# CVEs published 2007-11-08

29 CVEs were published on November 8, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-5897](https://cve.now/CVE-2007-5897.md): Buffer overflow in MDSYS.SDO\_CS in Oracle Database Server 8iR3, 9iR1, 9iR2 up to 9.2.0.6, and 10gR1 up to 10.1.0.4 allows remote… (no CVSS)
- [CVE-2003-1529](https://cve.now/CVE-2003-1529.md): Directory traversal vulnerability in Seagull Software Systems J Walk application server 3.2C9, and other versions before 3.3c4, allows… (no CVSS)
- [CVE-2003-1530](https://cve.now/CVE-2003-1530.md): SQL injection vulnerability in privmsg.php in phpBB 2.0.3 and earlier allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2003-1531](https://cve.now/CVE-2003-1531.md): Cross-site scripting (XSS) vulnerability in testcgi.exe in Lilikoi Software Ceilidh 2.70 and earlier allows remote attackers to inject… (no CVSS)
- [CVE-2003-1532](https://cve.now/CVE-2003-1532.md): SQL injection vulnerability in compte.php in PhpMyShop 1.00 allows remote attackers to execute arbitrary SQL commands via the (1)… (no CVSS)
- [CVE-2003-1533](https://cve.now/CVE-2003-1533.md): SQL injection vulnerability in accesscontrol.php in PhpPass 2 allows remote attackers to execute arbitrary SQL commands via the (1) uid… (no CVSS)
- [CVE-2003-1534](https://cve.now/CVE-2003-1534.md): Cross-site scripting (XSS) vulnerability in jgb.php3 in Justice Guestbook 1.3 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2003-1535](https://cve.now/CVE-2003-1535.md): Justice Guestbook 1.3 allows remote attackers to obtain the full installation path via a direct request to cfooter.php3, which leaks the… (no CVSS)
- [CVE-2003-1536](https://cve.now/CVE-2003-1536.md): Multiple cross-site scripting (XSS) vulnerabilities in Codeworx Technologies DCP-Portal 5.3.1 allow remote attackers to inject arbitrary… (no CVSS)
- [CVE-2004-2746](https://cve.now/CVE-2004-2746.md): SQL injection vulnerability in adminlogin.asp in XTREME ASP Photo Gallery 2.0 allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2004-2747](https://cve.now/CVE-2004-2747.md): Directory traversal vulnerability in Pablo Software Solutions Quick 'n Easy FTP Server 1.77, and possibly earlier versions, allows remote… (no CVSS)
- [CVE-2004-2748](https://cve.now/CVE-2004-2748.md): viewreport.pl in NetIQ WebTrends Reporting Center Enterprise Edition 6.1a allows remote attackers to determine the installation path via… (no CVSS)
- [CVE-2007-4517](https://cve.now/CVE-2007-4517.md): Buffer overflow in the XDB.XDB\_PITRIG\_PKG.PITRIG\_DROPMETADATA procedure in Oracle 10g R2 allows remote authenticated users to execute… (no CVSS)
- [CVE-2007-5766](https://cve.now/CVE-2007-5766.md): SQL injection vulnerability in okxLOV.jsp in Oracle E-Business Suite 11 and 12 allows remote attackers to execute arbitrary SQL commands… (no CVSS)
- [CVE-2007-5896](https://cve.now/CVE-2007-5896.md): Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service (CPU consumption and crash) via an iframe with Javascript… (no CVSS)
- [CVE-2003-1528](https://cve.now/CVE-2003-1528.md): nsr\_shutdown in Fujitsu Siemens NetWorker 6.0 allows local users to overwrite arbitrary files via a symlink attack on the nsrsh\[PID\]… (no CVSS)
- [CVE-2007-3921](https://cve.now/CVE-2007-3921.md): gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files. (no CVSS)
- [CVE-2007-4129](https://cve.now/CVE-2007-4129.md): CoolKey 1.1.0 allows local users to overwrite arbitrary files via a symlink attack on temporary files in the /tmp/.pk11ipc1/ directory. (no CVSS)
- [CVE-2007-4223](https://cve.now/CVE-2007-4223.md): Dbgv.sys in Microsoft Sysinternals DebugView before 4.72 provides an unspecified mechanism for copying data into kernel memory, which… (no CVSS)
- [CVE-2007-4352](https://cve.now/CVE-2007-4352.md): Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE… (no CVSS)
- [CVE-2007-5392](https://cve.now/CVE-2007-5392.md): Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a… (no CVSS)
- [CVE-2007-5393](https://cve.now/CVE-2007-5393.md): Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute… (no CVSS)
- [CVE-2007-5395](https://cve.now/CVE-2007-5395.md): Stack-based buffer overflow in the separate\_word function in tokenize.c in Link Grammar 4.1b and possibly other versions, as used in… (no CVSS)
- [CVE-2007-5581](https://cve.now/CVE-2007-5581.md): Multiple cross-site scripting (XSS) vulnerabilities in mpweb/scripts/mpx.dll in Cisco Unified MeetingPlace 5.4 and earlier and 6.0 allow… (no CVSS)
- [CVE-2007-5889](https://cve.now/CVE-2007-5889.md): Multiple PHP remote file inclusion vulnerabilities in IDMOS 1.0 Alpha (aka Phoenix) allow remote attackers to execute arbitrary PHP code… (no CVSS)
- [CVE-2007-5890](https://cve.now/CVE-2007-5890.md): Directory traversal vulnerability in index.php in easyGB 2.1.1 allows remote attackers to include arbitrary files via the DatabaseType… (no CVSS)
- [CVE-2007-5891](https://cve.now/CVE-2007-5891.md): Multiple cross-site scripting (XSS) vulnerabilities in jsp/Login.do in ManageEngine OpManager MSP Edition and OpManager 7.0 allow remote… (no CVSS)
- [CVE-2007-5892](https://cve.now/CVE-2007-5892.md): Stack-based buffer overflow in the pdg2.dll ActiveX control in SSReader 4.0 and earlier allow remote attackers to execute arbitrary code… (no CVSS)
- [CVE-2007-5893](https://cve.now/CVE-2007-5893.md): HTTPSocket.cpp in the C++ Sockets Library before 2.2.5 allows remote attackers to cause a denial of service (crash) via an HTTP request… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2007-11-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.