# CVEs published 2008-01-22

16 CVEs were published on January 22, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0065](https://cve.now/CVE-2008-0065.md): Multiple stack-based buffer overflows in in\_mp3.dll in Winamp 5.21, 5.5, and 5.51 allow remote attackers to execute arbitrary code via a lon (no CVSS)
- [CVE-2008-0370](https://cve.now/CVE-2008-0370.md): Cross-site scripting (XSS) vulnerability in dohtaccess.html in cPanel before 11.17 build 19417 allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2008-0371](https://cve.now/CVE-2008-0371.md): Multiple SQL injection vulnerabilities in aliTalk 1.9.1.1, when magic\_quotes\_gpc is disabled, allow remote authenticated users to execute ar (no CVSS)
- [CVE-2008-0372](https://cve.now/CVE-2008-0372.md): 8e6 R3000 Internet Filter 2.0.05.33, and other versions before 2.0.11, allows remote attackers to bypass intended restrictions via a fragmen (no CVSS)
- [CVE-2008-0373](https://cve.now/CVE-2008-0373.md): Unrestricted file upload vulnerability in PHP F1 Max's File Uploader allows remote attackers to upload and execute arbitrary PHP files. (no CVSS)
- [CVE-2008-0374](https://cve.now/CVE-2008-0374.md): OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 sends the configuration of the printer in cleartext, which al (no CVSS)
- [CVE-2008-0375](https://cve.now/CVE-2008-0375.md): Unspecified vulnerability in OKI C5510MFP Printer CU H2.15, PU 01.03.01, System F/W 1.01, and Web Page 1.00 allows remote attackers to set t (no CVSS)
- [CVE-2008-0376](https://cve.now/CVE-2008-0376.md): PHP remote file inclusion vulnerability in inc/linkbar.php in Small Axe Weblog 0.3.1 allows remote attackers to execute arbitrary PHP code v (no CVSS)
- [CVE-2008-0377](https://cve.now/CVE-2008-0377.md): MicroNews allows remote attackers to bypass authentication and gain administrative privileges via a direct request to admin.php. (no CVSS)
- [CVE-2008-0378](https://cve.now/CVE-2008-0378.md): Stack-based buffer overflow in SocksCap 2.40-051231 and earlier, when "Resolve all names remotely" is enabled, allows remote attackers to ca (no CVSS)
- [CVE-2008-0379](https://cve.now/CVE-2008-0379.md): Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release 2 allows remote atta (no CVSS)
- [CVE-2008-0380](https://cve.now/CVE-2008-0380.md): Buffer overflow in the Digital Data Communications RtspVaPgCtrl ActiveX control (RtspVapgDecoder.dll 1.1.0.29) allows remote attackers to ex (no CVSS)
- [CVE-2008-0381](https://cve.now/CVE-2008-0381.md): Unspecified vulnerability in Mahara before 0.9.1 has unknown impact and remote attack vectors, probably related to cross-site scripting (XSS (no CVSS)
- [CVE-2008-0382](https://cve.now/CVE-2008-0382.md): Multiple eval injection vulnerabilities in MyBB 1.2.10 and earlier allow remote attackers to execute arbitrary code via the sortby parameter (no CVSS)
- [CVE-2008-0383](https://cve.now/CVE-2008-0383.md): Multiple SQL injection vulnerabilities in MyBB 1.2.10 and earlier allow remote moderators and administrators to execute arbitrary SQL comman (no CVSS)
- [CVE-2008-0384](https://cve.now/CVE-2008-0384.md): OpenBSD 4.2 allows local users to cause a denial of service (kernel panic) by calling the SIOCGIFRTLABEL IOCTL on an interface that does not (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-01-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.