# CVEs published 2008-02-15 25 CVEs were published on February 15, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2008-0795](https://cve.now/CVE-2008-0795.md): SQL injection vulnerability in index.php in the MGFi XfaQ (com\_xfaq) 1.2 component for Mambo and Joomla! allows remote attackers to execute (no CVSS) - [CVE-2008-0796](https://cve.now/CVE-2008-0796.md): SQL injection vulnerability in threads.php in Nuboard 0.5 allows remote attackers to execute arbitrary SQL commands via the ssid parameter. (no CVSS) - [CVE-2008-0797](https://cve.now/CVE-2008-0797.md): Directory traversal vulnerability in lib/download.php in iTheora 1.0 rc1 allows remote attackers to read arbitrary files via directory trave (no CVSS) - [CVE-2008-0798](https://cve.now/CVE-2008-0798.md): Multiple directory traversal vulnerabilities in artmedic webdesign weblog 1.0, when magic\_quotes\_gpc is disabled, allow remote attackers to (no CVSS) - [CVE-2008-0799](https://cve.now/CVE-2008-0799.md): SQL injection vulnerability in index.php in the Quiz (com\_quiz) 0.81 and earlier component for Mambo and Joomla! allows remote attackers to (no CVSS) - [CVE-2008-0800](https://cve.now/CVE-2008-0800.md): SQL injection vulnerability in index.php in the McQuiz (com\_mcquiz) 0.9 Final component for Joomla! allows remote attackers to execute arbit (no CVSS) - [CVE-2008-0801](https://cve.now/CVE-2008-0801.md): SQL injection vulnerability in index.php in the PAXXGallery (com\_paxxgallery) 0.2 component for Mambo and Joomla! allow remote attackers to (no CVSS) - [CVE-2008-0802](https://cve.now/CVE-2008-0802.md): SQL injection vulnerability in index.php in the MediaSlide (com\_mediaslide) 0.5 component for Joomla! allows remote attackers to execute arb (no CVSS) - [CVE-2008-0803](https://cve.now/CVE-2008-0803.md): Multiple PHP remote file inclusion vulnerabilities in LookStrike Lan Manager 0.9 allow remote attackers to execute arbitrary PHP code via a (no CVSS) - [CVE-2008-0526](https://cve.now/CVE-2008-0526.md): Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP firmware allows remote attackers to cause a denial of service (reboot) via (no CVSS) - [CVE-2008-0527](https://cve.now/CVE-2008-0527.md): The HTTP server in Cisco Unified IP Phone 7935 and 7936 running SCCP firmware allows remote attackers to cause a denial of service (reboot) (no CVSS) - [CVE-2008-0528](https://cve.now/CVE-2008-0528.md): Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote attackers to execute arbitrar (no CVSS) - [CVE-2008-0529](https://cve.now/CVE-2008-0529.md): Buffer overflow in the telnet server in Cisco Unified IP Phone 7906G, 7911G, 7941G, 7961G, 7970G, and 7971G running SCCP firmware might allo (no CVSS) - [CVE-2008-0530](https://cve.now/CVE-2008-0530.md): Buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SCCP and SIP firmware might allow remote attackers to execute (no CVSS) - [CVE-2008-0531](https://cve.now/CVE-2008-0531.md): Heap-based buffer overflow in Cisco Unified IP Phone 7940, 7940G, 7960, and 7960G running SIP firmware might allow remote SIP servers to exe (no CVSS) - [CVE-2008-0777](https://cve.now/CVE-2008-0777.md): The sendfile system call in FreeBSD 5.5 through 7.0 does not check the access flags of the file descriptor used for sending a file, which al (no CVSS) - [CVE-2008-0789](https://cve.now/CVE-2008-0789.md): SQL injection vulnerability in countdown.php in LI-Scripts LI-Countdown allows remote attackers to execute arbitrary SQL commands via the ye (no CVSS) - [CVE-2008-0790](https://cve.now/CVE-2008-0790.md): Directory traversal vulnerability in ipdsserver.exe in Intermate WinIPDS 3.3 G52-33-021 allows remote attackers to read arbitrary files via (no CVSS) - [CVE-2008-0791](https://cve.now/CVE-2008-0791.md): ipdsserver.exe in Intermate WinIPDS 3.3 G52-33-021 allows remote attackers to cause a denial of service (CPU consumption) via short packets (no CVSS) - [CVE-2008-0792](https://cve.now/CVE-2008-0792.md): Multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, F-Secure Protection Serv (no CVSS) - [CVE-2008-0793](https://cve.now/CVE-2008-0793.md): Multiple cross-site scripting (XSS) vulnerabilities in search.asp in Tendenci CMS allow remote attackers to inject arbitrary web script or H (no CVSS) - [CVE-2008-0794](https://cve.now/CVE-2008-0794.md): Directory traversal vulnerability in user/header.php in Affiliate Market 0.1 BETA allows remote attackers to include and execute arbitrary l (no CVSS) - [CVE-2008-0642](https://cve.now/CVE-2008-0642.md): Cross-site scripting (XSS) vulnerability in files created by Adobe RoboHelp 6 and 7, possibly involving use of a (1) WebHelp5 (WebHelp5Ext) (CVSS 6.1) - [CVE-2008-0787](https://cve.now/CVE-2008-0787.md): SQL injection vulnerability in inc/datahandlers/pm.php in MyBB before 1.2.12 allows remote authenticated users to execute arbitrary SQL comm (no CVSS) - [CVE-2008-0788](https://cve.now/CVE-2008-0788.md): Multiple cross-site request forgery (CSRF) vulnerabilities in MyBB 1.2.11 and earlier allow remote attackers to (1) hijack the authenticatio (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2008-02-15 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.