# CVEs published 2007-11-22

18 CVEs were published on November 22, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6082](https://cve.now/CVE-2007-6082.md): Direct static code injection vulnerability in acp/savenews.php in Sciurus Hosting Panel, possibly 2.0.3, allows remote attackers to inject a (no CVSS)
- [CVE-2007-6083](https://cve.now/CVE-2007-6083.md): SQL injection vulnerability in admin/index.php in IceBB 1.0-rc6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarde (no CVSS)
- [CVE-2007-6084](https://cve.now/CVE-2007-6084.md): SQL injection vulnerability in software-description.php in HotScripts Clone Script allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2007-6085](https://cve.now/CVE-2007-6085.md): Multiple cross-site scripting (XSS) vulnerabilities in index.php in VigileCMS 1.4 allow remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2007-6086](https://cve.now/CVE-2007-6086.md): Directory traversal vulnerability in index.php in VigileCMS 1.4 allows remote attackers to include and execute arbitrary local files via dir (no CVSS)
- [CVE-2007-6087](https://cve.now/CVE-2007-6087.md): Cross-site request forgery (CSRF) vulnerability in index.php in VigileCMS 1.4 allows remote attackers to change the admin password via certa (no CVSS)
- [CVE-2007-6088](https://cve.now/CVE-2007-6088.md): PHP remote file inclusion vulnerability in includes/functions\_mod\_user.php in phpBBViet 02.03.07 and earlier allows remote attackers to exec (no CVSS)
- [CVE-2007-6089](https://cve.now/CVE-2007-6089.md): PHP remote file inclusion vulnerability in index.php in meBiblio 0.4.5 allows remote attackers to execute arbitrary PHP code via a URL in th (no CVSS)
- [CVE-2007-6090](https://cve.now/CVE-2007-6090.md): Cross-site scripting (XSS) vulnerability in index.php in Nuked-Klan 1.7.5 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2007-6091](https://cve.now/CVE-2007-6091.md): Multiple SQL injection vulnerabilities in files/login.asp in JiRo's Banner System (JBS) 2.0, and possibly JiRo's Upload Manager (aka JiRo's (no CVSS)
- [CVE-2007-6092](https://cve.now/CVE-2007-6092.md): Buffer overflow in libsrtp in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and attack vectors. (no CVSS)
- [CVE-2007-6093](https://cve.now/CVE-2007-6093.md): The SRTP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service (ker (no CVSS)
- [CVE-2007-6094](https://cve.now/CVE-2007-6094.md): The IPsec module in the VPN component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial o (no CVSS)
- [CVE-2007-6095](https://cve.now/CVE-2007-6095.md): The SIP component in Ingate Firewall before 4.6.0 and SIParator before 4.6.0, when Remote NAT Traversal is employed, does not properly perfo (no CVSS)
- [CVE-2007-6096](https://cve.now/CVE-2007-6096.md): Ingate Firewall before 4.6.0 and SIParator before 4.6.0 use cleartext storage for passwords of "administrators with less privileges," which (no CVSS)
- [CVE-2007-6097](https://cve.now/CVE-2007-6097.md): Unspecified vulnerability in the ICMP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 has unknown impact and remot (no CVSS)
- [CVE-2007-6098](https://cve.now/CVE-2007-6098.md): Ingate Firewall before 4.6.0 and SIParator before 4.6.0 do not log truncated (1) ICMP, (2) UDP, and (3) TCP packets, which has unknown impac (no CVSS)
- [CVE-2007-6099](https://cve.now/CVE-2007-6099.md): Unspecified vulnerability in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 might leave "media pinholes" open upon a restart of the (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-11-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.