# CVEs published 2008-03-28

20 CVEs were published on March 28, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4874](https://cve.now/CVE-2005-4874.md): The XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP TRACE method, which allows remote attackers to obtain (1) proxy… (no CVSS)
- [CVE-2008-0704](https://cve.now/CVE-2008-0704.md): Unspecified vulnerability in the SSH server in HP OpenVMS TCP/IP Services on OpenVMS on the Alpha platform with 5.4 before ECO 7, and on… (no CVSS)
- [CVE-2008-1542](https://cve.now/CVE-2008-1542.md): Airspan Base Station Distribution Unit (BSDU) has "topsecret" as its password for the root account, which allows remote attackers to… (no CVSS)
- [CVE-2008-1543](https://cve.now/CVE-2008-1543.md): The Advanced User Interface Pages in the ProST Web Management component on the Airspan WiMAX ProST have a certain default User ID and… (no CVSS)
- [CVE-2008-1544](https://cve.now/CVE-2008-1544.md): The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 5.01, 6, and 7 does not block dangerous HTTP… (no CVSS)
- [CVE-2008-1545](https://cve.now/CVE-2008-1545.md): The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 7 does not restrict the dangerous… (no CVSS)
- [CVE-2008-1546](https://cve.now/CVE-2008-1546.md): servlet/MIMEReceiveServlet in the web controller for Mitsubishi Electric GB-50 and GB-50A air-conditioning control systems allows remote… (no CVSS)
- [CVE-2008-0924](https://cve.now/CVE-2008-0924.md): Stack-based buffer overflow in the DoLBURPRequest function in libnldap in ndsd in Novell eDirectory 8.7.3.9 and earlier, and 8.8.1 and… (no CVSS)
- [CVE-2008-0926](https://cve.now/CVE-2008-0926.md): The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side… (no CVSS)
- [CVE-2008-1534](https://cve.now/CVE-2008-1534.md): Multiple directory traversal vulnerabilities in PowerPHPBoard 1.00b allow remote attackers to include and execute arbitrary local files… (no CVSS)
- [CVE-2008-1535](https://cve.now/CVE-2008-1535.md): SQL injection vulnerability in the Matti Kiviharju rekry (aka com\_rekry or rekry!Joom) 1.0.0 component for Joomla! allows remote attackers… (no CVSS)
- [CVE-2008-1536](https://cve.now/CVE-2008-1536.md): Cross-site scripting (XSS) vulnerability in index.php in Pictures Pro (aka Tim Grissett) Photo Cart 4.1 allows remote attackers to inject… (no CVSS)
- [CVE-2008-1537](https://cve.now/CVE-2008-1537.md): Directory traversal vulnerability in pb\_inc/admincenter/index.php in PowerScripts PowerBook 1.21 allows remote attackers to include and… (no CVSS)
- [CVE-2008-1538](https://cve.now/CVE-2008-1538.md): Cross-site scripting (XSS) vulnerability in searchAction.do in ManageEngine EventLog Analyzer 5 allows remote attackers to inject… (no CVSS)
- [CVE-2008-1539](https://cve.now/CVE-2008-1539.md): SQL injection vulnerability in includes/dynamic\_titles.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execute arbitrary SQL… (no CVSS)
- [CVE-2008-1540](https://cve.now/CVE-2008-1540.md): SQL injection vulnerability in the Datsogallery (com\_datsogallery) 1.3.1 module for Joomla! and Mambo allows remote attackers to execute… (no CVSS)
- [CVE-2008-1541](https://cve.now/CVE-2008-1541.md): Directory traversal vulnerability in cgi-bin/his-webshop.pl in HIS Webshop 2.50 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2008-1240](https://cve.now/CVE-2008-1240.md): LiveConnect in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 does not properly parse the content origin for jar: URIs before… (no CVSS)
- [CVE-2008-1532](https://cve.now/CVE-2008-1532.md): Perlbal before 1.70, when buffered upload is enabled, allows remote attackers to cause a denial of service (crash) via a zero-byte chunked… (no CVSS)
- [CVE-2008-1533](https://cve.now/CVE-2008-1533.md): Unspecified vulnerability in the XML-RPC Blogger API plugin in Joomla! 1.5 allows remote attackers to perform unauthorized article… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-03-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.