# CVEs published 2008-03-06

37 CVEs were published on March 6, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1185](https://cve.now/CVE-2008-1185.md): Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and… (no CVSS)
- [CVE-2008-1186](https://cve.now/CVE-2008-1186.md): Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 5.0 Update 13 and earlier, and SDK/JRE… (no CVSS)
- [CVE-2008-1187](https://cve.now/CVE-2008-1187.md): Unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE… (no CVSS)
- [CVE-2008-1188](https://cve.now/CVE-2008-1188.md): Multiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14… (no CVSS)
- [CVE-2008-1189](https://cve.now/CVE-2008-1189.md): Buffer overflow in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2\_16 and earlier… (no CVSS)
- [CVE-2008-1190](https://cve.now/CVE-2008-1190.md): Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2\_16 and… (no CVSS)
- [CVE-2008-1191](https://cve.now/CVE-2008-1191.md): Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier allows remote attackers to create arbitrary files… (no CVSS)
- [CVE-2008-1192](https://cve.now/CVE-2008-1192.md): Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier; and SDK and JRE… (no CVSS)
- [CVE-2008-1193](https://cve.now/CVE-2008-1193.md): Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14… (no CVSS)
- [CVE-2008-1194](https://cve.now/CVE-2008-1194.md): Multiple unspecified vulnerabilities in the color management library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and… (no CVSS)
- [CVE-2008-1195](https://cve.now/CVE-2008-1195.md): Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and… (no CVSS)
- [CVE-2008-1196](https://cve.now/CVE-2008-1196.md): Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and… (no CVSS)
- [CVE-2008-1198](https://cve.now/CVE-2008-1198.md): The default IPSec ifup script in Red Hat Enterprise Linux 3 through 5 configures racoon to use aggressive IKE mode instead of main IKE… (no CVSS)
- [CVE-2008-1199](https://cve.now/CVE-2008-1199.md): Dovecot before 1.0.11, when configured to use mail\_extra\_groups to allow Dovecot to create dotlocks in /var/mail, might allow local users… (no CVSS)
- [CVE-2008-1200](https://cve.now/CVE-2008-1200.md): Unspecified vulnerability in Microsoft Access allows remote user-assisted attackers to execute arbitrary code via a crafted .MDB file… (no CVSS)
- [CVE-2003-1546](https://cve.now/CVE-2003-1546.md): Cross-site scripting (XSS) vulnerability in gbook.php in Filebased guestbook 1.1.3 allows remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2003-1547](https://cve.now/CVE-2003-1547.md): Cross-site scripting (XSS) vulnerability in block-Forums.php in the Splatt Forum module for PHP-Nuke 6.x allows remote attackers to inject… (no CVSS)
- [CVE-2003-1548](https://cve.now/CVE-2003-1548.md): MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to obtain sensitive information via an invalid IDAdmin or other parameter, which… (no CVSS)
- [CVE-2003-1549](https://cve.now/CVE-2003-1549.md): Cross-site scripting (XSS) vulnerability in header.php in MyABraCaDaWeb 1.0.2 and earlier allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2003-1550](https://cve.now/CVE-2003-1550.md): XOOPS 2.0, and possibly earlier versions, allows remote attackers to obtain sensitive information via an invalid xoopsOption parameter… (no CVSS)
- [CVE-2008-0072](https://cve.now/CVE-2008-0072.md): Format string vulnerability in the emf\_multipart\_encrypted function in mail/em-format.c in Evolution 2.12.3 and earlier allows remote… (no CVSS)
- [CVE-2008-0883](https://cve.now/CVE-2008-0883.md): acroread in Adobe Acrobat Reader 8.1.2 allows local users to overwrite arbitrary files via a symlink attack on temporary files related to… (no CVSS)
- [CVE-2008-0985](https://cve.now/CVE-2008-0985.md): Heap-based buffer overflow in the GIF library in the WebKit framework for Google Android SDK m3-rc37a and earlier allows remote attackers… (no CVSS)
- [CVE-2008-0986](https://cve.now/CVE-2008-0986.md): Integer overflow in the BMP::readFromStream method in the libsgl.so library in Google Android SDK m3-rc37a and earlier, and m5-rc14… (no CVSS)
- [CVE-2008-1172](https://cve.now/CVE-2008-1172.md): Cross-site request forgery (CSRF) vulnerabilities in account-inbox.php in TorrentTrader Classic 1.08 allow remote attackers to perform… (no CVSS)
- [CVE-2008-1173](https://cve.now/CVE-2008-1173.md): Cross-site scripting (XSS) vulnerability in account-inbox.php in TorrentTrader Classic 1.08 allows remote attackers to inject arbitrary… (no CVSS)
- [CVE-2008-1174](https://cve.now/CVE-2008-1174.md): Cross-site scripting (XSS) vulnerability in editUser.asp in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2008-1175](https://cve.now/CVE-2008-1175.md): Cross-site scripting (XSS) vulnerability in AuthentiX 6.3b1 Trial allows remote attackers to inject arbitrary web script or HTML via the… (no CVSS)
- [CVE-2008-1176](https://cve.now/CVE-2008-1176.md): Cross-site scripting (XSS) vulnerability in function/sideblock.php in Affiliate Market (affmarket) 0.1 BETA allows remote attackers to… (no CVSS)
- [CVE-2008-1177](https://cve.now/CVE-2008-1177.md): SQL injection vulnerability in shop/detail.php in Affiliate Market (affmarket) 0.1 BETA allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-1178](https://cve.now/CVE-2008-1178.md): Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files… (no CVSS)
- [CVE-2008-1179](https://cve.now/CVE-2008-1179.md): Multiple cross-site scripting (XSS) vulnerabilities in include/common/javascript/color\_picker.php in Centreon 1.4.2.3 and earlier allow… (no CVSS)
- [CVE-2008-1180](https://cve.now/CVE-2008-1180.md): Cross-site scripting (XSS) vulnerability in dana-na/auth/rdremediate.cgi in Juniper Networks Secure Access 2000 5.5 R1 build 11711 allows… (no CVSS)
- [CVE-2008-1181](https://cve.now/CVE-2008-1181.md): Juniper Networks Secure Access 2000 5.5 R1 (build 11711) allows remote attackers to obtain sensitive information via a direct request for… (no CVSS)
- [CVE-2008-1182](https://cve.now/CVE-2008-1182.md): Cross-site scripting (XSS) vulnerability in BSD Perimeter pfSense before 1.2 allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2008-1183](https://cve.now/CVE-2008-1183.md): Multiple cross-site scripting (XSS) vulnerabilities in Crafty Syntax Live Help (CSLH) before 2.14.6 allow remote attackers to inject… (no CVSS)
- [CVE-2008-1184](https://cve.now/CVE-2008-1184.md): The DNSSEC validation library (libval) library in dnssec-tools before 1.3.1 does not properly check that the signing key is the APEX trust… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-03-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.