in Microsoft Internet Explorer allows remote attackers to read arbitrary files via directory traversal seq

    HighCVSS 7.8No exploitEPSS 16%

    microsoft · internet explorerJun 6, 2007

  • CVE-2007-2237
    27Monitor

    Microsoft Windows Graphics Device Interface (GDI+, GdiPlus.dll) allows context-dependent attackers to cause a denial of service (crash) via

    MediumCVSS 5.5Proof of conceptEPSS 15%

    microsoft · windows xpJun 6, 2007

  • CVE-2007-2863
    47Plan

    Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allow

    CriticalCVSS 10.0No exploitEPSS 23%

    ca · anti-virus for the enterpriseJun 6, 2007

  • CVE-2007-2864
    52Plan

    Stack-based buffer overflow in the Anti-Virus engine before content update 30.6 in multiple CA (formerly Computer Associates) products allow

    CriticalCVSS 9.3WeaponizedEPSS 49%

    ca · etrust secure content managerJun 6, 2007

  • CVE-2007-3091
    36Monitor

    Race condition in Microsoft Internet Explorer 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1,

    HighCVSS 7.1No exploitEPSS 27%

    microsoft · windows 2003 serverJun 6, 2007

  • CVE-2007-3092
    43Plan

    Microsoft Internet Explorer 6 allows remote attackers to spoof the URL bar, and page properties including SSL certificates, by interrupting

    CriticalCVSS 9.3No exploitEPSS 19%

    microsoft · internet explorerJun 6, 2007

  • CVE-2007-2919
    47Plan

    Multiple stack-based buffer overflows in the FViewerLoading ActiveX control (FlipViewerX.dll) in E-Book Systems FlipViewer before 4.1 allow

    CriticalCVSS 9.3WeaponizedEPSS 33%

    e-book systems · flipviewerJun 6, 2007

  • CVE-2007-3109
    28Monitor

    The CERN Image Map Dispatcher (htimage.exe) in Microsoft FrontPage allows remote attackers to determine the existence, and possibly partial

    MediumCVSS 6.4No exploitEPSS 10%

    microsoft · frontpageJun 7, 2007

  • CVE-2007-3111
    53Plan

    Buffer overflow in the Provideo Camimage ActiveX control in ISSCamControl.dll 1.0.1.5, when Internet Explorer 6 is used on Windows 2000 SP4,

    CriticalCVSS 10.0Proof of conceptEPSS 44%

    provideo · camimage activex controlJun 7, 2007

  • CVE-2007-1685
    44Plan

    Buffer overflow in k9filter.exe in BlueCoat K9 Web Protection 3.2.36, and probably other versions before 3.2.44, allows remote attackers to

    CriticalCVSS 10.0Proof of conceptEPSS 13%

    bluecoat · k9 web protectionJun 8, 2007

  • CVE-2007-3147
    49Plan

    Buffer overflow in the Yahoo! Webcam Upload ActiveX control in ywcupl.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to

    CriticalCVSS 9.3WeaponizedEPSS 40%

    yahoo · messengerJun 11, 2007

  • CVE-2007-3148
    41Plan

    Buffer overflow in the Yahoo! Webcam Viewer ActiveX control in ywcvwr.dll 2.0.1.4 for Yahoo! Messenger 8.1.0.249 allows remote attackers to

    CriticalCVSS 9.3Proof of conceptEPSS 12%

    yahoo · messengerJun 11, 2007

  • CVE-2007-3169
    41Plan

    Buffer overflow in a certain ActiveX control in the EDraw Office Viewer Component (edrawofficeviewer.ocx) 4.0.5.20, and other versions befor

    CriticalCVSS 9.3Proof of conceptEPSS 11%

    edraw · office viewer componentJun 11, 2007

  • CVE-2007-3175
    35Monitor

    Multiple SQL injection vulnerabilities in W2B Online Banking allow remote attackers to execute arbitrary SQL commands via (1) the draft para

