# CVEs published 2007-11-21

7 CVEs were published on November 21, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6081](https://cve.now/CVE-2007-6081.md): AdventNet EventLog Analyzer build 4030 for Windows, and possibly other versions and platforms, installs a mysql instance with a default "roo (no CVSS)
- [CVE-2007-5612](https://cve.now/CVE-2007-5612.md): CIM Server in IBM Director 5.20.1 and earlier allows remote attackers to cause a denial of service (CPU consumption, connection slot exhaust (no CVSS)
- [CVE-2007-6078](https://cve.now/CVE-2007-6078.md): Multiple SQL injection vulnerabilities in SkyPortal RC6 allow remote attackers to execute arbitrary SQL commands via unspecified parameters (no CVSS)
- [CVE-2007-6079](https://cve.now/CVE-2007-6079.md): Directory traversal vulnerability in include/common.php in bcoos 1.0.10 allows remote attackers to include and execute arbitrary local files (no CVSS)
- [CVE-2007-6080](https://cve.now/CVE-2007-6080.md): SQL injection vulnerability in modules/banners/click.php in the banners module for bcoos 1.0.10 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2007-6077](https://cve.now/CVE-2007-6077.md): The session fixation protection mechanism in cgi\_process.rb in Rails 1.2.4, as used in Ruby on Rails, removes the :cookie\_only attribute fro (no CVSS, rails)
- [CVE-2007-6063](https://cve.now/CVE-2007-6063.md): Buffer overflow in the isdn\_net\_setcfg function in isdn\_net.c in Linux kernel 2.6.23 allows local users to have an unknown impact via a craf (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-11-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.