# CVEs published 2008-01-10

38 CVEs were published on January 10, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6680](https://cve.now/CVE-2007-6680.md): Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the trustchk\_block\_write function, which might allow… (no CVSS)
- [CVE-2008-0218](https://cve.now/CVE-2008-0218.md): Cross-site scripting (XSS) vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2008-0219](https://cve.now/CVE-2008-0219.md): SQL injection vulnerability in soporte\_horizontal\_w.php in PHP Webquest 2.6 allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2008-0220](https://cve.now/CVE-2008-0220.md): Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in… (no CVSS)
- [CVE-2008-0221](https://cve.now/CVE-2008-0221.md): Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway… (no CVSS)
- [CVE-2008-0222](https://cve.now/CVE-2008-0222.md): Unrestricted file upload vulnerability in ajaxfilemanager.php in the Wp-FileManager 1.2 plugin for WordPress allows remote attackers to… (no CVSS)
- [CVE-2008-0223](https://cve.now/CVE-2008-0223.md): Buffer overflow in JustSystems JSFC.DLL, as used in multiple JustSystems products such as Ichitaro, allows remote attackers to execute… (no CVSS)
- [CVE-2008-0224](https://cve.now/CVE-2008-0224.md): SQL injection vulnerability in index.php in the Newbb\_plus 0.92 and earlier module in RunCMS 1.6.1 allows remote attackers to execute… (no CVSS)
- [CVE-2008-0225](https://cve.now/CVE-2008-0225.md): Heap-based buffer overflow in the rmff\_dump\_cont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to… (no CVSS)
- [CVE-2008-0226](https://cve.now/CVE-2008-0226.md): Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute… (no CVSS)
- [CVE-2008-0227](https://cve.now/CVE-2008-0227.md): yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allows remote attackers to cause a denial of service (crash) via a… (no CVSS)
- [CVE-2008-0228](https://cve.now/CVE-2008-0228.md): Cross-site request forgery (CSRF) vulnerability in apply.cgi in the Linksys WRT54GL Wireless-G Broadband Router with firmware 4.30.9… (no CVSS)
- [CVE-2008-0229](https://cve.now/CVE-2008-0229.md): The telnet service in LevelOne WBR-3460 4-Port ADSL 2/2+ Wireless Modem Router with firmware 1.00.11 and 1.00.12 does not require… (no CVSS)
- [CVE-2007-6679](https://cve.now/CVE-2007-6679.md): Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and… (no CVSS)
- [CVE-2003-1539](https://cve.now/CVE-2003-1539.md): Cross-site scripting (XSS) vulnerability in ONEdotOH Simple File Manager (SFM) before 0.21 allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2007-6677](https://cve.now/CVE-2007-6677.md): Cross-site scripting (XSS) vulnerability in Peter's Random Anti-Spam Image 0.2.4 and earlier plugin for WordPress allows remote attackers… (no CVSS)
- [CVE-2008-0127](https://cve.now/CVE-2008-0127.md): The administration interface in McAfee E-Business Server 8.5.2 and earlier allows remote attackers to cause a denial of service (crash)… (no CVSS)
- [CVE-2008-0190](https://cve.now/CVE-2008-0190.md): Multiple cross-site scripting (XSS) vulnerabilities in templates/example\_template.php in AwesomeTemplateEngine allow remote attackers to… (no CVSS)
- [CVE-2008-0191](https://cve.now/CVE-2008-0191.md): WordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive information via an invalid p parameter in an rss2 action to the… (no CVSS)
- [CVE-2008-0192](https://cve.now/CVE-2008-0192.md): Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.0.9 and earlier allow remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2008-0193](https://cve.now/CVE-2008-0193.md): Cross-site scripting (XSS) vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and possibly 2.1.x through 2.3.x, allows… (no CVSS)
- [CVE-2008-0194](https://cve.now/CVE-2008-0194.md): Directory traversal vulnerability in wp-db-backup.php in WordPress 2.0.3 and earlier allows remote attackers to read arbitrary files… (no CVSS)
- [CVE-2008-0195](https://cve.now/CVE-2008-0195.md): WordPress 2.0.11 and earlier allows remote attackers to obtain sensitive information via an empty value of the page parameter to certain… (no CVSS)
- [CVE-2008-0196](https://cve.now/CVE-2008-0196.md): Multiple directory traversal vulnerabilities in WordPress 2.0.11 and earlier allow remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2008-0197](https://cve.now/CVE-2008-0197.md): Multiple cross-site scripting (XSS) vulnerabilities in wp-contact-form/options-contactform.php in the WP-ContactForm 1.5 alpha and earlier… (no CVSS)
- [CVE-2008-0198](https://cve.now/CVE-2008-0198.md): Multiple cross-site request forgery (CSRF) vulnerabilities in wp-contact-form/options-contactform.php in the WP-ContactForm 1.5 alpha and… (no CVSS)
- [CVE-2008-0199](https://cve.now/CVE-2008-0199.md): PRO-Search 0.17 and earlier allows remote attackers to cause a denial of service via certain values of the show\_page and time parameters… (no CVSS)
- [CVE-2008-0200](https://cve.now/CVE-2008-0200.md): Multiple cross-site scripting (XSS) vulnerabilities in account/index.html in RotaBanner Local 3 and earlier allow remote attackers to… (no CVSS)
- [CVE-2008-0201](https://cve.now/CVE-2008-0201.md): Cross-site scripting (XSS) vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary… (no CVSS)
- [CVE-2008-0202](https://cve.now/CVE-2008-0202.md): CRLF injection vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary HTTP headers… (no CVSS)
- [CVE-2008-0203](https://cve.now/CVE-2008-0203.md): Multiple cross-site scripting (XSS) vulnerabilities in cryptographp/admin.php in the Cryptographp 1.2 and earlier plugin for WordPress… (no CVSS)
- [CVE-2008-0204](https://cve.now/CVE-2008-0204.md): Multiple cross-site scripting (XSS) vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and… (no CVSS)
- [CVE-2008-0205](https://cve.now/CVE-2008-0205.md): Multiple cross-site request forgery (CSRF) vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and… (no CVSS)
- [CVE-2008-0206](https://cve.now/CVE-2008-0206.md): Multiple cross-site scripting (XSS) vulnerabilities in captcha\\captcha.php in the Captcha! 2.5d and earlier plugin for WordPress allow… (no CVSS)
- [CVE-2008-0207](https://cve.now/CVE-2008-0207.md): Multiple cross-site scripting (XSS) vulnerabilities in PRO-Search 0.17 and earlier allow remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2008-0208](https://cve.now/CVE-2008-0208.md): Cross-site scripting (XSS) vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary… (no CVSS)
- [CVE-2008-0209](https://cve.now/CVE-2008-0209.md): Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to… (no CVSS)
- [CVE-2008-0210](https://cve.now/CVE-2008-0210.md): Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests, which allows… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-01-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.