    HighCVSS 7.5No exploitEPSS 16%

    w2b · online bankingJun 11, 2007

  • CVE-2007-0218
    46Plan

    Microsoft Internet Explorer 5.01 and 6 allows remote attackers to execute arbitrary code by instantiating certain COM objects from Urlmon.dl

    CriticalCVSS 9.3No exploitEPSS 31%

    microsoft · windows 2000Jun 12, 2007

  • CVE-2007-0934
    46Plan

    Unspecified vulnerability in Microsoft Visio 2002 allows remote user-assisted attackers to execute arbitrary code via a Visio (.VSD, VSS, .V

    CriticalCVSS 9.3No exploitEPSS 30%

    microsoft · visioJun 12, 2007

  • CVE-2007-0936
    46Plan

    Multiple unspecified vulnerabilities in Microsoft Visio 2002 allow remote user-assisted attackers to execute arbitrary code via a Visio (.VS

    CriticalCVSS 9.3No exploitEPSS 30%

    microsoft · officeJun 12, 2007

  • CVE-2007-1750
    46Plan

    Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via a crafted Cascading Style S

    CriticalCVSS 9.3No exploitEPSS 30%

    microsoft · windows 2000Jun 12, 2007

  • CVE-2007-1751
    55Plan

    Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer to access an unini

    CriticalCVSS 9.3No exploitEPSS 60%

    microsoft · internet explorerJun 12, 2007

  • CVE-2007-2218
    41Plan

    Unspecified vulnerability in the Windows Schannel Security Package for Microsoft Windows 2000 SP4, XP SP2, and Server 2003 SP1 and SP2, allo

    CriticalCVSS 9.3No exploitEPSS 12%

    microsoft · windows 2000Jun 12, 2007

  • CVE-2007-2222
    53Plan

    Multiple buffer overflows in the (1) ActiveListen (Xlisten.dll) and (2) ActiveVoice (Xvoice.dll) speech controls, as used by Microsoft Inter

    CriticalCVSS 9.3Proof of conceptEPSS 54%

    microsoft · windows 2000Jun 12, 2007

  • CVE-2007-3027
    47Plan

    Race condition in Microsoft Internet Explorer 5.01, 6, and 7 allows remote attackers to execute arbitrary code by causing Internet Explorer

    CriticalCVSS 9.3No exploitEPSS 34%

    microsoft · windows 2000Jun 12, 2007

  • CVE-2007-2219
    47Plan

    Unspecified vulnerability in the Win32 API on Microsoft Windows 2000, XP SP2, and Server 2003 SP1 and SP2 allows remote attackers to execute

    CriticalCVSS 9.3No exploitEPSS 31%

    microsoft · windows 2000Jun 12, 2007

  • CVE-2007-2225
    25Monitor

    A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing M

    MediumCVSS 4.3No exploitEPSS 25%

    microsoft · windows 2003 serverJun 12, 2007

  • CVE-2007-2227
    25Monitor

    The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition "no

    MediumCVSS 4.3No exploitEPSS 25%

    microsoft · windows 2003 serverJun 12, 2007

  • CVE-2007-3181
    44Plan

    Buffer overflow in fbserver.exe in Firebird SQL 2 before 2.0.1 allows remote attackers to execute arbitrary code via a large p_cnct_count va

    CriticalCVSS 10.0Proof of conceptEPSS 13%

    bakbone · netvaultJun 12, 2007

  • CVE-2007-3216
    58Plan

    Multiple buffer overflows in the LGServer component of CA (Computer Associates) BrightStor ARCserve Backup for Laptops and Desktops r11.1 al

    CriticalCVSS 10.0WeaponizedEPSS 59%

    broadcom · brightstor arcserve backup laptops desktopsJun 14, 2007

  • CVE-2007-3217
    33Monitor

    Multiple PHP remote file inclusion vulnerabilities in Prototype of an PHP application 0.1 allow remote attackers to execute arbitrary PHP co

    HighCVSS 7.5Proof of conceptEPSS 10%

    prototype of an php application · prototype of an php applicationJun 14, 2007

  • CVE-2007-2449
    40Plan

    Multiple cross-site scripting (XSS) vulnerabilities in certain JSP files in the examples web application in Apache Tomcat 4.0.0 through 4.0.

