# CVEs published 2007-11-23

19 CVEs were published on November 23, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6100](https://cve.now/CVE-2007-6100.md): Cross-site scripting (XSS) vulnerability in libraries/auth/cookie.auth.lib.php in phpMyAdmin before 2.11.2.2, when logins are… (no CVSS)
- [CVE-2007-6101](https://cve.now/CVE-2007-6101.md): Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service (daemon crash) via (1) malformed number… (no CVSS)
- [CVE-2007-6102](https://cve.now/CVE-2007-6102.md): Cross-site scripting (XSS) vulnerability in Feed to JavaScript (Feed2JS) 1.91 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2007-6103](https://cve.now/CVE-2007-6103.md): I Hear U (IHU) 0.5.6 and earlier allows remote attackers to cause (1) a denial of service (infinite loop) via a packet that contains zero… (no CVSS)
- [CVE-2007-6104](https://cve.now/CVE-2007-6104.md): Cross-site scripting (XSS) vulnerability in the Instant Web Publishing feature in FileMaker Pro 7 and 8, Server 7 and 8, and Developer 7… (no CVSS)
- [CVE-2007-6105](https://cve.now/CVE-2007-6105.md): Multiple PHP remote file inclusion vulnerabilities in TalkBack 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the… (no CVSS)
- [CVE-2007-6106](https://cve.now/CVE-2007-6106.md): SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2007-6110](https://cve.now/CVE-2007-6110.md): Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2007-6111](https://cve.now/CVE-2007-6111.md): Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of service (crash) via (1)… (no CVSS)
- [CVE-2007-6112](https://cve.now/CVE-2007-6112.md): Buffer overflow in the PPP dissector Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (crash) and… (no CVSS)
- [CVE-2007-6113](https://cve.now/CVE-2007-6113.md): Integer signedness error in the DNP3 dissector in Wireshark (formerly Ethereal) 0.10.12 to 0.99.6 allows remote attackers to cause a… (no CVSS)
- [CVE-2007-6114](https://cve.now/CVE-2007-6114.md): Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service… (no CVSS)
- [CVE-2007-6115](https://cve.now/CVE-2007-6115.md): Buffer overflow in the ANSI MAP dissector for Wireshark (formerly Ethereal) 0.99.5 to 0.99.6, when running on unspecified platforms… (no CVSS)
- [CVE-2007-6116](https://cve.now/CVE-2007-6116.md): The Firebird/Interbase dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite… (no CVSS)
- [CVE-2007-6117](https://cve.now/CVE-2007-6117.md): Unspecified vulnerability in the HTTP dissector for Wireshark (formerly Ethereal) 0.10.14 to 0.99.6 allows remote attackers to cause a… (no CVSS)
- [CVE-2007-6118](https://cve.now/CVE-2007-6118.md): The MEGACO dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (long loop and… (no CVSS)
- [CVE-2007-6119](https://cve.now/CVE-2007-6119.md): The DCP ETSI dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (long loop and… (no CVSS)
- [CVE-2007-6120](https://cve.now/CVE-2007-6120.md): The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service (infinite… (no CVSS)
- [CVE-2007-6121](https://cve.now/CVE-2007-6121.md): Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) via a malformed RPC Portmap… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2007-11-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.