# CVEs published 2008-01-10

38 CVEs were published on January 10, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6680](https://cve.now/CVE-2007-6680.md): Trusted Execution in IBM AIX 6.1 uses an incorrect pathname argument in a call to the trustchk\_block\_write function, which might allow local (no CVSS)
- [CVE-2008-0218](https://cve.now/CVE-2008-0218.md): Cross-site scripting (XSS) vulnerability in admin/index.html in Merak IceWarp Mail Server allows remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2008-0219](https://cve.now/CVE-2008-0219.md): SQL injection vulnerability in soporte\_horizontal\_w.php in PHP Webquest 2.6 allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2008-0220](https://cve.now/CVE-2008-0220.md): Multiple stack-based buffer overflows in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gatewa (no CVSS)
- [CVE-2008-0221](https://cve.now/CVE-2008-0221.md): Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway We (no CVSS)
- [CVE-2008-0222](https://cve.now/CVE-2008-0222.md): Unrestricted file upload vulnerability in ajaxfilemanager.php in the Wp-FileManager 1.2 plugin for WordPress allows remote attackers to uplo (no CVSS)
- [CVE-2008-0223](https://cve.now/CVE-2008-0223.md): Buffer overflow in JustSystems JSFC.DLL, as used in multiple JustSystems products such as Ichitaro, allows remote attackers to execute arbit (no CVSS)
- [CVE-2008-0224](https://cve.now/CVE-2008-0224.md): SQL injection vulnerability in index.php in the Newbb\_plus 0.92 and earlier module in RunCMS 1.6.1 allows remote attackers to execute arbitr (no CVSS)
- [CVE-2008-0225](https://cve.now/CVE-2008-0225.md): Heap-based buffer overflow in the rmff\_dump\_cont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to e (no CVSS)
- [CVE-2008-0226](https://cve.now/CVE-2008-0226.md): Multiple buffer overflows in yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allow remote attackers to execute arbitr (no CVSS)
- [CVE-2008-0227](https://cve.now/CVE-2008-0227.md): yaSSL 1.7.5 and earlier, as used in MySQL and possibly other products, allows remote attackers to cause a denial of service (crash) via a He (no CVSS)
- [CVE-2008-0228](https://cve.now/CVE-2008-0228.md): Cross-site request forgery (CSRF) vulnerability in apply.cgi in the Linksys WRT54GL Wireless-G Broadband Router with firmware 4.30.9 allows (no CVSS)
- [CVE-2008-0229](https://cve.now/CVE-2008-0229.md): The telnet service in LevelOne WBR-3460 4-Port ADSL 2/2+ Wireless Modem Router with firmware 1.00.11 and 1.00.12 does not require authentica (no CVSS)
- [CVE-2007-6679](https://cve.now/CVE-2007-6679.md): Unspecified vulnerability in the Administrative Console in IBM WebSphere Application Server 6.1 before Fix Pack 13 has unknown impact and at (no CVSS)
- [CVE-2003-1539](https://cve.now/CVE-2003-1539.md): Cross-site scripting (XSS) vulnerability in ONEdotOH Simple File Manager (SFM) before 0.21 allows remote attackers to inject arbitrary web s (no CVSS)
- [CVE-2007-6677](https://cve.now/CVE-2007-6677.md): Cross-site scripting (XSS) vulnerability in Peter's Random Anti-Spam Image 0.2.4 and earlier plugin for WordPress allows remote attackers to (no CVSS)
- [CVE-2008-0127](https://cve.now/CVE-2008-0127.md): The administration interface in McAfee E-Business Server 8.5.2 and earlier allows remote attackers to cause a denial of service (crash) and (no CVSS)
- [CVE-2008-0190](https://cve.now/CVE-2008-0190.md): Multiple cross-site scripting (XSS) vulnerabilities in templates/example\_template.php in AwesomeTemplateEngine allow remote attackers to inj (no CVSS)
- [CVE-2008-0191](https://cve.now/CVE-2008-0191.md): WordPress 2.2.x and 2.3.x allows remote attackers to obtain sensitive information via an invalid p parameter in an rss2 action to the defaul (no CVSS)