    MediumCVSS 4.3Proof of conceptEPSS 77%

    apache · tomcatJun 14, 2007

  • CVE-2007-3220
    46Plan

    PHP remote file inclusion vulnerability in admin/editor2/spaw_control.class.php in the Cjay Content 3 module for XOOPS allows remote attacke

    MediumCVSS 6.8Proof of conceptEPSS 62%

    xoops · cjay content moduleJun 14, 2007

  • CVE-2007-3221
    47Plan

    PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the XT-Conteudo module for XOOPS allows remote attackers to

    MediumCVSS 6.8Proof of conceptEPSS 67%

    xoops · xt-conteudo moduleJun 14, 2007

  • CVE-2007-3228
    47Plan

    PHP remote file inclusion vulnerability in saf/lib/PEAR/PhpDocumentor/Documentation/tests/bug-559668.php in Sitellite CMS 4.2.12 and earlier

    MediumCVSS 6.8Proof of conceptEPSS 67%

    simian systems inc · sitellite cmsJun 14, 2007

  • CVE-2007-3230
    47Plan

    PHP remote file inclusion vulnerability in phphtml.php in Idan Sofer PHP::HTML 0.6.4 allows remote attackers to execute arbitrary PHP code v

    MediumCVSS 6.8Proof of conceptEPSS 67%

    simian systems inc · sitelliteJun 14, 2007

  • CVE-2007-3236
    53Plan

    PHP remote file inclusion vulnerability in footer.php in the Horoscope 1.0 module for XOOPS allows remote attackers to execute arbitrary PHP

    HighCVSS 7.5Proof of conceptEPSS 76%

    xoops · horoscope moduleJun 14, 2007

  • CVE-2007-3237
    47Plan

    PHP remote file inclusion vulnerability in admin/spaw/spaw_control.class.php in the TinyContent 1.5 module for XOOPS allows remote attackers

    MediumCVSS 6.8Proof of conceptEPSS 67%

    xoops · tinycontent moduleJun 14, 2007

  • CVE-2007-3101
    30Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in certain JSF applications in Apache MyFaces Tomahawk before 1.1.6 allow remote attacke

    MediumCVSS 4.3Proof of conceptEPSS 44%

    apache · myfaces tomahawkJun 18, 2007

  • CVE-2007-3280
    44Plan

    The Database Link library (dblink) in PostgreSQL 8.1 implements functions via CREATE statements that map to arbitrary libraries based on the

    CriticalCVSS 9.0WeaponizedEPSS 25%

    postgresql · postgresqlJun 19, 2007

  • CVE-2007-3282
    44Plan

    Buffer overflow in the Microsoft Office MSODataSourceControl ActiveX object allows remote attackers to cause a denial of service (crash) and

    HighCVSS 7.8Proof of conceptEPSS 42%

    microsoft · officeJun 19, 2007

  • CVE-2007-3289
    34Monitor

    PHP remote file inclusion vulnerability in spaw/spaw_control.class.php in the WiwiMod 0.4 module for XOOPS allows remote attackers to execut

    HighCVSS 7.5Proof of conceptEPSS 12%

    xoops · wiwimod moduleJun 20, 2007

  • CVE-2007-3306
    49Plan

    PHP remote file inclusion vulnerability in crontab/run_billing.php in MiniBill 1.2.5 allows remote attackers to execute arbitrary PHP code v

    HighCVSS 7.5Proof of conceptEPSS 64%

    ultrize · minibillJun 20, 2007

  • CVE-2007-3314
    40Plan

    Stack-based buffer overflow in peviewer.spl in Altap Servant Salamander 2.5 with Portable Executable Viewer 2.02 (English Trial), and 2.0 wi

