# CVEs published 2007-12-01 9 CVEs were published on December 1, 2007: 0 critical, 0 high. Days are UTC. - [CVE-2007-5502](https://cve.now/CVE-2007-5502.md): The PRNG implementation for the OpenSSL FIPS Object Module 1.1.1 does not perform auto-seeding during the FIPS self-test, which generates ra (no CVSS) - [CVE-2007-5742](https://cve.now/CVE-2007-5742.md): Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote atta (no CVSS) - [CVE-2007-6201](https://cve.now/CVE-2007-6201.md): Unspecified vulnerability in Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows attackers to cause a denial of service (hang) via a (no CVSS) - [CVE-2007-6202](https://cve.now/CVE-2007-6202.md): SQL injection vulnerability in plugins/search/search.php in Neocrome Seditio CMS 121 and earlier allows remote attackers to execute arbitrar (no CVSS) - [CVE-2007-6196](https://cve.now/CVE-2007-6196.md): Cross-site scripting (XSS) vulnerability in util.php in Calacode @Mail before 5.2 allows remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2007-6197](https://cve.now/CVE-2007-6197.md): The Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows remote attackers to obtain version numbers and (no CVSS) - [CVE-2007-6198](https://cve.now/CVE-2007-6198.md): portal/server.pt in the Plumtree portal in BEA AquaLogic Interaction 5.0.2 through 5.0.4 and 6.0.1.218452 allows wildcards in advanced searc (no CVSS) - [CVE-2007-6199](https://cve.now/CVE-2007-6199.md): rsync before 3.0.0pre6, when running a writable rsync daemon that is not using chroot, allows remote attackers to access restricted files vi (no CVSS) - [CVE-2007-6200](https://cve.now/CVE-2007-6200.md): Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, exclud (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2007-12-01 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.