# CVEs published 2008-01-11

13 CVEs were published on January 11, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0239](https://cve.now/CVE-2008-0239.md): Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allow remote attac (no CVSS)
- [CVE-2008-0240](https://cve.now/CVE-2008-0240.md): /idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to inject frames from arbi (no CVSS)
- [CVE-2008-0241](https://cve.now/CVE-2008-0241.md): Open redirect vulnerability in /idm/user/login.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attac (no CVSS)
- [CVE-2008-0238](https://cve.now/CVE-2008-0238.md): Multiple heap-based buffer overflows in the rmff\_dump\_cont function in input/libreal/rmff.c in xine-lib 1.1.9 allow remote attackers to exec (no CVSS)
- [CVE-2007-6018](https://cve.now/CVE-2007-6018.md): IMP Webmail Client 4.1.5, Horde Application Framework 3.1.5, and Horde Groupware Webmail Edition 1.0.3 does not validate unspecified HTTP re (no CVSS)
- [CVE-2008-0233](https://cve.now/CVE-2008-0233.md): Unrestricted file upload vulnerability in Zero CMS 1.0 Alpha and earlier allows remote attackers to bypass intended access restrictions and (no CVSS)
- [CVE-2008-0234](https://cve.now/CVE-2008-0234.md): Buffer overflow in Apple Quicktime Player 7.3.1.70 and other versions before 7.4.1, when RTSP tunneling is enabled, allows remote attackers (no CVSS)
- [CVE-2008-0235](https://cve.now/CVE-2008-0235.md): The Microsoft VFP\_OLE\_Server ActiveX control allows remote attackers to execute arbitrary code by invoking the foxcommand method. (no CVSS)
- [CVE-2008-0236](https://cve.now/CVE-2008-0236.md): An ActiveX control for Microsoft Visual FoxPro (vfp6r.dll 6.0.8862.0) allows remote attackers to execute arbitrary commands by invoking the (no CVSS)
- [CVE-2008-0237](https://cve.now/CVE-2008-0237.md): The Microsoft Rich Textbox ActiveX Control (RICHTX32.OCX) 6.1.97.82 allows remote attackers to execute arbitrary commands by invoking the in (no CVSS)
- [CVE-2008-0230](https://cve.now/CVE-2008-0230.md): PHP remote file inclusion vulnerability in php121db.php in osDate 2.0.8 and possibly earlier versions allows remote attackers to execute arb (no CVSS)
- [CVE-2008-0231](https://cve.now/CVE-2008-0231.md): Multiple directory traversal vulnerabilities in index.php in Tuned Studios (1) Subwoofer, (2) Freeze Theme, (3) Orange Cutout, (4) Lonely Ma (no CVSS)
- [CVE-2008-0232](https://cve.now/CVE-2008-0232.md): Multiple SQL injection vulnerabilities in Zero CMS 1.0 Alpha allow remote attackers to execute arbitrary SQL commands via (1) the id paramet (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-01-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.