    MediumCVSS 6.8WeaponizedEPSS 43%

    altap · portable executable viewerJun 21, 2007

  • CVE-2007-3316
    42Plan

    Multiple format string vulnerabilities in plugins in VideoLAN VLC Media Player before 0.8.6c allow remote attackers to cause a denial of ser

    CriticalCVSS 9.3No exploitEPSS 17%

    videolan · vlc media playerJun 21, 2007

  • CVE-2007-3325
    49Plan

    PHP remote file inclusion vulnerability in lib/language.php in LAN Management System (LMS) 1.9.6 and earlier allows remote attackers to exec

    HighCVSS 7.5Proof of conceptEPSS 64%

    lms · lan management systemJun 21, 2007

  • CVE-2007-3334
    43Plan

    Multiple heap-based buffer overflows in the (1) Communications Server (iigcc.exe) and (2) Data Access Server (iigcd.exe) components for Ingr

    CriticalCVSS 10.0Proof of conceptEPSS 10%

    ca · etrust secure content managerJun 21, 2007

  • CVE-2007-3341
    43Plan

    Unspecified vulnerability in the FTP implementation in Microsoft Internet Explorer allows remote attackers to "see a valid memory address" v

    CriticalCVSS 10.0No exploitEPSS 10%

    microsoft · all windowsJun 21, 2007

  • CVE-2006-7206
    38Monitor

    Microsoft Internet Explorer 6 on Windows XP SP2 allows remote attackers to cause a denial of service (crash) by creating a ADODB.Recordset o

    HighCVSS 7.8Proof of conceptEPSS 22%

    microsoft · windows xpJun 21, 2007

  • CVE-2007-3358
    47Plan

    PHP remote file inclusion vulnerability in html/load_lang.php in SerWeb 0.9.6 and earlier allows remote attackers to execute arbitrary PHP c

    MediumCVSS 6.8Proof of conceptEPSS 68%

    iptel · serwebJun 22, 2007

  • CVE-2007-3370
    52Plan

    Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrary PHP code via a URL

    HighCVSS 7.5Proof of conceptEPSS 74%

    kim kyoung min · sun boardJun 22, 2007

  • CVE-2007-3371
    51Plan

    PHP remote file inclusion vulnerability in plugins/widgets/htmledit/htmledit.php in Powl 0.94 allows remote attackers to execute arbitrary P

    HighCVSS 7.5Proof of conceptEPSS 71%

    powl · powlJun 22, 2007

  • CVE-2007-3389
    40Plan

    Wireshark before 0.99.6 allows remote attackers to cause a denial of service (crash) via a crafted chunked encoding in an HTTP response, pos

    MediumCVSS 5.0WeaponizedEPSS 16%

    wireshark · wiresharkJun 25, 2007

  • CVE-2007-3401
    52Plan

    PHP remote file inclusion vulnerability in footer.inc.php in B1G b1gBB 2.24 allows remote attackers to execute arbitrary PHP code via a URL

    HighCVSS 7.5Proof of conceptEPSS 73%

    b1g · b1gbbJun 26, 2007

  • CVE-2007-3406
    20Monitor

    Multiple absolute path traversal vulnerabilities in Microsoft Internet Explorer 6 on Windows XP SP2 allow remote attackers to access arbitra

    MediumCVSS 4.3Proof of conceptEPSS 10%

    microsoft · windows xpJun 26, 2007

  • CVE-2007-2442
    43Plan

    The gssrpc__svcauth_gssapi function in the RPC library in MIT Kerberos 5 (krb5) 1.6.1 and earlier might allow remote attackers to execute ar

    CriticalCVSS 10.0No exploitEPSS 11%

    mit · kerberos 5Jun 26, 2007

  • CVE-2007-3410
    48Plan

    Stack-based buffer overflow in the SmilTimeValue::parseWallClockValue function in smlprstime.cpp in RealNetworks RealPlayer 10, 10.1, and po

