# CVEs published 2008-07-22

12 CVEs were published on July 22, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-3263](https://cve.now/CVE-2008-3263.md): The IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x before 1.4.21.2; Business Edition A.x.x… (no CVSS)
- [CVE-2008-3260](https://cve.now/CVE-2008-3260.md): Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.10 allow remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2008-3261](https://cve.now/CVE-2008-3261.md): Open redirect vulnerability in claroline/redirector.php in Claroline before 1.8.10 allows remote attackers to redirect users to arbitrary… (no CVSS)
- [CVE-2008-3262](https://cve.now/CVE-2008-3262.md): Cross-site request forgery (CSRF) vulnerability in Claroline before 1.8.10 allows remote attackers to change passwords, related to lack of… (no CVSS)
- [CVE-2008-3188](https://cve.now/CVE-2008-3188.md): libxcrypt in SUSE openSUSE 11.0 uses the DES algorithm when the configuration specifies the MD5 algorithm, which makes it easier for… (no CVSS)
- [CVE-2008-3253](https://cve.now/CVE-2008-3253.md): Cross-site scripting (XSS) vulnerability in the XenAPI HTTP interfaces in Citrix XenServer Express, Standard, and Enterprise Edition… (no CVSS)
- [CVE-2008-3254](https://cve.now/CVE-2008-3254.md): SQL injection vulnerability in index.php in preCMS 1 allows remote attackers to execute arbitrary SQL commands via the id parameter in a… (no CVSS)
- [CVE-2008-3255](https://cve.now/CVE-2008-3255.md): Cross-site scripting (XSS) vulnerability in LunarNight Laboratory WebProxy 1.7.8 and earlier allows remote attackers to inject arbitrary… (no CVSS)
- [CVE-2008-3256](https://cve.now/CVE-2008-3256.md): SQL injection vulnerability in folder.php in Siteframe CMS 3.2.3 and earlier, and Siteframe Beaumont 5.0.5 and earlier, allows remote… (no CVSS)
- [CVE-2008-3257](https://cve.now/CVE-2008-3257.md): Stack-based buffer overflow in the Apache Connector (mod\_wl) in Oracle WebLogic Server (formerly BEA WebLogic Server) 10.3 and earlier… (no CVSS)
- [CVE-2008-3258](https://cve.now/CVE-2008-3258.md): Multiple SQL injection vulnerabilities in Zoph before 0.7.0.5 allow remote attackers to execute arbitrary SQL commands via unspecified… (no CVSS)
- [CVE-2008-3259](https://cve.now/CVE-2008-3259.md): OpenSSH before 5.1 sets the SO\_REUSEADDR socket option when the X11UseLocalhost configuration setting is disabled, which allows local… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-07-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.