# CVEs published 2008-02-07

17 CVEs were published on February 7, 2008: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2008-0177](https://cve.now/CVE-2008-0177.md): The ipcomp6\_input function in sys/netinet6/ipcomp\_input.c in the KAME project before 20071201 does not properly check the return value of… (no CVSS)
- [CVE-2008-0213](https://cve.now/CVE-2008-0213.md): Unspecified vulnerability in a certain ActiveX control for HP Virtual Rooms (HPVR) 6 and earlier allows remote attackers to execute… (no CVSS)
- [CVE-2008-0457](https://cve.now/CVE-2008-0457.md): Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec… (no CVSS)
- [CVE-2008-0553](https://cve.now/CVE-2008-0553.md): Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers to execute… (no CVSS)
- [CVE-2008-0645](https://cve.now/CVE-2008-0645.md): Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 allow remote attackers to execute arbitrary PHP code via a… (no CVSS)
- [CVE-2008-0646](https://cve.now/CVE-2008-0646.md): The bdecode\_recursive function in include/libtorrent/bencode.hpp in Rasterbar Software libtorrent before 0.12.1, as used in Deluge before… (no CVSS)
- [CVE-2008-0647](https://cve.now/CVE-2008-0647.md): Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18.dll in Ourgame… (no CVSS)
- [CVE-2008-0648](https://cve.now/CVE-2008-0648.md): Multiple PHP remote file inclusion vulnerabilities in OpenSiteAdmin 0.9.1.1 and earlier allow remote attackers to execute arbitrary PHP… (no CVSS)
- [CVE-2008-0649](https://cve.now/CVE-2008-0649.md): SQL injection vulnerability in detail.php in Astanda Directory Project (ADP) 1.2 and 1.3 allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-0650](https://cve.now/CVE-2008-0650.md): SQL injection vulnerability in login.php in Simple OS CMS 0.1c beta allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-0651](https://cve.now/CVE-2008-0651.md): SQL injection vulnerability in login.php in Pedro Santana Codice CMS allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-0652](https://cve.now/CVE-2008-0652.md): SQL injection vulnerability in index.php in the Downloads (com\_downloads) component for Mambo and Joomla! allows remote attackers to… (no CVSS)
- [CVE-2008-0653](https://cve.now/CVE-2008-0653.md): SQL injection vulnerability in index.php in the Ynews (com\_ynews) 1.0.0 component for Joomla! allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2008-0654](https://cve.now/CVE-2008-0654.md): Multiple directory traversal vulnerabilities in Azucar CMS 1.3 allow remote attackers to include and execute arbitrary local files via a .. (no CVSS)
- [CVE-2008-0655](https://cve.now/CVE-2008-0655.md): Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors. (CVSS 8.8, KEV)
- [CVE-2008-0656](https://cve.now/CVE-2008-0656.md): Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote… (no CVSS)
- [CVE-2008-0657](https://cve.now/CVE-2008-0657.md): Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-02-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.