# CVEs published 2007-11-06

12 CVEs were published on November 6, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-4994](https://cve.now/CVE-2007-4994.md): Certificate Server 7.2 in Red Hat Certificate System (RHCS) does not properly handle new revocations that occur while a Certificate Revocati (no CVSS)
- [CVE-2007-5840](https://cve.now/CVE-2007-5840.md): PHP remote file inclusion vulnerability in starnet/themes/c-sky/main.inc.php in Fred Stuurman SyndeoCMS 2.5.01 allows remote attackers to ex (no CVSS)
- [CVE-2007-5841](https://cve.now/CVE-2007-5841.md): PHP remote file inclusion vulnerability in admin/index.php in nuBoard 0.5 allows remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2007-5842](https://cve.now/CVE-2007-5842.md): Multiple PHP remote file inclusion vulnerabilities in Vortex Portal 1.0.42 allow remote attackers to execute arbitrary PHP code via a URL in (no CVSS)
- [CVE-2007-5843](https://cve.now/CVE-2007-5843.md): PHP remote file inclusion vulnerability in includes/common.php in scWiki 1.0 Beta 2 allows remote attackers to execute arbitrary PHP code vi (no CVSS)
- [CVE-2007-5844](https://cve.now/CVE-2007-5844.md): Directory traversal vulnerability in inc/includes.inc in GuppY 4.6.3 allows remote attackers to include and execute arbitrary local files vi (no CVSS)
- [CVE-2007-5845](https://cve.now/CVE-2007-5845.md): Directory traversal vulnerability in error.php in GuppY 4.6.3, 4.5.16, and earlier allows remote attackers to include and execute arbitrary (no CVSS)
- [CVE-2007-5846](https://cve.now/CVE-2007-5846.md): The SNMP agent (snmp\_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) via (no CVSS)
- [CVE-2007-3874](https://cve.now/CVE-2007-3874.md): Directory traversal vulnerability in the tftp/mftp daemon in the PXE server component (pxemtftp.exe) in Symantec Altiris Deployment Solution (no CVSS)
- [CVE-2007-4997](https://cve.now/CVE-2007-4997.md): Integer underflow in the ieee80211\_rx function in net/ieee80211/ieee80211\_rx.c in the Linux kernel 2.6.x before 2.6.23 allows remote attacke (no CVSS)
- [CVE-2007-5838](https://cve.now/CVE-2007-5838.md): Aclient in Symantec Altiris Deployment Solution 6.x before 6.8.380.0 allows local users to gain local System privileges via the "Enable key- (no CVSS)
- [CVE-2007-5839](https://cve.now/CVE-2007-5839.md): The e\_hostname function in commands.c in BitchX 1.1a allows local users to overwrite arbitrary files via a symlink attack on temporary files (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-11-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.