# CVEs published 2008-01-18

23 CVEs were published on January 18, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0367](https://cve.now/CVE-2008-0367.md): Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when prompting for HTTP Basic Authentication, displays the site requesting t (no CVSS)
- [CVE-2008-0368](https://cve.now/CVE-2008-0368.md): onedcu in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allows local users to create arbitrary files via the Trace file argument. (no CVSS)
- [CVE-2008-0369](https://cve.now/CVE-2008-0369.md): Multiple unspecified programs in IBM Informix Dynamic Server (IDS) 10.x before 10.00.xC8 allow local users to create arbitrary files by spec (no CVSS)
- [CVE-2007-5760](https://cve.now/CVE-2007-5760.md): Array index error in the XFree86-Misc extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code v (no CVSS)
- [CVE-2007-5958](https://cve.now/CVE-2007-5958.md): X.Org Xserver before 1.4.1 allows local users to determine the existence of arbitrary files via a filename argument in the -sp option to the (no CVSS)
- [CVE-2007-6427](https://cve.now/CVE-2007-6427.md): The XInput extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to execute arbitrary code via requests related to byte (no CVSS)
- [CVE-2007-6428](https://cve.now/CVE-2007-6428.md): The ProcGetReservedColormapEntries function in the TOG-CUP extension in X.Org Xserver before 1.4.1 allows context-dependent attackers to rea (no CVSS)
- [CVE-2007-6429](https://cve.now/CVE-2007-6429.md): Multiple integer overflows in X.Org Xserver before 1.4.1 allow context-dependent attackers to execute arbitrary code via (1) a GetVisualInfo (no CVSS)
- [CVE-2008-0006](https://cve.now/CVE-2008-0006.md): Buffer overflow in (1) X.Org Xserver before 1.4.1, and (2) the libfont and libXfont libraries on some platforms including Sun Solaris, allow (no CVSS)
- [CVE-2008-0364](https://cve.now/CVE-2008-0364.md): Buffer overflow in (1) BitTorrent 6.0 and earlier; and (2) uTorrent 1.7.5 and earlier, and 1.8-alpha-7834 and earlier in the 1.8.x series; o (no CVSS)
- [CVE-2008-0365](https://cve.now/CVE-2008-0365.md): Multiple buffer overflows in CORE FORCE before 0.95.172 allow local users to cause a denial of service (system crash) and possibly execute a (no CVSS)
- [CVE-2008-0366](https://cve.now/CVE-2008-0366.md): CORE FORCE before 0.95.172 does not properly validate arguments to SSDT hook handler functions in the Registry module, which allows local us (no CVSS)
- [CVE-2008-0353](https://cve.now/CVE-2008-0353.md): SQL injection vulnerability in visualizza\_tabelle.php in php-residence 0.7.2 and 1.0 allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2008-0354](https://cve.now/CVE-2008-0354.md): Cross-site scripting (XSS) vulnerability in the chat client in IBM Lotus Sametime 7.5 and 7.5.1 allows user-assisted remote attackers to inj (no CVSS)
- [CVE-2008-0355](https://cve.now/CVE-2008-0355.md): SQL injection vulnerability in index.php in the forum module in PHPEcho CMS, probably 2.0-rc3 and earlier, allows remote attackers to execut (no CVSS)
- [CVE-2008-0356](https://cve.now/CVE-2008-0356.md): Buffer overflow in the Independent Management Architecture (IMA) service in Citrix Presentation Server (MetaFrame Presentation Server) 4.5 a (no CVSS)
- [CVE-2008-0357](https://cve.now/CVE-2008-0357.md): Directory traversal vulnerability in pages/upload.php in Galaxyscripts Mini File Host 1.2.1 and earlier allows remote attackers to include a (no CVSS)
- [CVE-2008-0358](https://cve.now/CVE-2008-0358.md): SQL injection vulnerability in index.php in Pixelpost 1.7 allows remote attackers to execute arbitrary SQL commands via the parent\_id parame (no CVSS)
- [CVE-2008-0359](https://cve.now/CVE-2008-0359.md): Multiple cross-site scripting (XSS) vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to inject arbitrary web script or HTML via the (no CVSS)
- [CVE-2008-0360](https://cve.now/CVE-2008-0360.md): Multiple SQL injection vulnerabilities in BLOG:CMS 4.2.1b allow remote attackers to execute arbitrary SQL commands via (1) the blogid parame (no CVSS)
- [CVE-2008-0361](https://cve.now/CVE-2008-0361.md): Directory traversal vulnerability in agregar\_info.php in GradMan 0.1.3 and earlier allows remote attackers to include and execute arbitrary (no CVSS)
- [CVE-2008-0362](https://cve.now/CVE-2008-0362.md): Cross-site scripting (XSS) vulnerability in gallery.php in Clever Copy 3.0 and earlier allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2008-0363](https://cve.now/CVE-2008-0363.md): Multiple SQL injection vulnerabilities in Clever Copy 3.0 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) I (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-01-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.