CVEs published in May 2008
384 vulnerabilities, 52 critical, 0 exploited.
- dotcmsCross-site scripting (XSS) vulnerability in search-results.dot in dotCMS 1.x allows remote...4.3 Medium
- wajox software mircrossys cmsPHP remote file inclusion vulnerability in index.php in Wajox Software microSSys CMS 1.5 and...7.5 High
- alkalinephpSQL injection vulnerability in thread.php in AlkalinePHP 0.80.00 beta and earlier allows remote...7.5 High
- tagworx cmsMultiple SQL injection vulnerabilities in TAGWORX.CMS 3.00.02 allow remote attackers to execute...7.5 High
- entertainmentscriptSQL injection vulnerability in play.php in EntertainmentScript 1.4.0 allows remote attackers to...7.5 High
- wordpressUnrestricted file upload vulnerability in WordPress 2.5.1 and earlier might allow remote...9.0 High
- codeplex subsonicSubSonic allows remote attackers to bypass pagesize limits and cause a denial of service (CPU...7.8 High
- hp software updateHpufunction.dll 4.0.0.1 in HP Software Update exposes the unsafe (1) ExecuteAsync and (2) Execute...6.8 Medium
- matt kimball and roger wolff mtrStack-based buffer overflow in the split_redraw function in split.c in mtr before 0.73, when...6.8 Medium
- broadcom brightstor arcserve backupMultiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0,...7.5 High
- broadcom brightstor arcserve backup, server protection suite, ca business protection suite +2 moreDirectory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and...10.0 High
- hp hp-uxUnspecified vulnerability in useradd on HP-UX B.11.11, B.11.23, and B.11.31 allows local users to...6.3 Medium
- foxitsoftware foxit readerStack-based buffer overflow in Foxit Reader before 2.3 build 2912 allows user-assisted remote...9.3 High
- archangelmgt archangel weblogSQL injection vulnerability in index.php in Archangel Weblog 0.90.02 and earlier allows remote...7.5 High
- wr-script wr-meetingDirectory traversal vulnerability in index.php in WR-Meeting 1.0, when magic_quotes_gpc is...6.8 Medium
- testmakerUnspecified vulnerability in the data export function in testMaker before 3.0p10 allows test...5.0 Medium
- gnugalleryDirectory traversal vulnerability in admin.php in GNU/Gallery 1.1.1.0 and earlier allows remote...7.5 High
- smeegoDirectory traversal vulnerability in index.php in Smeego 1.0, when magic_quotes_gpc is disabled,...6.8 Medium
- webmanager-pro cms webmanager-proMultiple SQL injection vulnerabilities in index.php in CMS WebManager-Pro allow remote attackers...7.5 High
- bcoosDirectory traversal vulnerability in highlight.php in bcoos 1.0.9 through 1.0.13 allows remote...5.0 Medium
- zomp zomplogZomplog 3.8.2 and earlier allows remote attackers to gain administrative access by creating an...7.5 High
- meltingicefs meltingice file systemMeltingIce File System 1.0 allows remote attackers to bypass application authentication, create...7.5 High
- mypicgalleryMyPicGallery 1.0 allows remote attackers to bypass application authentication and gain...7.5 High
- alkalinephpAlkalinePHP 0.77.35 and earlier allows remote attackers to bypass authentication and gain...7.5 High
- photostockplus uploader toolMultiple stack-based buffer overflows in the PhotoStockPlus Uploader Tool ActiveX control ...6.8 Medium
- gnu gnutlsInteger signedness error in the _gnutls_ciphertext2compressed function in lib/gnutls_cipher.c in...5.0 Medium
- gnu gnutlsThe _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in...9.3 High
- gnu gnutlsThe _gnutls_server_name_recv_params function in lib/ext_server_name.c in libgnutls in gnutls-serv...10.0 High
- typo3 air filemanagerUnspecified vulnerability in the air_filemanager 0.6.0 and earlier extension for TYPO3 allows...10.0 High
- typo3 air filemanagerCross-site scripting (XSS) vulnerability in the air_filemanager 0.6.0 and earlier extension for...4.3 Medium
- news manager managerNews Manager 2.0 allows remote attackers to bypass restrictions and obtain sensitive information...7.5 High
- news manager managerDirectory traversal vulnerability in attachments.php in News Manager 2.0 allows remote attackers...5.0 Medium
- avalonnet news managerPHP remote file inclusion vulnerability in ch_readalso.php in News Manager 2.0 allows remote...7.5 High
- news manager managerMultiple SQL injection vulnerabilities in News Manager 2.0 allow remote attackers to execute...7.5 High
- turnkeywebtools sunshop shopping cartSQL injection vulnerability in index.php in Turnkey Web Tools SunShop Shopping Cart 3.5.1 allows...7.5 High
- interspire activekbInterspire ActiveKB 1.5 and earlier allows remote attackers to gain privileges by setting the...7.5 High
- imgalleryMultiple SQL injection vulnerabilities in IMGallery 2.5, when magic_quotes_gpc is disabled, allow...7.5 High
- 68 classifieds classifiedsSQL injection vulnerability in category.php in 68 Classifieds 4.0.1 allows remote attackers to...7.5 High
- vastal phpvidCross-site scripting (XSS) vulnerability in search_results.php in Vastal I-Tech phpVID 1.1 and 1...4.3 Medium
- aspindir philboardMultiple SQL injection vulnerabilities in W1L3D4 Philboard 0.5 allow remote attackers to execute...7.5 High
- phpway kostenloses linkmanagementscriptSQL injection vulnerability in Kostenloses Linkmanagementscript allows remote attackers to...7.5 High
- citrix access essentials, presentation server, desktop server +1 more +3 moreUnspecified vulnerability in Citrix Presentation Server 4.5 and earlier, Citrix Access Essentials...6.5 Medium
- citrix access essentials, desktop server, presentation server +2 moreUnspecified vulnerability in SecureICA and ICA Basic encryption of Citrix Presentation Server 4.5...5.0 Medium
- sourceforge web sliderAdmin.php in Web Slider 0.6 allows remote attackers to bypass authentication and gain privileges...7.5 High
- roticv rantxThe admin.php file in Rantx allows remote attackers to bypass authentication and gain privileges...7.5 High
- rgboardPHP remote file inclusion vulnerability in include/bbs.lib.inc.php in Rgboard 3.0.12 allows...7.5 High
- rgboardCross-site scripting (XSS) vulnerability in rg_search.php in Rgboard 3.0.12, and possibly earlier...4.3 Medium
- mreaves pet grooming management systemPet Grooming Management System 2.0 allows remote attackers to gain privileges via a direct...7.5 High
- tpvgames mpcsadmin.php in Multi-Page Comment System (MPCS) 1.0 and 1.1 allows remote attackers to bypass...7.5 High
- net-snmpBuffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1,...6.8 Medium
- Show moreLoading…