# CVEs published 2007-11-03

7 CVEs were published on November 3, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-5796](https://cve.now/CVE-2007-5796.md): Cross-site scripting (XSS) vulnerability in the management console in Blue Coat ProxySG before 4.2.6.1, and 5.x before 5.2.2.5, allows remot (no CVSS)
- [CVE-2007-5797](https://cve.now/CVE-2007-5797.md): SQLLoginModule in Apache Geronimo 2.0 through 2.1 does not throw an exception for a nonexistent username, which allows remote attackers to b (no CVSS)
- [CVE-2007-5798](https://cve.now/CVE-2007-5798.md): Multiple cross-site scripting (XSS) vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application Server (no CVSS)
- [CVE-2007-5799](https://cve.now/CVE-2007-5799.md): Multiple cross-site request forgery (CSRF) vulnerabilities in uddigui/navigateTree.do in the UDDI user console in IBM WebSphere Application (no CVSS)
- [CVE-2007-5800](https://cve.now/CVE-2007-5800.md): Multiple PHP remote file inclusion vulnerabilities in the BackUpWordPress 0.4.2b and earlier plugin for WordPress allow remote attackers to (no CVSS)
- [CVE-2007-5801](https://cve.now/CVE-2007-5801.md): Unspecified vulnerability in WORK system e-commerce before 4.0.2 has unknown impact and attack vectors related to "Ajax pages." (no CVSS)
- [CVE-2007-5802](https://cve.now/CVE-2007-5802.md): Directory traversal vulnerability in index.php in Firewolf Technologies Synergiser 1.2 RC1 and earlier allows remote attackers to include an (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-11-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.