# CVEs published 2007-12-10

21 CVEs were published on December 10, 2007: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6303](https://cve.now/CVE-2007-6303.md): MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4 does not update the DEFINER value of a view when the view is altered (no CVSS)
- [CVE-2007-6304](https://cve.now/CVE-2007-6304.md): The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS (no CVSS)
- [CVE-2007-6305](https://cve.now/CVE-2007-6305.md): Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 7 R3.2.0 allow attackers to gain privileges via "some HMC comm (no CVSS)
- [CVE-2007-5969](https://cve.now/CVE-2007-5969.md): MySQL Community Server 5.0.x before 5.0.51, Enterprise Server 5.0.x before 5.0.52, Server 5.1.x before 5.1.23, and Server 6.0.x before 6.0.4 (no CVSS)
- [CVE-2007-5970](https://cve.now/CVE-2007-5970.md): MySQL 5.1.x before 5.1.23 and 6.0.x before 6.0.4 allows remote authenticated users to gain privileges on arbitrary tables via unspecified ve (no CVSS)
- [CVE-2007-6302](https://cve.now/CVE-2007-6302.md): Multiple heap-based buffer overflows in avirus.exe in Novell NetMail 3.5.2 before Messaging Architects M+NetMail 3.52f (aka 3.5.2F) allows r (no CVSS)
- [CVE-2007-6287](https://cve.now/CVE-2007-6287.md): Cross-site scripting (XSS) vulnerability in the login page in Lxlabs HyperVM 2.0 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2007-6288](https://cve.now/CVE-2007-6288.md): Multiple SQL injection vulnerabilities in TCExam before 5.1.000 allow remote attackers to execute arbitrary SQL commands via unspecified vec (no CVSS)
- [CVE-2007-6289](https://cve.now/CVE-2007-6289.md): Multiple PHP remote file inclusion vulnerabilities in SerWeb 2.0.0 dev1 and earlier allow remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2007-6290](https://cve.now/CVE-2007-6290.md): Multiple directory traversal vulnerabilities in js/get\_js.php in SERWeb 2.0.0 dev1 and earlier allow remote attackers to read arbitrary file (no CVSS)
- [CVE-2007-6291](https://cve.now/CVE-2007-6291.md): SQL injection vulnerability in abm.aspx in Xigla Absolute Banner Manager .NET 4.0 allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2007-6292](https://cve.now/CVE-2007-6292.md): SQL injection vulnerability in leggi\_commenti.asp in MWOpen 1.4 and earlier allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2007-6293](https://cve.now/CVE-2007-6293.md): Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 6 R1.3 allow attackers to gain privileges via "some HMC comman (no CVSS)
- [CVE-2007-6294](https://cve.now/CVE-2007-6294.md): Multiple unspecified vulnerabilities in IBM Hardware Management Console (HMC) 3 R3.7 allow attackers to gain privileges via "some HMC comman (no CVSS)
- [CVE-2007-6295](https://cve.now/CVE-2007-6295.md): Cross-site scripting (XSS) vulnerability in the WebRunMenuFrame page in the online meeting center template in IBM Lotus Sametime before 8.0 (no CVSS)
- [CVE-2007-6296](https://cve.now/CVE-2007-6296.md): PHP remote file inclusion vulnerability in users\_popupL.php3 in phpMyChat 0.14.5 allows remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2007-6297](https://cve.now/CVE-2007-6297.md): Multiple cross-site scripting (XSS) vulnerabilities in PHPMyChat 0.14.5 allow remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2007-6298](https://cve.now/CVE-2007-6298.md): Cross-site scripting (XSS) vulnerability in the Shoutbox module for Drupal 5.x before Shoutbox 5.x-1.1 allows remote authenticated users to (no CVSS)
- [CVE-2007-6299](https://cve.now/CVE-2007-6299.md): Multiple SQL injection vulnerabilities in Drupal and vbDrupal 4.7.x before 4.7.9 and 5.x before 5.4 allow remote attackers to execute arbitr (no CVSS)
- [CVE-2007-6300](https://cve.now/CVE-2007-6300.md): Cross-site request forgery (CSRF) vulnerability in Fusion News 3.9.0 allows remote attackers to perform unauthorized actions via unspecified (no CVSS)
- [CVE-2007-6301](https://cve.now/CVE-2007-6301.md): Cross-site scripting (XSS) vulnerability in compose.php in OpenNewsletter 2.5 and earlier allows remote attackers to inject arbitrary web sc (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2007-12-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.