# CVEs published 2007-11-05

41 CVEs were published on November 5, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-5820](https://cve.now/CVE-2007-5820.md): Directory traversal vulnerability in index.php in Ax Developer CMS (AxDCMS) 0.1.1 allows remote attackers to include and execute arbitrary l (no CVSS)
- [CVE-2007-5821](https://cve.now/CVE-2007-5821.md): Multiple directory traversal vulnerabilities in DM Guestbook 0.4.1 and earlier allow remote attackers to include and execute arbitrary local (no CVSS)
- [CVE-2007-5822](https://cve.now/CVE-2007-5822.md): Direct static code injection vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to inject arbitrary PHP cod (no CVSS)
- [CVE-2007-5823](https://cve.now/CVE-2007-5823.md): Directory traversal vulnerability in forum.php in Ben Ng Scribe 0.2 and earlier allows remote attackers to create or overwrite arbitrary fil (no CVSS)
- [CVE-2007-5824](https://cve.now/CVE-2007-5824.md): webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote attackers to cause a denial of service (NULL dereference and (no CVSS)
- [CVE-2007-5825](https://cve.now/CVE-2007-5825.md): Format string vulnerability in the ws\_addarg function in webserver.c in mt-dappd in Firefly Media Server 0.2.4 and earlier allows remote att (no CVSS)
- [CVE-2007-5826](https://cve.now/CVE-2007-5826.md): Absolute path traversal vulnerability in the EDraw Flowchart ActiveX control in EDImage.ocx 2.0.2005.1104 allows remote attackers to create (no CVSS)
- [CVE-2007-5827](https://cve.now/CVE-2007-5827.md): iSCSI Enterprise Target (iscsitarget) 0.4.15 uses weak permissions for /etc/ietd.conf, which allows local users to obtain passwords. (no CVSS)
- [CVE-2007-5828](https://cve.now/CVE-2007-5828.md): Cross-site request forgery (CSRF) vulnerability in the admin panel in Django 0.96 allows remote attackers to change passwords of arbitrary u (no CVSS)
- [CVE-2007-5829](https://cve.now/CVE-2007-5829.md): The Disk Mount scanner in Symantec AntiVirus for Macintosh 9.x and 10.x, Norton AntiVirus for Macintosh 10.0 and 10.1, and Norton Internet S (no CVSS)
- [CVE-2007-5830](https://cve.now/CVE-2007-5830.md): Unspecified vulnerability in the administrative interface in Avaya Messaging Storage Server (MSS) 3.1 before SP1, and Message Networking (MN (no CVSS)
- [CVE-2007-5831](https://cve.now/CVE-2007-5831.md): Directory traversal vulnerability in fileSystem.do in SSL-Explorer before 0.2.14 allows remote attackers to access arbitrary files via direc (no CVSS)
- [CVE-2007-5832](https://cve.now/CVE-2007-5832.md): Unspecified vulnerability in selectLanguage.do in SSL-Explorer before 0.2.15 allows remote attackers to inject (1) headers or (2) body data (no CVSS)
- [CVE-2007-5833](https://cve.now/CVE-2007-5833.md): Multiple cross-site scripting (XSS) vulnerabilities in BosDev BosMarket Business Directory System allow remote authenticated users to inject (no CVSS)
- [CVE-2007-5834](https://cve.now/CVE-2007-5834.md): Cross-site scripting (XSS) vulnerability in BosDev BosNews 4 allows remote attackers to inject arbitrary web script or HTML via a SCRIPT ele (no CVSS)
- [CVE-2007-5835](https://cve.now/CVE-2007-5835.md): Install.php in BosDev BosNews 4 and 5 does not require authentication for replacing an existing product installation or creating a new admin (no CVSS)
- [CVE-2007-5836](https://cve.now/CVE-2007-5836.md): SQL injection vulnerability in Amazing Flash AFCommerce allows remote attackers to execute arbitrary SQL commands via the firstname paramete (no CVSS)
- [CVE-2007-5837](https://cve.now/CVE-2007-5837.md): GUI.pm in yarssr 0.2.2, when Gnome default URL handling is disabled, allows remote attackers to execute arbitrary commands via shell metacha (no CVSS)
- [CVE-2007-5603](https://cve.now/CVE-2007-5603.md): Stack-based buffer overflow in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, al (no CVSS)
- [CVE-2007-5814](https://cve.now/CVE-2007-5814.md): Multiple buffer overflows in the SonicWall SSL-VPN NetExtender NELaunchCtrl ActiveX control before 2.1.0.51, and 2.5.x before 2.5.0.56, allo (no CVSS)
