# CVEs published 2008-02-05

33 CVEs were published on February 5, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2006-4220](https://cve.now/CVE-2006-4220.md): Multiple cross-site scripting (XSS) vulnerabilities in webacc in Novell GroupWise WebAccess before 7 Support Pack 3 Public Beta allow remote (no CVSS)
- [CVE-2008-0485](https://cve.now/CVE-2008-0485.md): Array index error in libmpdemux/demux\_mov.c in MPlayer 1.0 rc2 and earlier might allow remote attackers to execute arbitrary code via a Quic (no CVSS)
- [CVE-2008-0486](https://cve.now/CVE-2008-0486.md): Array index vulnerability in libmpdemux/demux\_audio.c in MPlayer 1.0rc2 and SVN before r25917, and possibly earlier versions, as used in Xin (no CVSS)
- [CVE-2008-0590](https://cve.now/CVE-2008-0590.md): Buffer overflow in Ipswitch WS\_FTP Server with SSH 6.1.0.0 allows remote authenticated users to cause a denial of service (crash) and possib (no CVSS)
- [CVE-2007-6340](https://cve.now/CVE-2007-6340.md): Geert Moernaut LSrunasE 1.0 and Supercrypt 1.0 use the RC4 stream cipher without constructing a unique initialization vector (IV), which mak (no CVSS)
- [CVE-2008-0579](https://cve.now/CVE-2008-0579.md): SQL injection vulnerability in index.php in the buslicense (com\_buslicense) component for Joomla! allows remote attackers to execute arbitra (no CVSS)
- [CVE-2008-0580](https://cve.now/CVE-2008-0580.md): Geert Moernaut LSrunasE and Supercrypt use an encryption key composed of an SHA1 hash of a fixed string embedded in the executable file, whi (no CVSS)
- [CVE-2008-0581](https://cve.now/CVE-2008-0581.md): Geert Moernaut LSrunasE allows local users to gain privileges by obtaining the encrypted password from a batch file, and constructing a modi (no CVSS)
- [CVE-2008-0582](https://cve.now/CVE-2008-0582.md): Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.1 through 3.6.0.244 on Windows allows remote attackers to (no CVSS)
- [CVE-2008-0583](https://cve.now/CVE-2008-0583.md): Cross-zone scripting vulnerability in the Internet Explorer web control in Skype 3.6.0.244, and earlier 3.5.x and 3.6.x versions, on Windows (no CVSS)
- [CVE-2008-0584](https://cve.now/CVE-2008-0584.md): Multiple buffer overflows in bos.rte.control in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to (no CVSS)
- [CVE-2008-0585](https://cve.now/CVE-2008-0585.md): sysmgt.websm.webaccess in IBM AIX 5.2 and 5.3 has world writable permissions for unspecified WebSM Remote Client files, which allows local u (no CVSS)
- [CVE-2008-0586](https://cve.now/CVE-2008-0586.md): Multiple buffer overflows in IBM AIX 5.2 and 5.3 allow local users to gain privileges via unspecified vectors related to the (1) lchangevg, (no CVSS)
- [CVE-2008-0587](https://cve.now/CVE-2008-0587.md): Buffer overflow in the uspchrp program in devices.chrp.base.diag in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecifie (no CVSS)
- [CVE-2008-0588](https://cve.now/CVE-2008-0588.md): Buffer overflow in the utape program in devices.scsi.tape.diag in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified (no CVSS)
- [CVE-2008-0589](https://cve.now/CVE-2008-0589.md): The ps program in bos.rte.control in IBM AIX 5.2, 5.3, and 6.1 allows local users to obtain sensitive information via unspecified vectors. (no CVSS)
- [CVE-2007-6700](https://cve.now/CVE-2007-6700.md): Cross-site scripting (XSS) vulnerability in cgi-bin/bgplg in the web interface for the BGPD daemon in OpenBSD 4.1 allows remote attackers to (no CVSS)
- [CVE-2008-0564](https://cve.now/CVE-2008-0564.md): Multiple cross-site scripting (XSS) vulnerabilities in Mailman before 2.1.10b1 allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2008-0565](https://cve.now/CVE-2008-0565.md): SQL injection vulnerability in vote.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2008-0566](https://cve.now/CVE-2008-0566.md): PHP remote file inclusion vulnerability in includes/smarty.php in DeltaScripts PHP Links 1.3 and earlier allows remote attackers to execute (no CVSS)
- [CVE-2008-0567](https://cve.now/CVE-2008-0567.md): Multiple PHP remote file inclusion vulnerabilities in ChronoEngine ChronoForms (com\_chronocontact) 2.3.5 component for Joomla! allow remote (no CVSS)
- [CVE-2008-0568](https://cve.now/CVE-2008-0568.md): Unspecified vulnerability in the IP-authentication feature in the Secure Site 5.x-1.0 and 4.7.x-1.0 module for Drupal allows remote attacker (no CVSS)
- [CVE-2008-0569](https://cve.now/CVE-2008-0569.md): The Comment Upload 4.7.x before 4.7.x-0.1 and 5.x before 5.x-0.1 module for Drupal does not properly use functions in the upload module, whi (no CVSS)
- [CVE-2008-0570](https://cve.now/CVE-2008-0570.md): The OpenID 5.x-1.0 and earlier module for Drupal does not properly verify the claimed\_id returned by an OpenID provider, which allows remote (no CVSS)
- [CVE-2008-0571](https://cve.now/CVE-2008-0571.md): The point moderation form in the Userpoints 4.7.x before 4.7.x-2.3, 5.x-2 before 5.x-2.16, and 5.x-3 before 5.x-3.3 module for Drupal does n (no CVSS)
- [CVE-2008-0572](https://cve.now/CVE-2008-0572.md): Multiple PHP remote file inclusion vulnerabilities in Mindmeld 1.2.0.10 allow remote attackers to execute arbitrary PHP code via a URL in th (no CVSS)
- [CVE-2008-0573](https://cve.now/CVE-2008-0573.md): IPSecDrv.sys 10.4.0.12 in SafeNET HighAssurance Remote and SoftRemote allows local users to gain privileges via a crafted IPSECDRV\_IOCTL IOC (no CVSS)
- [CVE-2008-0574](https://cve.now/CVE-2008-0574.md): Cross-site scripting (XSS) vulnerability in index.php in webSPELL 4.01.02 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2008-0575](https://cve.now/CVE-2008-0575.md): Cross-site request forgery (CSRF) vulnerability in admin/admincenter.php in webSPELL 4.01.02 allows remote attackers to assign the superadmi (no CVSS)
- [CVE-2008-0576](https://cve.now/CVE-2008-0576.md): Cross-site scripting (XSS) vulnerability in the Project Issue Tracking module 5.x-2.x-dev before 20080130 in the 5.x-2.x series, 5.x-1.2 and (no CVSS)
- [CVE-2008-0577](https://cve.now/CVE-2008-0577.md): The Project Issue Tracking module 5.x-2.x-dev before 20080130 in the 5.x-2.x series, 5.x-1.2 and earlier in the 5.x-1.x series, 4.7.x-2.6 an (no CVSS)
- [CVE-2008-0578](https://cve.now/CVE-2008-0578.md): Cross-site scripting (XSS) vulnerability in the web management login page in Tripwire Enterprise 7.0 allows remote attackers to inject arbit (no CVSS)
- [CVE-2007-5602](https://cve.now/CVE-2007-5602.md): Multiple stack-based buffer overflows in SwiftView Viewer before 8.3.5, as used by SwiftView and SwiftSend, allow remote attackers to execut (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-02-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.