# CVEs published 2007-11-26

12 CVEs were published on November 26, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-5959](https://cve.now/CVE-2007-5959.md): Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 allow remote attackers to cause a denial (no CVSS)
- [CVE-2007-5960](https://cve.now/CVE-2007-5960.md): Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Referer header to the window or frame in which script is running, instea (no CVSS)
- [CVE-2007-6122](https://cve.now/CVE-2007-6122.md): The default\_encrypt function in encrypt.c in IRC Services before 5.0.63, and 5.1.x before 5.1.7, allows remote attackers to cause a denial o (no CVSS)
- [CVE-2007-6123](https://cve.now/CVE-2007-6123.md): Unspecified vulnerability in IRC Services 5.1.8 has unknown impact and attack vectors. (no CVSS)
- [CVE-2007-6124](https://cve.now/CVE-2007-6124.md): Cross-site scripting (XSS) vulnerability in signin.php in Softbiz Freelancers Script 1 allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2007-6125](https://cve.now/CVE-2007-6125.md): SQL injection vulnerability in search\_form.php in Softbiz Freelancers Script 1 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2007-6126](https://cve.now/CVE-2007-6126.md): Multiple cross-site scripting (XSS) vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2007-6127](https://cve.now/CVE-2007-6127.md): Multiple SQL injection vulnerabilities in project alumni 1.0.9 and earlier allow remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2007-6128](https://cve.now/CVE-2007-6128.md): SQL injection vulnerability in events.php in WorkingOnWeb 2.0.1400 allows remote attackers to execute arbitrary SQL commands via the idevent (no CVSS)
- [CVE-2007-6129](https://cve.now/CVE-2007-6129.md): Directory traversal vulnerability in scripts/include/show\_content.php in Amber Script 1.0 allows remote attackers to include and execute arb (no CVSS)
- [CVE-2007-6130](https://cve.now/CVE-2007-6130.md): gnump3d 2.9final does not apply password protection to its plugins, which might allow remote attackers to bypass intended access restriction (no CVSS)
- [CVE-2007-6131](https://cve.now/CVE-2007-6131.md): buttonpressed.sh in scanbuttond 0.2.3 allows local users to overwrite arbitrary files via a symlink attack on the (1) scan.pnm and (2) scan. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-11-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.