# CVEs published 2008-02-04

15 CVEs were published on February 4, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2007-4130](https://cve.now/CVE-2007-4130.md): The Linux kernel 2.6.9 before 2.6.9-67 in Red Hat Enterprise Linux (RHEL) 4 on Itanium (ia64) does not properly handle page faults during… (no CVSS)
- [CVE-2008-0178](https://cve.now/CVE-2008-0178.md): Cross-site scripting (XSS) vulnerability in the Enterprise Admin Session Monitoring component in Liferay Portal 4.3.6 allows remote… (no CVSS)
- [CVE-2008-0179](https://cve.now/CVE-2008-0179.md): Cross-site scripting (XSS) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers to… (no CVSS)
- [CVE-2008-0180](https://cve.now/CVE-2008-0180.md): Cross-site scripting (XSS) vulnerability in themes/\_unstyled/templates/init.vm in Liferay Portal 4.3.6 allows remote authenticated users… (no CVSS)
- [CVE-2008-0181](https://cve.now/CVE-2008-0181.md): Cross-site scripting (XSS) vulnerability in the Admin portlet in Liferay Portal 4.3.6 allows remote authenticated users to inject… (no CVSS)
- [CVE-2008-0182](https://cve.now/CVE-2008-0182.md): Cross-site request forgery (CSRF) vulnerability in the Admin portlet in Liferay Portal before 4.4.0 allows remote authenticated users to… (no CVSS)
- [CVE-2008-0563](https://cve.now/CVE-2008-0563.md): Cross-site request forgery (CSRF) vulnerability in service/impl/UserLocalServiceImpl.java in Liferay Portal 4.3.6 allows remote attackers… (no CVSS)
- [CVE-2007-6699](https://cve.now/CVE-2007-6699.md): Multiple buffer overflows in the AIM PicEditor 9.5.1.8 ActiveX control in YGPPicEdit.dll in AOL You've Got Pictures (YGP) Picture Editor… (no CVSS)
- [CVE-2008-0386](https://cve.now/CVE-2008-0386.md): Xdg-utils 1.0.2 and earlier allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in a URL argument… (no CVSS)
- [CVE-2008-0557](https://cve.now/CVE-2008-0557.md): SQL injection vulnerability in index.php in the CatalogShop (com\_catalogshop) 1.0b1 componenent for Mambo and Joomla! allows remote… (no CVSS)
- [CVE-2008-0558](https://cve.now/CVE-2008-0558.md): Cross-site scripting (XSS) vulnerability in Uniwin eCart Professional before 2.0.16 allows remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2008-0559](https://cve.now/CVE-2008-0559.md): Multiple directory traversal vulnerabilities in Nilson's Blogger 0.11 allow remote attackers to include and execute arbitrary local files… (no CVSS)
- [CVE-2008-0560](https://cve.now/CVE-2008-0560.md): PHP remote file inclusion vulnerability in cforms-css.php in Oliver Seidel cforms (contactforms), a Wordpress plugin, allows remote… (no CVSS)
- [CVE-2008-0561](https://cve.now/CVE-2008-0561.md): SQL injection vulnerability in index.php in the Arthur Konze AkoGallery (com\_akogallery) 2.5 beta component for Mambo and Joomla! allows… (no CVSS)
- [CVE-2008-0562](https://cve.now/CVE-2008-0562.md): SQL injection vulnerability in index.php in the Restaurant (com\_restaurant) 1.0 component for Mambo and Joomla! allows remote attackers to… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-02-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.