# CVEs published 2008-01-28 10 CVEs were published on January 28, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2007-4770](https://cve.now/CVE-2007-4770.md): libicu in International Components for Unicode (ICU) 3.8.1 and earlier attempts to process backreferences to the nonexistent capture group z (no CVSS) - [CVE-2007-4771](https://cve.now/CVE-2007-4771.md): Heap-based buffer overflow in the doInterval function in regexcmp.cpp in libicu in International Components for Unicode (ICU) 3.8.1 and earl (no CVSS) - [CVE-2008-0008](https://cve.now/CVE-2008-0008.md): The pa\_drop\_root function in PulseAudio 0.9.8, and a certain 0.9.9 build, does not check return values from (1) setresuid, (2) setreuid, (3) (no CVSS) - [CVE-2008-0405](https://cve.now/CVE-2008-0405.md): Multiple directory traversal vulnerabilities in HTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allow remo (no CVSS) - [CVE-2008-0406](https://cve.now/CVE-2008-0406.md): HTTP File Server (HFS) before 2.2c, when account names are used as log filenames, allows remote attackers to cause a denial of service (daem (no CVSS) - [CVE-2008-0407](https://cve.now/CVE-2008-0407.md): HTTP File Server (HFS) before 2.2c tags HTTP request log entries with the username sent during HTTP Basic Authentication, regardless of whet (no CVSS) - [CVE-2008-0408](https://cve.now/CVE-2008-0408.md): HTTP File Server (HFS) before 2.2c allows remote attackers to append arbitrary text to the log file by using the base64 representation of th (no CVSS) - [CVE-2008-0409](https://cve.now/CVE-2008-0409.md): Cross-site scripting (XSS) vulnerability in HTTP File Server (HFS) before 2.2c allows remote attackers to inject arbitrary web script or HTM (no CVSS) - [CVE-2008-0410](https://cve.now/CVE-2008-0410.md): HTTP File Server (HFS) before 2.2c allows remote attackers to obtain configuration and usage details by using an id element such as \%ver (no CVSS) - [CVE-2008-0466](https://cve.now/CVE-2008-0466.md): Web Wiz RTE\_file\_browser.asp in, as used in Web Wiz Rich Text Editor 4.0, Web Wiz Forums 9.07, and Web Wiz Newspad 1.02, does not require au (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2008-01-28 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.