# CVEs published 2008-06-05

16 CVEs were published on June 5, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-2559](https://cve.now/CVE-2008-2559.md): Integer overflow in Borland Interbase 2007 SP2 (8.1.0.256) allows remote attackers to execute arbitrary code via a malformed packet to TCP… (no CVSS)
- [CVE-2008-2554](https://cve.now/CVE-2008-2554.md): Multiple SQL injection vulnerabilities in BP Blog 6.0 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to… (no CVSS)
- [CVE-2008-2555](https://cve.now/CVE-2008-2555.md): SQL injection vulnerability in index.php in EasyWay CMS allows remote attackers to execute arbitrary SQL commands via the mid parameter. (no CVSS)
- [CVE-2008-2556](https://cve.now/CVE-2008-2556.md): SQL injection vulnerability in read.php in PHP Visit Counter 0.4 and earlier allows remote attackers to execute arbitrary SQL commands via… (no CVSS)
- [CVE-2008-2557](https://cve.now/CVE-2008-2557.md): Cross-site scripting (XSS) vulnerability in CRE Loaded 6.2.13.1 and earlier allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2008-2558](https://cve.now/CVE-2008-2558.md): CRE Loaded 6.2.13.1 and earlier does not set the "Secure" attribute for cookies that are sent over HTTPS, which might allow remote… (no CVSS)
- [CVE-2007-5671](https://cve.now/CVE-2007-5671.md): HGFS.sys in the VMware Tools package in VMware Workstation 5.x before 5.5.6 build 80404, VMware Player before 1.0.6 build 80404, VMware… (no CVSS)
- [CVE-2008-0967](https://cve.now/CVE-2008-0967.md): Untrusted search path vulnerability in vmware-authd in VMware Workstation 5.x before 5.5.7 build 91707 and 6.x before 6.0.4 build 93057… (no CVSS)
- [CVE-2008-1518](https://cve.now/CVE-2008-1518.md): Stack-based buffer overflow in kl1.sys in Kaspersky Anti-Virus 6.0 and 7.0 and Internet Security 6.0 and 7.0 allows local users to gain… (no CVSS)
- [CVE-2008-2097](https://cve.now/CVE-2008-2097.md): Buffer overflow in the openwsman management service in VMware ESXi 3.5 and ESX 3.5 allows remote authenticated users to gain privileges… (no CVSS)
- [CVE-2008-2100](https://cve.now/CVE-2008-2100.md): Multiple buffer overflows in VIX API 1.1.x before 1.1.4 build 93057 on VMware Workstation 5.x and 6.x, VMware Player 1.x and 2.x, VMware… (no CVSS)
- [CVE-2008-2231](https://cve.now/CVE-2008-2231.md): SQL injection vulnerability in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) R\_2\_5\_0\_94 and earlier allows remote… (no CVSS)
- [CVE-2008-2542](https://cve.now/CVE-2008-2542.md): Stack-based buffer overflow in the getline function in Ppm/ppm.C in NASA Ames Research Center BigView 1.8 allows user-assisted remote… (no CVSS)
- [CVE-2008-2543](https://cve.now/CVE-2008-2543.md): The ooh323 channel driver in Asterisk Addons 1.2.x before 1.2.9 and Asterisk-Addons 1.4.x before 1.4.7 creates a remotely accessible TCP… (no CVSS)
- [CVE-2008-2552](https://cve.now/CVE-2008-2552.md): Unspecified vulnerability in the Service Tag Registry on Sun Solaris 10, and Sun Service Tag before 1.1.3, allows local users to cause a… (no CVSS)
- [CVE-2008-2553](https://cve.now/CVE-2008-2553.md): Cross-site scripting (XSS) vulnerability in Slashdot Like Automated Storytelling Homepage (Slash) (aka Slashcode) R\_2\_5\_0\_94 and earlier… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-06-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.