# CVEs published 2007-11-23

19 CVEs were published on November 23, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6100](https://cve.now/CVE-2007-6100.md): Cross-site scripting (XSS) vulnerability in libraries/auth/cookie.auth.lib.php in phpMyAdmin before 2.11.2.2, when logins are authenticated (no CVSS)
- [CVE-2007-6101](https://cve.now/CVE-2007-6101.md): Ability Mail Server before 2.61 allows remote authenticated users to cause a denial of service (daemon crash) via (1) malformed number list (no CVSS)
- [CVE-2007-6102](https://cve.now/CVE-2007-6102.md): Cross-site scripting (XSS) vulnerability in Feed to JavaScript (Feed2JS) 1.91 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2007-6103](https://cve.now/CVE-2007-6103.md): I Hear U (IHU) 0.5.6 and earlier allows remote attackers to cause (1) a denial of service (infinite loop) via a packet that contains zero in (no CVSS)
- [CVE-2007-6104](https://cve.now/CVE-2007-6104.md): Cross-site scripting (XSS) vulnerability in the Instant Web Publishing feature in FileMaker Pro 7 and 8, Server 7 and 8, and Developer 7 all (no CVSS)
- [CVE-2007-6105](https://cve.now/CVE-2007-6105.md): Multiple PHP remote file inclusion vulnerabilities in TalkBack 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the ( (no CVSS)
- [CVE-2007-6106](https://cve.now/CVE-2007-6106.md): SQL injection vulnerability in index.php in AlstraSoft E-Friends 4.98 and earlier allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2007-6110](https://cve.now/CVE-2007-6110.md): Cross-site scripting (XSS) vulnerability in htsearch in htdig 3.2.0b6 allows remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2007-6111](https://cve.now/CVE-2007-6111.md): Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) allow remote attackers to cause a denial of service (crash) via (1) a (no CVSS)
- [CVE-2007-6112](https://cve.now/CVE-2007-6112.md): Buffer overflow in the PPP dissector Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (crash) and p (no CVSS)
- [CVE-2007-6113](https://cve.now/CVE-2007-6113.md): Integer signedness error in the DNP3 dissector in Wireshark (formerly Ethereal) 0.10.12 to 0.99.6 allows remote attackers to cause a denial (no CVSS)
- [CVE-2007-6114](https://cve.now/CVE-2007-6114.md): Multiple buffer overflows in Wireshark (formerly Ethereal) 0.99.0 through 0.99.6 allow remote attackers to cause a denial of service (crash) (no CVSS)
- [CVE-2007-6115](https://cve.now/CVE-2007-6115.md): Buffer overflow in the ANSI MAP dissector for Wireshark (formerly Ethereal) 0.99.5 to 0.99.6, when running on unspecified platforms, allows (no CVSS)
- [CVE-2007-6116](https://cve.now/CVE-2007-6116.md): The Firebird/Interbase dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite loop (no CVSS)
- [CVE-2007-6117](https://cve.now/CVE-2007-6117.md): Unspecified vulnerability in the HTTP dissector for Wireshark (formerly Ethereal) 0.10.14 to 0.99.6 allows remote attackers to cause a denia (no CVSS)
- [CVE-2007-6118](https://cve.now/CVE-2007-6118.md): The MEGACO dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (long loop and r (no CVSS)
- [CVE-2007-6119](https://cve.now/CVE-2007-6119.md): The DCP ETSI dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (long loop and resource (no CVSS)
- [CVE-2007-6120](https://cve.now/CVE-2007-6120.md): The Bluetooth SDP dissector Wireshark (formerly Ethereal) 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service (infinite lo (no CVSS)
- [CVE-2007-6121](https://cve.now/CVE-2007-6121.md): Wireshark (formerly Ethereal) 0.8.16 to 0.99.6 allows remote attackers to cause a denial of service (crash) via a malformed RPC Portmap pack (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-11-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.