# CVEs published 2008-02-18

7 CVEs were published on February 18, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6258](https://cve.now/CVE-2007-6258.md): Multiple stack-based buffer overflows in the legacy mod\_jk2 2.0.3-DEV and earlier Apache module allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2008-0556](https://cve.now/CVE-2008-0556.md): Cross-site request forgery (CSRF) vulnerability in OpenCA PKI 0.9.2.5, and possibly earlier versions, allows remote attackers to perform una (no CVSS)
- [CVE-2008-0804](https://cve.now/CVE-2008-0804.md): PHP remote file inclusion vulnerability in usrgetform.html in Thecus N5200Pro NAS Server allows remote attackers to execute arbitrary PHP co (no CVSS)
- [CVE-2008-0805](https://cve.now/CVE-2008-0805.md): Unrestricted file upload vulnerability in image.php in PHPizabi 0.848b C1 HFP1 allows remote attackers to execute arbitrary code by uploadin (no CVSS)
- [CVE-2008-0806](https://cve.now/CVE-2008-0806.md): wyrd 1.4.3b allows local users to overwrite arbitrary files via a symlink attack on the wyrd-tmp.\[USERID\] temporary file. (no CVSS)
- [CVE-2007-6313](https://cve.now/CVE-2007-6313.md): MySQL Server 5.1.x before 5.1.23 and 6.0.x before 6.0.4 does not check the rights of the entity executing BINLOG, which allows remote author (no CVSS)
- [CVE-2008-0674](https://cve.now/CVE-2008-0674.md): Buffer overflow in PCRE before 7.6 allows remote attackers to execute arbitrary code via a regular expression containing a character class w (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-02-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.
