# CVEs published 2008-02-08 20 CVEs were published on February 8, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2008-0591](https://cve.now/CVE-2008-0591.md): Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirmation dialogs, which m (no CVSS) - [CVE-2008-0592](https://cve.now/CVE-2008-0592.md): Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of service via a plain .t (no CVSS) - [CVE-2008-0412](https://cve.now/CVE-2008-0412.md): The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to ca (no CVSS) - [CVE-2008-0413](https://cve.now/CVE-2008-0413.md): The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to (no CVSS) - [CVE-2008-0414](https://cve.now/CVE-2008-0414.md): Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to trick the user into uploading arbitrary (no CVSS) - [CVE-2008-0415](https://cve.now/CVE-2008-0415.md): Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside o (no CVSS) - [CVE-2008-0417](https://cve.now/CVE-2008-0417.md): CRLF injection vulnerability in Mozilla Firefox before 2.0.0.12 allows remote user-assisted web sites to corrupt the user's password store v (no CVSS) - [CVE-2008-0418](https://cve.now/CVE-2008-0418.md): Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8, when using "f (no CVSS) - [CVE-2008-0419](https://cve.now/CVE-2008-0419.md): Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of service (no CVSS) - [CVE-2008-0007](https://cve.now/CVE-2008-0007.md): Linux kernel before 2.6.22.17, when using certain drivers that register a fault handler that does not perform range checks, allows local use (no CVSS) - [CVE-2008-0043](https://cve.now/CVE-2008-0043.md): Format string vulnerability in Apple iPhoto before 7.1.2 allows remote attackers to execute arbitrary code via photocast subscriptions. (no CVSS) - [CVE-2008-0214](https://cve.now/CVE-2008-0214.md): Multiple unspecified vulnerabilities in HP Select Identity 4.00, 4.01, 4.11, 4.12, 4.13, and 4.20 allow remote authenticated users to gain a (no CVSS) - [CVE-2008-0554](https://cve.now/CVE-2008-0554.md): Buffer overflow in the readImageData function in giftopnm.c in netpbm before 10.27 in netpbm before 10.27 allows remote user-assisted attack (no CVSS) - [CVE-2008-0640](https://cve.now/CVE-2008-0640.md): Symantec Ghost Solution Suite 1.1 before 1.1 patch 2, 2.0.0, and 2.0.1 does not authenticate connections between the console and the Ghost M (no CVSS) - [CVE-2008-0659](https://cve.now/CVE-2008-0659.md): Stack-based buffer overflow in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.5.70 and earlier, as used in MySpace MySpaceUpl (no CVSS) - [CVE-2008-0660](https://cve.now/CVE-2008-0660.md): Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and (no CVSS) - [CVE-2008-0661](https://cve.now/CVE-2008-0661.md): Buffer overflow in dBpowerAMP Audio Player Release 2 allows remote attackers to execute arbitrary code via a .M3U file with a long URI. (no CVSS) - [CVE-2008-0662](https://cve.now/CVE-2008-0662.md): The Auto Local Logon feature in Check Point VPN-1 SecuRemote/SecureClient NGX R60 and R56 for Windows caches credentials under the Checkpoin (no CVSS) - [CVE-2008-0663](https://cve.now/CVE-2008-0663.md): Novell Challenge Response Client (LCM) 2.7.5 and earlier, as used with Novell Client for Windows 4.91 SP4, allows users with physical access (no CVSS) - [CVE-2008-0664](https://cve.now/CVE-2008-0664.md): The XML-RPC implementation (xmlrpc.php) in WordPress before 2.3.3, when registration is enabled, allows remote attackers to edit posts of ot (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2008-02-08 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.