- [CVE-2008-0192](https://cve.now/CVE-2008-0192.md): Multiple cross-site scripting (XSS) vulnerabilities in WordPress 2.0.9 and earlier allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2008-0193](https://cve.now/CVE-2008-0193.md): Cross-site scripting (XSS) vulnerability in wp-db-backup.php in WordPress 2.0.11 and earlier, and possibly 2.1.x through 2.3.x, allows remot (no CVSS)
- [CVE-2008-0194](https://cve.now/CVE-2008-0194.md): Directory traversal vulnerability in wp-db-backup.php in WordPress 2.0.3 and earlier allows remote attackers to read arbitrary files, delete (no CVSS)
- [CVE-2008-0195](https://cve.now/CVE-2008-0195.md): WordPress 2.0.11 and earlier allows remote attackers to obtain sensitive information via an empty value of the page parameter to certain PHP (no CVSS)
- [CVE-2008-0196](https://cve.now/CVE-2008-0196.md): Multiple directory traversal vulnerabilities in WordPress 2.0.11 and earlier allow remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2008-0197](https://cve.now/CVE-2008-0197.md): Multiple cross-site scripting (XSS) vulnerabilities in wp-contact-form/options-contactform.php in the WP-ContactForm 1.5 alpha and earlier p (no CVSS)
- [CVE-2008-0198](https://cve.now/CVE-2008-0198.md): Multiple cross-site request forgery (CSRF) vulnerabilities in wp-contact-form/options-contactform.php in the WP-ContactForm 1.5 alpha and ea (no CVSS)
- [CVE-2008-0199](https://cve.now/CVE-2008-0199.md): PRO-Search 0.17 and earlier allows remote attackers to cause a denial of service via certain values of the show\_page and time parameters to (no CVSS)
- [CVE-2008-0200](https://cve.now/CVE-2008-0200.md): Multiple cross-site scripting (XSS) vulnerabilities in account/index.html in RotaBanner Local 3 and earlier allow remote attackers to inject (no CVSS)
- [CVE-2008-0201](https://cve.now/CVE-2008-0201.md): Cross-site scripting (XSS) vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2008-0202](https://cve.now/CVE-2008-0202.md): CRLF injection vulnerability in index.php in ExpressionEngine 1.2.1 and earlier allows remote attackers to inject arbitrary HTTP headers and (no CVSS)
- [CVE-2008-0203](https://cve.now/CVE-2008-0203.md): Multiple cross-site scripting (XSS) vulnerabilities in cryptographp/admin.php in the Cryptographp 1.2 and earlier plugin for WordPress allow (no CVSS)
- [CVE-2008-0204](https://cve.now/CVE-2008-0204.md): Multiple cross-site scripting (XSS) vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and earlier (no CVSS)
- [CVE-2008-0205](https://cve.now/CVE-2008-0205.md): Multiple cross-site request forgery (CSRF) vulnerabilities in math-comment-spam-protection.php in the Math Comment Spam Protection 2.1 and e (no CVSS)
- [CVE-2008-0206](https://cve.now/CVE-2008-0206.md): Multiple cross-site scripting (XSS) vulnerabilities in captcha\\captcha.php in the Captcha! 2.5d and earlier plugin for WordPress allow remot (no CVSS)
- [CVE-2008-0207](https://cve.now/CVE-2008-0207.md): Multiple cross-site scripting (XSS) vulnerabilities in PRO-Search 0.17 and earlier allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2008-0208](https://cve.now/CVE-2008-0208.md): Cross-site scripting (XSS) vulnerability in login.asp in Snitz Forums 2000 3.4.05 and earlier allows remote attackers to inject arbitrary we (no CVSS)
- [CVE-2008-0209](https://cve.now/CVE-2008-0209.md): Open redirect vulnerability in Forums/login.asp in Snitz Forums 2000 3.4.06 and earlier allows remote attackers to redirect users to arbitra (no CVSS)
- [CVE-2008-0210](https://cve.now/CVE-2008-0210.md): Uebimiau Webmail 2.7.10 and 2.7.2 does not protect authentication state variables from being set through HTTP requests, which allows remote (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-01-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.