CVEs published in May 2008
384 vulnerabilities, 52 critical, 0 exploited.
- sitemanCross-site scripting (XSS) vulnerability in index.php in Siteman 2.0.x2 allows remote attackers...4.3 Medium
- sitemanDirectory traversal vulnerability in index.php in Siteman 2.0.x2 allows remote authenticated...9.0 High
- phpThe escapeshellcmd API function in PHP before 5.2.6 has unknown impact and context-dependent...10.0 High
- phpStack-based buffer overflow in the FastCGI SAPI (fastcgi.c) in PHP before 5.2.6 has unknown...10.0 High
- php, apple mac os x, mac os x server +2 more +4 moreThe init_request_info function in sapi/cgi/cgi_main.c in PHP before 5.2.6 does not properly...9.8 Critical
- mysql, canonical ubuntu linux, debian linux +2 moreMySQL 4.1.x before 4.1.24, 5.0.x before 5.0.60, 5.1.x before 5.1.24, and 6.0.x before 6.0.5...4.6 Medium
- robocodeRobocode before 1.6.0 allows user-assisted remote attackers to "access the internals of the...7.5 High
- plain black webguiUnspecified vulnerability in Plain Black WebGUI 7.4.34 has unknown impact and attack vectors...10.0 High
- actualscripts actualanalyzer liteDirectory traversal vulnerability in admin.php in ActualScripts ActualAnalyzer Lite 2.78 allows...7.5 High
- astrocamCross-site scripting (XSS) vulnerability in pic.php in AstroCam 2.5.0 through 2.7.3 allows remote...4.3 Medium
- successkid harris wap chatMultiple PHP remote file inclusion vulnerabilities Harris Yusuf Arifin Harris Wap Chat 1.0, when...7.5 High
- virtual design studios vlbookDirectory traversal vulnerability in include/global.inc.php in Virtual Design Studio vlbook 1.21...7.5 High
- virtual design studios vlbookCross-site scripting (XSS) vulnerability in index.php in Virtual Design Studio vlbook 1.21 allows...4.3 Medium
- novell groupwiseBuffer overflow in Novell GroupWise 7 allows remote attackers to cause a denial of service or...9.3 High
- wordpressCross-site scripting (XSS) vulnerability in WordPress 2.5 allows remote attackers to inject...4.3 Medium
- minibbSQL injection vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers to execute...7.5 High
- minibbCross-site scripting (XSS) vulnerability in bb_admin.php in miniBB 2.2a allows remote attackers...4.3 Medium
- yourfreeworld jokes site scriptSQL injection vulnerability in jokes.php in YourFreeWorld Jokes Site Script allows remote...7.5 High
- phpgedviewMultiple unspecified vulnerabilities in PhpGedView before 4.1.5 have unknown impact and attack...10.0 High
- jooviliSQL injection vulnerability in browse.videos.php in Joovili 3.1 allows remote attackers to...7.5 High
- bitrix24 bitrix site managerOpen redirect vulnerability in redirect.php in Bitrix Site Manager 6.5 allows remote attackers to...6.1 Medium
- linux kernelThe bdx_ioctl_priv function in the tehuti driver (tehuti.c) in Linux kernel 2.6.x before 2.6.25.1...7.2 High
- e-post corporation mail serverThe POP3 server (EPSTPOP3S.EXE) 4.22 in E-Post Mail Server 4.10 allows remote attackers to obtain...4.3 Medium
- aspindir angelo-emlakCross-site scripting (XSS) vulnerability in hpz/admin/Default.asp in Angelo-Emlak 1.0 allows...4.3 Medium
- aspindir angelo-emlakMultiple SQL injection vulnerabilities in Angelo-Emlak 1.0 allow remote attackers to execute...7.5 High
- softpedia sitexs cmsCross-site scripting (XSS) vulnerability in index.php in Softpedia SiteXS CMS 0.1.1 Pre-Alpha...4.3 Medium
- sugarcrmAbsolute path traversal vulnerability in SugarCRM Sugar Community Edition 4.5.1 and 5.0.0 allows...5.0 Medium
- zoneminderZoneMinder before 1.23.3 allows remote authenticated users, and possibly unauthenticated...7.5 High
- netoffice dwinsincludes/library.php in netOffice Dwins 1.3 p2 compares the demoSession variable to the 'true'...7.5 High
- cpanelMultiple cross-site request forgery (CSRF) vulnerabilities in cPanel, possibly 11.18.3 and 11.19...4.3 Medium
- akamai technologies download managerThe Akamai Download Manager (aka DLM or dlmanager) ActiveX control (DownloadManagerV2.ocx) before...6.8 Medium
- wordpresswp-includes/vars.php in Wordpress before 2.2.3 does not properly extract the current path from...7.5 High
- debian linux, linux kernel, canonical ubuntu linux +5 more +7 moreRace condition in the directory notification subsystem (dnotify) in Linux kernel 2.6.x before 2.6...6.9 Medium
- linux kernelLinux kernel 2.6.17, and other versions before 2.6.22, does not check when a user attempts to set...2.1 Low