# CVEs published 2008-11-12

11 CVEs were published on November 12, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-4029](https://cve.now/CVE-2008-4029.md): Cross-domain vulnerability in Microsoft XML Core Services 3.0 and 4.0, as used in Internet Explorer, allows remote attackers to obtain… (no CVSS)
- [CVE-2008-4033](https://cve.now/CVE-2008-4033.md): Cross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft Expression Web, Office, Internet Explorer… (no CVSS)
- [CVE-2008-4037](https://cve.now/CVE-2008-4037.md): Microsoft Windows 2000 Gold through SP4, XP Gold through SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote… (no CVSS)
- [CVE-2008-5043](https://cve.now/CVE-2008-5043.md): Multiple cross-site scripting (XSS) vulnerabilities in the web-based interface in IBM Metrica Service Assurance Framework allow remote… (no CVSS)
- [CVE-2008-5044](https://cve.now/CVE-2008-5044.md): Race condition in Microsoft Windows Server 2003 and Vista allows local users to cause a denial of service (crash or hang) via a… (no CVSS)
- [CVE-2008-5041](https://cve.now/CVE-2008-5041.md): Sweex RO002 Router with firmware Ts03-072 has "rdc123" as its default password for the "rdc123" account, which makes it easier for remote… (no CVSS)
- [CVE-2008-5042](https://cve.now/CVE-2008-5042.md): Zeeways PhotoVideoTube 1.1 and earlier allows remote attackers to bypass authentication and perform administrative tasks via a direct… (no CVSS)
- [CVE-2008-5037](https://cve.now/CVE-2008-5037.md): SQL injection vulnerability in view.php in ElkaGroup Image Gallery 1.0 allows remote attackers to execute arbitrary SQL commands via the… (no CVSS)
- [CVE-2008-5038](https://cve.now/CVE-2008-5038.md): Use-after-free vulnerability in the NetWare Core Protocol (NCP) feature in Novell eDirectory 8.7.3 SP10 before 8.7.3 SP10 FTF1 and 8.8 SP2… (no CVSS)
- [CVE-2008-5039](https://cve.now/CVE-2008-5039.md): Cross-site scripting (XSS) vulnerability in the League module for PHP-Nuke, possibly 2.4, allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2008-5040](https://cve.now/CVE-2008-5040.md): Graphiks MyForum 1.3 allows remote attackers to bypass authentication and gain administrative access by setting the (1) myforum\_login and… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2008-11-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.