# CVEs published 2007-11-30 27 CVEs were published on November 30, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-5494](https://cve.now/CVE-2007-5494.md): Memory leak in the Red Hat Content Accelerator kernel patch in Red Hat Enterprise Linux (RHEL) 4 and 5 allows local users to cause a denial (no CVSS) - [CVE-2007-5503](https://cve.now/CVE-2007-5503.md): Multiple integer overflows in Cairo before 1.4.12 might allow remote attackers to execute arbitrary code, as demonstrated using a crafted PN (no CVSS) - [CVE-2007-6150](https://cve.now/CVE-2007-6150.md): The "internal state tracking" code for the random and urandom devices in FreeBSD 5.5, 6.1 through 6.3, and 7.0 beta 4 allows local users to (no CVSS) - [CVE-2007-6170](https://cve.now/CVE-2007-6170.md): SQL injection vulnerability in the Call Detail Record Postgres logging engine (cdr\_pgsql) in Asterisk 1.4.x before 1.4.15, 1.2.x before 1.2. (no CVSS) - [CVE-2007-6171](https://cve.now/CVE-2007-6171.md): SQL injection vulnerability in the Postgres Realtime Engine (res\_config\_pgsql) in Asterisk 1.4.x before 1.4.15 and C.x before C.1.0-beta6 al (no CVSS) - [CVE-2007-6187](https://cve.now/CVE-2007-6187.md): Multiple directory traversal vulnerabilities in PHP Content Architect (aka NoAh) 0.9 pre 1.2 and earlier allow remote attackers to read arbi (no CVSS) - [CVE-2007-6188](https://cve.now/CVE-2007-6188.md): Multiple directory traversal vulnerabilities in TuMusika Evolution 1.7R5 allow remote attackers to include and execute arbitrary local files (no CVSS) - [CVE-2007-6189](https://cve.now/CVE-2007-6189.md): A certain ActiveX control in (1) OScan8.ocx and (2) Oscan81.ocx in BitDefender Online Anti-Virus Scanner 8.0 allows remote attackers to exec (no CVSS) - [CVE-2007-6190](https://cve.now/CVE-2007-6190.md): The HTTP daemon in the Cisco Unified IP Phone, when the Extension Mobility feature is enabled, allows remote authenticated users of other ph (no CVSS) - [CVE-2007-6191](https://cve.now/CVE-2007-6191.md): Multiple PHP remote file inclusion vulnerabilities in Armin Burger p.mapper 3.2.0 beta3 allow remote attackers to execute arbitrary PHP code (no CVSS) - [CVE-2007-6192](https://cve.now/CVE-2007-6192.md): The web management interface in Citrix NetScaler 8.0 build 47.8 uses weak encryption (XOR of unpadded data) to store credentials within a co (no CVSS) - [CVE-2007-6193](https://cve.now/CVE-2007-6193.md): The web management interface in Citrix NetScaler 8.0 build 47.8 stores the device's primary IP address in a cookie, which might allow remote (no CVSS) - [CVE-2007-6172](https://cve.now/CVE-2007-6172.md): Multiple SQL injection vulnerabilities in wpQuiz 2.7 allow remote attackers to execute arbitrary SQL commands via the id parameter to (1) vi (no CVSS) - [CVE-2007-6173](https://cve.now/CVE-2007-6173.md): Cross-site scripting (XSS) vulnerability in c/portal/login in Liferay Enterprise Portal 4.3.1 allows remote attackers to inject arbitrary we (no CVSS) - [CVE-2007-6174](https://cve.now/CVE-2007-6174.md): PHPDevShell before 0.7.0 allows remote authenticated users to gain privileges via a crafted request to update a user profile. (no CVSS) - [CVE-2007-6175](https://cve.now/CVE-2007-6175.md): Buffer overflow in Lhaplus 1.55 and earlier allows remote attackers to execute arbitrary code via a crafted LZH archive, a different vector (no CVSS) - [CVE-2007-6176](https://cve.now/CVE-2007-6176.md): kb\_whois.cgi in K+B-Bestellsystem (aka KB-Bestellsystem) allows remote attackers to execute arbitrary commands via shell metacharacters in t (no CVSS) - [CVE-2007-6177](https://cve.now/CVE-2007-6177.md): PHP remote file inclusion vulnerability in Exchange/include.php in PHP\_CON 1.3 allows remote attackers to execute arbitrary PHP code via a U (no CVSS) - [CVE-2007-6178](https://cve.now/CVE-2007-6178.md): Multiple PHP remote file inclusion vulnerabilities in Easy Hosting Control Panel for Ubuntu (EHCP) 0.22.8 and earlier allow remote attackers (no CVSS) - [CVE-2007-6179](https://cve.now/CVE-2007-6179.md): Multiple PHP remote file inclusion vulnerabilities in Charray's CMS 0.9.3 allow remote attackers to execute arbitrary PHP code via a URL in (no CVSS) - [CVE-2007-6180](https://cve.now/CVE-2007-6180.md): Race condition in the Remote Procedure Call kernel module (rpcmod) in Sun Solaris 8 through 10 allows local users to cause a denial of servi (no CVSS) - [CVE-2007-6181](https://cve.now/CVE-2007-6181.md): Heap-based buffer overflow in cygwin1.dll in Cygwin 1.5.7 and earlier allows context-dependent attackers to execute arbitrary code via a fil (no CVSS) - [CVE-2007-6182](https://cve.now/CVE-2007-6182.md): The responder program in ISPsystem ISPmanager (aka ISPmgr) 4.2.15.1 allows local users to gain privileges via shell metacharacters in comman (no CVSS) - [CVE-2007-6183](https://cve.now/CVE-2007-6183.md): Format string vulnerability in the mdiag\_initialize function in gtk/src/rbgtkmessagedialog.c in Ruby-GNOME 2 (aka Ruby/Gnome2) 0.16.0, and S (no CVSS, gtk2) - [CVE-2007-6184](https://cve.now/CVE-2007-6184.md): Directory traversal vulnerability in index.php in Project Alumni 1.0.9 allows remote attackers to include and execute arbitrary local files (no CVSS) - [CVE-2007-6185](https://cve.now/CVE-2007-6185.md): Directory traversal vulnerability in users/files.php in Eurologon CMS allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2007-6186](https://cve.now/CVE-2007-6186.md): Unspecified vulnerability in PHPDevShell before 0.7.0 has unknown impact and attack vectors, involving a "minor security bug in repair & opt (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-11-30 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.