# CVEs published 2007-11-29

16 CVEs were published on November 29, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-4346](https://cve.now/CVE-2007-4346.md): The Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allows remote at (no CVSS)
- [CVE-2007-4347](https://cve.now/CVE-2007-4347.md): Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 an (no CVSS)
- [CVE-2007-6156](https://cve.now/CVE-2007-6156.md): Multiple cross-site scripting (XSS) vulnerabilities in base\_qry\_main.php in Base Analysis and Security Engine (BASE) before 1.3.9 allow remo (no CVSS)
- [CVE-2007-6157](https://cve.now/CVE-2007-6157.md): Cross-site scripting (XSS) vulnerability in index.php in SimpleGallery 0.1.3 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2007-6158](https://cve.now/CVE-2007-6158.md): Multiple SQL injection vulnerabilities in caladmin.inc.php in Proverbs Web Calendar 1.1 and earlier allow remote attackers to execute arbitr (no CVSS)
- [CVE-2007-6159](https://cve.now/CVE-2007-6159.md): SQL injection vulnerability in index.php in Tilde CMS 4.x and earlier allows remote attackers to execute arbitrary SQL commands via the aars (no CVSS)
- [CVE-2007-6160](https://cve.now/CVE-2007-6160.md): Cross-site scripting (XSS) vulnerability in index.php in Tilde CMS 4.x and earlier allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2007-6161](https://cve.now/CVE-2007-6161.md): index.php in Tilde CMS 4.x and earlier allows remote attackers to obtain sensitive information via a certain search parameter value in a sea (no CVSS)
- [CVE-2007-6162](https://cve.now/CVE-2007-6162.md): Cross-site scripting (XSS) vulnerability in index.php in FMDeluxe 2.1.0 allows remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2007-6163](https://cve.now/CVE-2007-6163.md): SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL commands via the pword (no CVSS)
- [CVE-2007-6164](https://cve.now/CVE-2007-6164.md): Multiple SQL injection vulnerabilities in Eurologon CMS allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) (no CVSS)
- [CVE-2007-6165](https://cve.now/CVE-2007-6165.md): Mail in Apple Mac OS X Leopard (10.5.1) allows user-assisted remote attackers to execute arbitrary code via an AppleDouble attachment contai (no CVSS)
- [CVE-2007-6166](https://cve.now/CVE-2007-6166.md): Stack-based buffer overflow in Apple QuickTime before 7.3.1, as used in QuickTime Player on Windows XP and Safari on Mac OS X, allows remote (no CVSS)
- [CVE-2007-6167](https://cve.now/CVE-2007-6167.md): Untrusted search path vulnerability in yast2-core in SUSE Linux might allow local users to execute arbitrary code by creating a malicious ya (no CVSS)
- [CVE-2007-6168](https://cve.now/CVE-2007-6168.md): SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the username par (no CVSS)
- [CVE-2007-6169](https://cve.now/CVE-2007-6169.md): SQL injection vulnerability in admin/index2.asp in GOUAE DWD Realty allows remote attackers to execute arbitrary SQL commands via the uname (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-11-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.