# CVEs published 2007-11-22

18 CVEs were published on November 22, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6082](https://cve.now/CVE-2007-6082.md): Direct static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel, possibly 2.0.3, allows remote attackers to inject… (no CVSS)
- [CVE-2007-6083](https://cve.now/CVE-2007-6083.md): SQL injection vulnerability in admin/index.php in IceBB 1.0-rc6 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2007-6084](https://cve.now/CVE-2007-6084.md): SQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2007-6085](https://cve.now/CVE-2007-6085.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2007-6086](https://cve.now/CVE-2007-6086.md): Directory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers to include and execute arbitrary local files via… (no CVSS)
- [CVE-2007-6087](https://cve.now/CVE-2007-6087.md): Cross-site request forgery (CSRF) vulnerability in index.php in VigileCMS 1.4 allows remote attackers to change the admin password via… (no CVSS)
- [CVE-2007-6088](https://cve.now/CVE-2007-6088.md): PHP remote file inclusion vulnerability in includes/functions\_mod\_user.php in phpBBViet 02.03.07 and earlier allows remote attackers to… (no CVSS)
- [CVE-2007-6089](https://cve.now/CVE-2007-6089.md): PHP remote file inclusion vulnerability in index.php in meBiblio 0.4.5 allows remote attackers to execute arbitrary PHP code via a URL in… (no CVSS)
- [CVE-2007-6090](https://cve.now/CVE-2007-6090.md): Cross-site scripting (XSS) vulnerability in index.php in Nuked-Klan 1.7.5 allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2007-6091](https://cve.now/CVE-2007-6091.md): Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and possibly JiRo's Upload Manager (aka… (no CVSS)
- [CVE-2007-6092](https://cve.now/CVE-2007-6092.md): Buffer overflow in libsrtp in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and attack vectors. (no CVSS)
- [CVE-2007-6093](https://cve.now/CVE-2007-6093.md): The SRTP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2007-6094](https://cve.now/CVE-2007-6094.md): The IPsec module in the VPN component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial… (no CVSS)
- [CVE-2007-6095](https://cve.now/CVE-2007-6095.md): The SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0, when Remote NAT Traversal is employed, does not properly… (no CVSS)
- [CVE-2007-6096](https://cve.now/CVE-2007-6096.md): Ingate Firewall before 4.6.0 and SIParator before 4.6.0 use cleartext storage for passwords of "administrators with less privileges,"… (no CVSS)
- [CVE-2007-6097](https://cve.now/CVE-2007-6097.md): Unspecified vulnerability in the ICMP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and… (no CVSS)
- [CVE-2007-6098](https://cve.now/CVE-2007-6098.md): Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated (1) ICMP, (2) UDP, and (3) TCP packets, which has unknown… (no CVSS)
- [CVE-2007-6099](https://cve.now/CVE-2007-6099.md): Unspecified vulnerability in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 might leave "media pinholes" open upon a restart of… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2007-11-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.