# CVEs published 2007-12-05

7 CVEs were published on December 5, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-5355](https://cve.now/CVE-2007-5355.md): The Web Proxy Auto-Discovery (WPAD) feature in Microsoft Internet Explorer 6 and 7, when a primary DNS suffix with three or more components (no CVSS)
- [CVE-2007-5613](https://cve.now/CVE-2007-5613.md): Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web sc (no CVSS, org.mortbay.jetty:jetty)
- [CVE-2007-5614](https://cve.now/CVE-2007-5614.md): Mortbay Jetty before 6.1.6rc1 does not properly handle "certain quote sequences" in HTML cookie parameters, which allows remote attackers to (no CVSS, org.mortbay.jetty:jetty)
- [CVE-2007-5615](https://cve.now/CVE-2007-5615.md): CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP resp (no CVSS, org.mortbay.jetty:jetty)
- [CVE-2007-6014](https://cve.now/CVE-2007-6014.md): SQL injection vulnerability in post.php in Beehive Forum 0.7.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2007-6240](https://cve.now/CVE-2007-6240.md): SQL injection vulnerability in active.asp in Snitz Forums 2000 3.4.06 allows remote attackers to execute arbitrary SQL commands via the Buil (no CVSS)
- [CVE-2007-6241](https://cve.now/CVE-2007-6241.md): Multiple unspecified vulnerabilities in Beehive Forum 0.7.1 have unknown "critical" impact and attack vectors, different issues than CVE-200 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-12-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.