    CriticalCVSS 9.3Proof of conceptEPSS 36%

    realnetworks · helix playerJun 26, 2007

  • CVE-2007-3431
    48Plan

    PHP remote file inclusion vulnerability in cal.func.php in Valerio Capello Dagger - The Cutting Edge r23jan2007 allows remote attackers to e

    MediumCVSS 6.8Proof of conceptEPSS 70%

    valerio capello · dagger - the cutting edgeJun 26, 2007

  • CVE-2007-3435
    48Plan

    Stack-based buffer overflow in the BeginPrint method in a certain ActiveX control in RKD Software (barcodetools.com) BarCodeAx.dll 4.9 allow

    CriticalCVSS 9.3WeaponizedEPSS 35%

    rkd software · barcode activexJun 26, 2007

  • CVE-2007-3436
    24Monitor

    Microsoft MSN Messenger 4.7 on Windows XP allows remote attackers to cause a denial of service (resource consumption) via a flood of SIP INV

    MediumCVSS 5.0No exploitEPSS 12%

    microsoft · windows xpJun 26, 2007

  • CVE-2007-3455
    41Plan

    cgiChkMasterPwd.exe before 8.0.0.142 in Trend Micro OfficeScan Corporate Edition 8.0 allows remote attackers to bypass the password requirem

    CriticalCVSS 10.0No exploitEPSS 2%

    trend micro · officescanJun 26, 2007

  • CVE-2006-5752
    25Monitor

    Cross-site scripting (XSS) vulnerability in mod_status.c in the mod_status module in Apache HTTP Server (httpd), when ExtendedStatus is enab

    MediumCVSS 4.3No exploitEPSS 27%

    apache · http serverJun 27, 2007

  • CVE-2006-7210
    28Monitor

    Microsoft Windows 2000, XP, and Server 2003 allows remote attackers to cause a denial of service (cpu consumption) via a PNG image with craf

    MediumCVSS 5.0Proof of conceptEPSS 25%

    microsoft · windows 2000Jun 27, 2007

  • CVE-2007-1863
    24Monitor

    cache_util.c in the mod_cache module in Apache HTTP Server (httpd), when caching is enabled and a threaded Multi-Processing Module (MPM) is

    MediumCVSS 5.0No exploitEPSS 11%

    apache · http serverJun 27, 2007

  • CVE-2007-3473
    21Monitor

    The gdImageCreateXbm function in the GD Graphics Library (libgd) before 2.0.35 allows user-assisted remote attackers to cause a denial of se

    MediumCVSS 4.3Proof of conceptEPSS 13%

    libgd · gd graphics libraryJun 28, 2007

  • CVE-2007-3481
    25Monitor

    Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to bypass the Same Origin Policy and access restri

    MediumCVSS 5.0No exploitEPSS 15%

    microsoft · internet explorerJun 28, 2007

  • CVE-2007-3488
    45Plan

    Heap-based buffer overflow in the viewer ActiveX control in Sony Network Camera SNC-RZ25N before 1.30; SNC-P1 and SNC-P5 before 1.29; SNC-CS

    CriticalCVSS 10.0Proof of conceptEPSS 16%

    sony · sony network camera snc-p5Jun 29, 2007

  • CVE-2007-3490
    41Plan

    Unspecified vulnerability in Microsoft Excel 2003 SP2 allows remote attackers to have an unknown impact via unspecified vectors, possibly re

    HighCVSS 7.5Proof of conceptEPSS 36%

    microsoft · excelJun 29, 2007

  • CVE-2007-3493
    39Monitor

    A certain ActiveX control in NCTWavChunksEditor2.dll 2.6.1.148 in NCTAudioStudio (NCTAudioStudio2) 2.7, as used by Sienzo DMM and probably o

    HighCVSS 7.5Proof of conceptEPSS 31%

    microsoft · windows xpJun 29, 2007