- [CVE-2007-5815](https://cve.now/CVE-2007-5815.md): Absolute path traversal vulnerability in the WebCacheCleaner ActiveX control 1.3.0.3 in SonicWall SSL-VPN 200 before 2.1, and SSL-VPN 2000/4 (no CVSS)
- [CVE-2007-5816](https://cve.now/CVE-2007-5816.md): dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to obtain sensitive author credentials by making a request with an (no CVSS)
- [CVE-2007-5817](https://cve.now/CVE-2007-5817.md): dialog.php in CONTENTCustomizer 3.1mp and earlier allows remote attackers to perform certain privileged actions via a (1) del, (2) delbackup (CVSS 6.1)
- [CVE-2007-5818](https://cve.now/CVE-2007-5818.md): Cross-site request forgery (CSRF) vulnerability in blocks\_edit\_do.php in sBlog 0.7.3 Beta allows remote attackers to change arbitrary blocks (no CVSS)
- [CVE-2007-5819](https://cve.now/CVE-2007-5819.md): IBM Tivoli Continuous Data Protection for Files (CDP) 3.1.0 uses weak permissions (unrestricted write) for the Central Admin Global download (no CVSS)
- [CVE-2007-0011](https://cve.now/CVE-2007-0011.md): The web portal interface in Citrix Access Gateway (aka Citrix Advanced Access Control) before Advanced Edition 4.5 HF1 places a session ID i (no CVSS)
- [CVE-2007-5804](https://cve.now/CVE-2007-5804.md): cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system g (no CVSS)
- [CVE-2007-5805](https://cve.now/CVE-2007-5805.md): cfgcon in IBM AIX 5.2 and 5.3 does not properly validate the argument to the "-p" option to swcons, which allows local users in the system g (no CVSS)
- [CVE-2007-5806](https://cve.now/CVE-2007-5806.md): Cross-site scripting (XSS) vulnerability in Services/Utilities/classes/class.ilUtil.php in ILIAS 3.8.3 and earlier allows remote attackers t (no CVSS)
- [CVE-2007-5807](https://cve.now/CVE-2007-5807.md): Buffer overflow in the register function in Ultra Star Reader ActiveX control in SSReader allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2007-5808](https://cve.now/CVE-2007-5808.md): Unspecified vulnerability in the Groupmax Collaboration - Schedule component in Hitachi Groupmax Collaboration Portal 07-30 through 07-30-/F (no CVSS)
- [CVE-2007-5809](https://cve.now/CVE-2007-5809.md): Cross-site scripting (XSS) vulnerability in Hitachi Web Server 01-00 through 03-10, as used by certain Cosminexus products, allows remote at (no CVSS)
- [CVE-2007-5810](https://cve.now/CVE-2007-5810.md): Hitachi Web Server 01-00 through 03-00-01, as used by certain Cosminexus products, does not properly validate SSL client certificates, which (no CVSS)
- [CVE-2007-5811](https://cve.now/CVE-2007-5811.md): Directory traversal vulnerability in PageTraiteDownload.php in phpMyConferences 8.0.2 and earlier allows remote attackers to read arbitrary (no CVSS)
- [CVE-2007-5812](https://cve.now/CVE-2007-5812.md): Directory traversal vulnerability in modules/Builder/DownloadModule.php in ModuleBuilder 1.0 allows remote attackers to read arbitrary files (no CVSS)
- [CVE-2007-5813](https://cve.now/CVE-2007-5813.md): Multiple directory traversal vulnerabilities in download.php in ISPworker 1.21 allow remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2007-4217](https://cve.now/CVE-2007-4217.md): Stack-based buffer overflow in the domacro function in ftp in IBM AIX 5.2 and 5.3 allows local users to gain privileges via a long parameter (no CVSS)
- [CVE-2007-4513](https://cve.now/CVE-2007-4513.md): Multiple stack-based buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via a long argument to the (1) "-p" option (no CVSS)
- [CVE-2007-4621](https://cve.now/CVE-2007-4621.md): Buffer overflow in crontab in IBM AIX 5.2 allows local users to gain privileges via long command line arguments. (no CVSS)
- [CVE-2007-4622](https://cve.now/CVE-2007-4622.md): Integer underflow in the dns\_name\_fromtext function in (1) libdns\_nonsecure.a and (2) libdns\_secure.a in IBM AIX 5.2 allows local users to g (no CVSS)
- [CVE-2007-4623](https://cve.now/CVE-2007-4623.md): Stack-based buffer overflow in the sendrmt function in bellmail in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via a lo (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-11-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.