# CVEs published 2007-11-07

18 CVEs were published on November 7, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-5741](https://cve.now/CVE-2007-5741.md): Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled o (no CVSS, plone)
- [CVE-2007-5887](https://cve.now/CVE-2007-5887.md): SQL injection vulnerability in boards/printer.asp in ASP Message Board 2.2.1c allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2007-5888](https://cve.now/CVE-2007-5888.md): Cross-site scripting (XSS) vulnerability in displayecard.php in Coppermine Photo Gallery (CPG) before 1.4.14 allows remote attackers to inje (no CVSS)
- [CVE-2007-1659](https://cve.now/CVE-2007-1659.md): Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to cause a denial of service (crash) and pos (no CVSS)
- [CVE-2007-1660](https://cve.now/CVE-2007-1660.md): Perl-Compatible Regular Expression (PCRE) library before 7.0 does not properly calculate sizes for unspecified "multiple forms of character (no CVSS)
- [CVE-2007-1661](https://cve.now/CVE-2007-1661.md): Perl-Compatible Regular Expression (PCRE) library before 7.3 backtracks too far when matching certain input bytes against some regex pattern (no CVSS)
- [CVE-2007-1662](https://cve.now/CVE-2007-1662.md): Perl-Compatible Regular Expression (PCRE) library before 7.3 reads past the end of the string when searching for unmatched brackets and pare (no CVSS)
- [CVE-2007-2395](https://cve.now/CVE-2007-2395.md): Unspecified vulnerability in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a crafted image description at (no CVSS)
- [CVE-2007-3750](https://cve.now/CVE-2007-3750.md): Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via crafted Sample Table Sample D (no CVSS)
- [CVE-2007-3751](https://cve.now/CVE-2007-3751.md): Unspecified vulnerability in QuickTime for Java in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via untruste (no CVSS)
- [CVE-2007-4672](https://cve.now/CVE-2007-4672.md): Stack-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid UncompressedQuick (no CVSS)
- [CVE-2007-4675](https://cve.now/CVE-2007-4675.md): Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allows remote attackers to (no CVSS)
- [CVE-2007-4676](https://cve.now/CVE-2007-4676.md): Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsi (no CVSS)
- [CVE-2007-4677](https://cve.now/CVE-2007-4677.md): Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid color table size w (no CVSS)
- [CVE-2007-4766](https://cve.now/CVE-2007-4766.md): Multiple integer overflows in Perl-Compatible Regular Expression (PCRE) library before 7.3 allow context-dependent attackers to cause a deni (no CVSS)
- [CVE-2007-4767](https://cve.now/CVE-2007-4767.md): Perl-Compatible Regular Expression (PCRE) library before 7.3 does not properly compute the length of (1) a \\p sequence, (2) a \\P sequence, o (no CVSS)
- [CVE-2007-4768](https://cve.now/CVE-2007-4768.md): Heap-based buffer overflow in Perl-Compatible Regular Expression (PCRE) library before 7.3 allows context-dependent attackers to execute arb (no CVSS)
- [CVE-2007-5116](https://cve.now/CVE-2007-5116.md): Buffer overflow in the polymorphic opcode support in the Regular Expression Engine (regcomp.c) in Perl 5.8 allows context-dependent attacker (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-11-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.