# CVEs published 2008-02-07

17 CVEs were published on February 7, 2008: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2008-0177](https://cve.now/CVE-2008-0177.md): The ipcomp6\_input function in sys/netinet6/ipcomp\_input.c in the KAME project before 20071201 does not properly check the return value of th (no CVSS)
- [CVE-2008-0213](https://cve.now/CVE-2008-0213.md): Unspecified vulnerability in a certain ActiveX control for HP Virtual Rooms (HPVR) 6 and earlier allows remote attackers to execute arbitrar (no CVSS)
- [CVE-2008-0457](https://cve.now/CVE-2008-0457.md): Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec B (no CVSS)
- [CVE-2008-0553](https://cve.now/CVE-2008-0553.md): Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk (Tcl/Tk) before 8.5.1 allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2008-0645](https://cve.now/CVE-2008-0645.md): Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL (no CVSS)
- [CVE-2008-0646](https://cve.now/CVE-2008-0646.md): The bdecode\_recursive function in include/libtorrent/bencode.hpp in Rasterbar Software libtorrent before 0.12.1, as used in Deluge before 0. (no CVSS)
- [CVE-2008-0647](https://cve.now/CVE-2008-0647.md): Multiple stack-based buffer overflows in the HanGamePluginCn18.HanGamePluginCn18.1 ActiveX control in HanGamePluginCn18.dll in Ourgame GLWor (no CVSS)
- [CVE-2008-0648](https://cve.now/CVE-2008-0648.md): Multiple PHP remote file inclusion vulnerabilities in OpenSiteAdmin 0.9.1.1 and earlier allow remote attackers to execute arbitrary PHP code (no CVSS)
- [CVE-2008-0649](https://cve.now/CVE-2008-0649.md): SQL injection vulnerability in detail.php in Astanda Directory Project (ADP) 1.2 and 1.3 allows remote attackers to execute arbitrary SQL co (no CVSS)
- [CVE-2008-0650](https://cve.now/CVE-2008-0650.md): SQL injection vulnerability in login.php in Simple OS CMS 0.1c beta allows remote attackers to execute arbitrary SQL commands via the userna (no CVSS)
- [CVE-2008-0651](https://cve.now/CVE-2008-0651.md): SQL injection vulnerability in login.php in Pedro Santana Codice CMS allows remote attackers to execute arbitrary SQL commands via the usern (no CVSS)
- [CVE-2008-0652](https://cve.now/CVE-2008-0652.md): SQL injection vulnerability in index.php in the Downloads (com\_downloads) component for Mambo and Joomla! allows remote attackers to execute (no CVSS)
- [CVE-2008-0653](https://cve.now/CVE-2008-0653.md): SQL injection vulnerability in index.php in the Ynews (com\_ynews) 1.0.0 component for Joomla! allows remote attackers to execute arbitrary S (no CVSS)
- [CVE-2008-0654](https://cve.now/CVE-2008-0654.md): Multiple directory traversal vulnerabilities in Azucar CMS 1.3 allow remote attackers to include and execute arbitrary local files via a .. (no CVSS)
- [CVE-2008-0655](https://cve.now/CVE-2008-0655.md): Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors. (CVSS 8.8, KEV)
- [CVE-2008-0656](https://cve.now/CVE-2008-0656.md): Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attacke (no CVSS)
- [CVE-2008-0657](https://cve.now/CVE-2008-0657.md): Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlie (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-02-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.