# CVEs published 2008-02-14 10 CVEs were published on February 14, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2008-0783](https://cve.now/CVE-2008-0783.md): Multiple cross-site scripting (XSS) vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote attackers to inject ar (no CVSS) - [CVE-2008-0784](https://cve.now/CVE-2008-0784.md): graph.php in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allows remote attackers to obtain the full path via an invalid local\_graph\_id (no CVSS) - [CVE-2008-0785](https://cve.now/CVE-2008-0785.md): Multiple SQL injection vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote authenticated users to execute arbi (no CVSS) - [CVE-2008-0786](https://cve.now/CVE-2008-0786.md): CRLF injection vulnerability in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k, when running on older PHP interpreters, allows remote att (no CVSS) - [CVE-2008-0780](https://cve.now/CVE-2008-0780.md): Cross-site scripting (XSS) vulnerability in MoinMoin 1.5.x through 1.5.8 and 1.6.x before 1.6.1 allows remote attackers to inject arbitrary (no CVSS, moin) - [CVE-2008-0781](https://cve.now/CVE-2008-0781.md): Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.5.8 and earlier allow remote attackers to inject a (no CVSS, moin) - [CVE-2008-0782](https://cve.now/CVE-2008-0782.md): Directory traversal vulnerability in MoinMoin 1.5.8 and earlier allows remote attackers to overwrite arbitrary files via a .. (no CVSS, moin) - [CVE-2008-0026](https://cve.now/CVE-2008-0026.md): SQL injection vulnerability in Cisco Unified CallManager/Communications Manager (CUCM) 5.0/5.1 before 5.1(3a) and 6.0/6.1 before 6.1(1a) all (no CVSS) - [CVE-2008-0778](https://cve.now/CVE-2008-0778.md): Multiple stack-based buffer overflows in an ActiveX control in QTPlugin.ocx for Apple QuickTime 7.4.1 and earlier allow remote attackers to (no CVSS) - [CVE-2008-0779](https://cve.now/CVE-2008-0779.md): The fortimon.sys device driver in Fortinet FortiClient Host Security 3.0 MR5 Patch 3 and earlier does not properly initialize its DeviceExte (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2008-02-14 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.