# CVEs published 2008-02-06

34 CVEs were published on February 6, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0212](https://cve.now/CVE-2008-0212.md): ovtopmd in HP OpenView Network Node Manager (OV NNM) 6.41, 7.01, and 7.51 allows remote attackers to cause a denial of service (crash) via a (no CVSS)
- [CVE-2008-0623](https://cve.now/CVE-2008-0623.md): Stack-based buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! Music Jukebox 2.2.2.056 allows remote attackers to (no CVSS)
- [CVE-2008-0624](https://cve.now/CVE-2008-0624.md): Buffer overflow in the YMP Datagrid ActiveX control (datagrid.dll) in Yahoo! JukeBox 2.2.2.56 allows remote attackers to execute arbitrary c (no CVSS)
- [CVE-2008-0625](https://cve.now/CVE-2008-0625.md): Buffer overflow in the MediaGrid ActiveX control (mediagrid.dll) in Yahoo! Music Jukebox 2.2.2.56 allows remote attackers to execute arbitra (no CVSS)
- [CVE-2008-0628](https://cve.now/CVE-2008-0628.md): The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the " (no CVSS)
- [CVE-2008-0629](https://cve.now/CVE-2008-0629.md): Buffer overflow in stream\_cddb.c in MPlayer 1.0rc2 and SVN before r25824 allows remote user-assisted attackers to execute arbitrary code via (no CVSS)
- [CVE-2008-0630](https://cve.now/CVE-2008-0630.md): Buffer overflow in url.c in MPlayer 1.0rc2 and SVN before r25823 allows remote attackers to execute arbitrary code via a crafted URL that pr (no CVSS)
- [CVE-2008-0631](https://cve.now/CVE-2008-0631.md): Multiple ActiveX controls in MailBee.dll in MailBee Objects 5.5 allow remote attackers to (1) overwrite arbitrary files via the SaveToDisk m (no CVSS)
- [CVE-2008-0632](https://cve.now/CVE-2008-0632.md): Unrestricted file upload vulnerability in cp\_upload\_image.php in LightBlog 9.5 allows remote attackers to execute arbitrary code by uploadin (no CVSS)
- [CVE-2008-0633](https://cve.now/CVE-2008-0633.md): Buffer overflow in Anon Proxy Server 0.102 and earlier, when user authentication is enabled, allows remote attackers to cause a denial of se (no CVSS)
- [CVE-2008-0634](https://cve.now/CVE-2008-0634.md): Buffer overflow in the NamoInstaller.NamoInstall.1 ActiveX control in NamoInstaller.dll 3.0.0.1, as used in Sejoong Namo ActiveSquare6, allo (no CVSS)
- [CVE-2008-0635](https://cve.now/CVE-2008-0635.md): Unspecified vulnerability in the delivery engine in Openads 2.4.0 through 2.4.2 allows remote attackers to execute arbitrary PHP code via un (no CVSS)
- [CVE-2008-0601](https://cve.now/CVE-2008-0601.md): SQL injection vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2008-0602](https://cve.now/CVE-2008-0602.md): Directory traversal vulnerability in index.php in All Club CMS (ACCMS) 0.0.1f and earlier allows remote attackers to include and execute arb (no CVSS)
- [CVE-2008-0603](https://cve.now/CVE-2008-0603.md): SQL injection vulnerability in index.php in the amazOOP Awesom! (com\_awesom) 0.3.2component for Mambo and Joomla! allows remote attackers to (no CVSS)
- [CVE-2008-0604](https://cve.now/CVE-2008-0604.md): The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank pas (no CVSS)
- [CVE-2008-0605](https://cve.now/CVE-2008-0605.md): Multiple cross-site scripting (XSS) vulnerabilities in AstroSoft HelpDesk before 1.95.228 allow remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2008-0606](https://cve.now/CVE-2008-0606.md): SQL injection vulnerability in index.php in the Shambo2 (com\_shambo2) component for Mambo and Joomla! allows remote attackers to execute arb (no CVSS)
- [CVE-2008-0607](https://cve.now/CVE-2008-0607.md): SQL injection vulnerability in index.php in the Sigsiu Online Business Index 2 (SOBI2, com\_sobi2) 2.5.3 component for Joomla! and Mambo allo (no CVSS)
- [CVE-2008-0608](https://cve.now/CVE-2008-0608.md): The Logging Server (ftplogsrv.exe) 7.9.14.0 and earlier in IPSwitch WS\_FTP 6.1 allows remote attackers to cause a denial of service (loss of (no CVSS)
- [CVE-2008-0609](https://cve.now/CVE-2008-0609.md): Directory traversal vulnerability in index.php in DivideConcept VHD Web Pack 2.0 allows remote attackers to include and execute arbitrary lo (no CVSS)
- [CVE-2008-0610](https://cve.now/CVE-2008-0610.md): Stack-based buffer overflow in the ClientConnection::NegotiateProtocolVersion function in vncviewer/ClientConnection.cpp in vncviewer for Ul (no CVSS)
- [CVE-2008-0611](https://cve.now/CVE-2008-0611.md): SQL injection vulnerability in rmgs/images.php in the RMSOFT Gallery System 2.0 module for XOOPS allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2008-0612](https://cve.now/CVE-2008-0612.md): Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote attackers to include and execute arbitrary local (no CVSS)
- [CVE-2008-0613](https://cve.now/CVE-2008-0613.md): Open redirect vulnerability in htdocs/user.php in XOOPS 2.0.18 allows remote attackers to redirect users to arbitrary web sites and conduct (no CVSS)
- [CVE-2008-0614](https://cve.now/CVE-2008-0614.md): SQL injection vulnerability in index.php in Photokorn Gallery 1.543 allows remote attackers to execute arbitrary SQL commands via the pic pa (no CVSS)
- [CVE-2008-0615](https://cve.now/CVE-2008-0615.md): Directory traversal vulnerability in wp-admin/admin.php in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allows remote authenticated (no CVSS)
- [CVE-2008-0616](https://cve.now/CVE-2008-0616.md): SQL injection vulnerability in the administration panel in the DMSGuestbook 1.7.0 plugin for WordPress allows remote authenticated administr (no CVSS)
- [CVE-2008-0617](https://cve.now/CVE-2008-0617.md): Multiple cross-site scripting (XSS) vulnerabilities in the DMSGuestbook 1.7.0 plugin for WordPress allow remote attackers to inject arbitrar (no CVSS)
- [CVE-2008-0618](https://cve.now/CVE-2008-0618.md): Multiple cross-site scripting (XSS) vulnerabilities in the DMSGuestbook 1.8.0 and 1.7.0 plugin for WordPress allow remote attackers to injec (no CVSS)
- [CVE-2008-0619](https://cve.now/CVE-2008-0619.md): Buffer overflow in NeroMediaPlayer.exe in Nero Media Player 1.4.0.35 and earlier allows remote attackers to execute arbitrary code or cause (no CVSS)
- [CVE-2008-0620](https://cve.now/CVE-2008-0620.md): SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of service (crash) via (no CVSS)
- [CVE-2008-0621](https://cve.now/CVE-2008-0621.md): Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary c (no CVSS)
- [CVE-2008-0622](https://cve.now/CVE-2008-0622.md): Cross-site scripting (XSS) vulnerability in RaidenHTTPD 2.0.19 and earlier allows remote attackers to inject arbitrary web script or HTML vi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-02-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.