# CVEs published 2008-01-11

13 CVEs were published on January 11, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0239](https://cve.now/CVE-2008-0239.md): Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allow remote… (no CVSS)
- [CVE-2008-0240](https://cve.now/CVE-2008-0240.md): /idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from… (no CVSS)
- [CVE-2008-0241](https://cve.now/CVE-2008-0241.md): Open redirect vulnerability in /idm/user/login.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote… (no CVSS)
- [CVE-2008-0238](https://cve.now/CVE-2008-0238.md): Multiple heap-based buffer overflows in the rmff\_dump\_cont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to… (no CVSS)
- [CVE-2007-6018](https://cve.now/CVE-2007-6018.md): IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP… (no CVSS)
- [CVE-2008-0233](https://cve.now/CVE-2008-0233.md): Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote attackers to bypass intended access restrictions… (no CVSS)
- [CVE-2008-0234](https://cve.now/CVE-2008-0234.md): Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote… (no CVSS)
- [CVE-2008-0235](https://cve.now/CVE-2008-0235.md): The Microsoft VFP\_OLE\_Server ActiveX control allows remote attackers to execute arbitrary code by invoking the foxcommand method. (no CVSS)
- [CVE-2008-0236](https://cve.now/CVE-2008-0236.md): An ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0) allows remote attackers to execute arbitrary commands by invoking… (no CVSS)
- [CVE-2008-0237](https://cve.now/CVE-2008-0237.md): The Microsoft Rich Textbox ActiveX Control (RICHTX32.OCX) 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the… (no CVSS)
- [CVE-2008-0230](https://cve.now/CVE-2008-0230.md): PHP remote file inclusion vulnerability in php121db.php in osDate 2.0.8 and possibly earlier versions allows remote attackers to execute… (no CVSS)
- [CVE-2008-0231](https://cve.now/CVE-2008-0231.md): Multiple directory traversal vulnerabilities in index.php in Tuned Studios (1) Subwoofer, (2) Freeze Theme, (3) Orange Cutout, (4) Lonely… (no CVSS)
- [CVE-2008-0232](https://cve.now/CVE-2008-0232.md): Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands via (1) the id… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-01-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.