# CVEs published 2007-11-29

16 CVEs were published on November 29, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-4346](https://cve.now/CVE-2007-4346.md): The Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allows remote… (no CVSS)
- [CVE-2007-4347](https://cve.now/CVE-2007-4347.md): Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170… (no CVSS)
- [CVE-2007-6156](https://cve.now/CVE-2007-6156.md): Multiple cross-site scripting (XSS) vulnerabilities in base\_qry\_main.php in Base Analysis and Security Engine (BASE) before 1.3.9 allow… (no CVSS)
- [CVE-2007-6157](https://cve.now/CVE-2007-6157.md): Cross-site scripting (XSS) vulnerability in index.php in SimpleGallery 0.1.3 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2007-6158](https://cve.now/CVE-2007-6158.md): Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and earlier allow remote attackers to execute… (no CVSS)
- [CVE-2007-6159](https://cve.now/CVE-2007-6159.md): SQL injection vulnerability in index.php in Tilde CMS 4.x and earlier allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2007-6160](https://cve.now/CVE-2007-6160.md): Cross-site scripting (XSS) vulnerability in index.php in Tilde CMS 4.x and earlier allows remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2007-6161](https://cve.now/CVE-2007-6161.md): index.php in Tilde CMS 4.x and earlier allows remote attackers to obtain sensitive information via a certain search parameter value in a… (no CVSS)
- [CVE-2007-6162](https://cve.now/CVE-2007-6162.md): Cross-site scripting (XSS) vulnerability in index.php in FMDeluxe 2.1.0 allows remote attackers to inject arbitrary web script or HTML via… (no CVSS)
- [CVE-2007-6163](https://cve.now/CVE-2007-6163.md): SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2007-6164](https://cve.now/CVE-2007-6164.md): Multiple SQL injection vulnerabilities in Eurologon CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to… (no CVSS)
- [CVE-2007-6165](https://cve.now/CVE-2007-6165.md): Mail in Apple Mac OS X Leopard (10.5.1) allows user-assisted remote attackers to execute arbitrary code via an AppleDouble attachment… (no CVSS)
- [CVE-2007-6166](https://cve.now/CVE-2007-6166.md): Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows… (no CVSS)
- [CVE-2007-6167](https://cve.now/CVE-2007-6167.md): Untrusted search path vulnerability in yast2-core in SUSE Linux might allow local users to execute arbitrary code by creating a malicious… (no CVSS)
- [CVE-2007-6168](https://cve.now/CVE-2007-6168.md): SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the username… (no CVSS)
- [CVE-2007-6169](https://cve.now/CVE-2007-6169.md): SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2007-11-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.