# CVEs published 2008-02-06

34 CVEs were published on February 6, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0212](https://cve.now/CVE-2008-0212.md): ovtopmd in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remote attackers to cause a denial of service (crash) via… (no CVSS)
- [CVE-2008-0623](https://cve.now/CVE-2008-0623.md): Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows remote attackers… (no CVSS)
- [CVE-2008-0624](https://cve.now/CVE-2008-0624.md): Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox 2.2.2.56 allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2008-0625](https://cve.now/CVE-2008-0625.md): Buffer overflow in the MediaGrid ActiveX control (mediagrid.dll) in Yahoo! Music Jukebox 2.2.2.56 allows remote attackers to execute… (no CVSS)
- [CVE-2008-0628](https://cve.now/CVE-2008-0628.md): The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the… (no CVSS)
- [CVE-2008-0629](https://cve.now/CVE-2008-0629.md): Buffer overflow in stream\_cddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execute arbitrary code… (no CVSS)
- [CVE-2008-0630](https://cve.now/CVE-2008-0630.md): Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that… (no CVSS)
- [CVE-2008-0631](https://cve.now/CVE-2008-0631.md): Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to (1) overwrite arbitrary files via the SaveToDisk… (no CVSS)
- [CVE-2008-0632](https://cve.now/CVE-2008-0632.md): Unrestricted file upload vulnerability in cp\_upload\_image.php in LightBlog 9.5 allows remote attackers to execute arbitrary code by… (no CVSS)
- [CVE-2008-0633](https://cve.now/CVE-2008-0633.md): Buffer overflow in Anon Proxy Server 0.102 and earlier, when user authentication is enabled, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2008-0634](https://cve.now/CVE-2008-0634.md): Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1, as used in Sejoong Namo ActiveSquare6… (no CVSS)
- [CVE-2008-0635](https://cve.now/CVE-2008-0635.md): Unspecified vulnerability in the delivery engine in Openads 2.4.0 through 2.4.2 allows remote attackers to execute arbitrary PHP code via… (no CVSS)
- [CVE-2008-0601](https://cve.now/CVE-2008-0601.md): SQL injection vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-0602](https://cve.now/CVE-2008-0602.md): Directory traversal vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to include and execute… (no CVSS)
- [CVE-2008-0603](https://cve.now/CVE-2008-0603.md): SQL injection vulnerability in index.php in the amazOOP Awesom! (com\_awesom) 0.3.2component for Mambo and Joomla! allows remote attackers… (no CVSS)
- [CVE-2008-0604](https://cve.now/CVE-2008-0604.md): The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank… (no CVSS)
- [CVE-2008-0605](https://cve.now/CVE-2008-0605.md): Multiple cross-site scripting (XSS) vulnerabilities in AstroSoft HelpDesk before 1.95.228 allow remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2008-0606](https://cve.now/CVE-2008-0606.md): SQL injection vulnerability in index.php in the Shambo2 (com\_shambo2) component for Mambo and Joomla! allows remote attackers to execute… (no CVSS)
- [CVE-2008-0607](https://cve.now/CVE-2008-0607.md): SQL injection vulnerability in index.php in the Sigsiu Online Business Index 2 (SOBI2, com\_sobi2) 2.5.3 component for Joomla! and Mambo… (no CVSS)
- [CVE-2008-0608](https://cve.now/CVE-2008-0608.md): The Logging Server (ftplogsrv.exe) 7.9.14.0 and earlier in IPSwitch WS\_FTP 6.1 allows remote attackers to cause a denial of service (loss… (no CVSS)
- [CVE-2008-0609](https://cve.now/CVE-2008-0609.md): Directory traversal vulnerability in index.php in DivideConcept VHD Web Pack 2.0 allows remote attackers to include and execute arbitrary… (no CVSS)
- [CVE-2008-0610](https://cve.now/CVE-2008-0610.md): Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for… (no CVSS)
- [CVE-2008-0611](https://cve.now/CVE-2008-0611.md): SQL injection vulnerability in rmgs/images.php in the RMSOFT Gallery System 2.0 module for XOOPS allows remote attackers to execute… (no CVSS)
- [CVE-2008-0612](https://cve.now/CVE-2008-0612.md): Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote attackers to include and execute arbitrary… (no CVSS)
- [CVE-2008-0613](https://cve.now/CVE-2008-0613.md): Open redirect vulnerability in htdocs/user.php in XOOPS 2.0.18 allows remote attackers to redirect users to arbitrary web sites and… (no CVSS)
- [CVE-2008-0614](https://cve.now/CVE-2008-0614.md): SQL injection vulnerability in index.php in Photokorn Gallery 1.543 allows remote attackers to execute arbitrary SQL commands via the pic… (no CVSS)
- [CVE-2008-0615](https://cve.now/CVE-2008-0615.md): Directory traversal vulnerability in wp-admin/admin.php in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allows remote… (no CVSS)
- [CVE-2008-0616](https://cve.now/CVE-2008-0616.md): SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote authenticated… (no CVSS)
- [CVE-2008-0617](https://cve.now/CVE-2008-0617.md): Multiple cross-site scripting (XSS) vulnerabilities in the DMSGuestbook 1.7.0 plugin for WordPress allow remote attackers to inject… (no CVSS)
- [CVE-2008-0618](https://cve.now/CVE-2008-0618.md): Multiple cross-site scripting (XSS) vulnerabilities in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allow remote attackers to… (no CVSS)
- [CVE-2008-0619](https://cve.now/CVE-2008-0619.md): Buffer overflow in NeroMediaPlayer.exe in Nero Media Player 1.4.0.35 and earlier allows remote attackers to execute arbitrary code or… (no CVSS)
- [CVE-2008-0620](https://cve.now/CVE-2008-0620.md): SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of service (crash)… (no CVSS)
- [CVE-2008-0621](https://cve.now/CVE-2008-0621.md): Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2008-0622](https://cve.now/CVE-2008-0622.md): Cross-site scripting (XSS) vulnerability in RaidenHTTPD 2.0.19 and earlier allows remote attackers to inject arbitrary web script or HTML… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-02-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.