# CVEs published 2008-02-21

40 CVEs were published on February 21, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0894](https://cve.now/CVE-2008-0894.md): Apple Safari might allow remote attackers to obtain potentially sensitive memory contents or cause a denial of service (crash) via a crafted (no CVSS)
- [CVE-2007-4516](https://cve.now/CVE-2007-4516.md): The Volume Manager Scheduler Service (aka VxSchedService.exe) in Symantec Veritas Storage Foundation 5.0 for Windows allows remote attackers (no CVSS)
- [CVE-2008-0638](https://cve.now/CVE-2008-0638.md): Heap-based buffer overflow in the Veritas Enterprise Administrator (VEA) service (aka vxsvc.exe) in Symantec Veritas Storage Foundation 5.0 (no CVSS)
- [CVE-2008-0871](https://cve.now/CVE-2008-0871.md): Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute arbitrary code via a ( (no CVSS)
- [CVE-2008-0872](https://cve.now/CVE-2008-0872.md): Cross-site scripting (XSS) vulnerability in SmarterTools SmarterMail Enterprise 4.3 allows remote attackers to inject arbitrary web script o (no CVSS)
- [CVE-2008-0873](https://cve.now/CVE-2008-0873.md): SQL injection vulnerability in index.php in the jlmZone Classifieds module for XOOPS allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2008-0874](https://cve.now/CVE-2008-0874.md): SQL injection vulnerability in index.php in the eEmpregos module for XOOPS allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-0875](https://cve.now/CVE-2008-0875.md): Unspecified vulnerability in Hitachi EUR Print Manager, and related Client and Local Server products, 05-06 through 05-06-/B and 05-08 allow (no CVSS)
- [CVE-2008-0876](https://cve.now/CVE-2008-0876.md): Unspecified vulnerability in the SEWB3 messaging service in Hitachi SEWB3/PLATFORM and SEWB3/MI-PLATFORM 01-00 through 02-14-/A allows remot (no CVSS)
- [CVE-2008-0877](https://cve.now/CVE-2008-0877.md): Multiple cross-site scripting (XSS) vulnerabilities in Jinzora Media Jukebox 2.7.5 allow remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2008-0878](https://cve.now/CVE-2008-0878.md): SQL injection vulnerability in index.php in the MyAnnonces 1.7 and earlier module for RunCMS allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2008-0879](https://cve.now/CVE-2008-0879.md): SQL injection vulnerability in modules.php in the Web\_Links module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2008-0880](https://cve.now/CVE-2008-0880.md): SQL injection vulnerability in modules.php in the EasyContent module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2008-0881](https://cve.now/CVE-2008-0881.md): SQL injection vulnerability in modules.php in the Okul 1.0 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-0882](https://cve.now/CVE-2008-0882.md): Double free vulnerability in the process\_browse\_data function in CUPS 1.3.5 allows remote attackers to cause a denial of service (daemon cra (no CVSS)
- [CVE-2008-0861](https://cve.now/CVE-2008-0861.md): Cross-site scripting (XSS) vulnerability in leg/Main.nsf in IBM Lotus Quickplace 7.0 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2008-0862](https://cve.now/CVE-2008-0862.md): IBM Lotus Notes 6.0, 6.5, 7.0, and 8.0 signs an unsigned applet when a user forwards an email message to another user, which allows user-ass (no CVSS)
- [CVE-2008-0863](https://cve.now/CVE-2008-0863.md): BEA WebLogic Server and WebLogic Express 9.0 and 9.1 exposes the web service's WSDL and security policies, which allows remote attackers to (no CVSS)
- [CVE-2008-0864](https://cve.now/CVE-2008-0864.md): Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page (no CVSS)
- [CVE-2008-0865](https://cve.now/CVE-2008-0865.md): Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to bypass entitlements for instances of a floatable (no CVSS)
- [CVE-2008-0866](https://cve.now/CVE-2008-0866.md): Multiple cross-site scripting (XSS) vulnerabilities in BEA WebLogic Workshop allow remote attackers to inject arbitrary web script or HTML v (no CVSS)
- [CVE-2008-0867](https://cve.now/CVE-2008-0867.md): Cross-site scripting (XSS) vulnerability in portal/server.pt in BEA AquaLogic Interaction 6.1 through MP1 and Plumtree Foundation 6.0 throug (no CVSS)
- [CVE-2008-0868](https://cve.now/CVE-2008-0868.md): Cross-site scripting (XSS) vulnerability in Groupspace in BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 1 allows remote authenti (no CVSS)
- [CVE-2008-0869](https://cve.now/CVE-2008-0869.md): Cross-site scripting (XSS) vulnerability in BEA WebLogic Workshop 8.1 through SP6 and Workshop for WebLogic 9.0 through 10.0 allows remote a (no CVSS)
- [CVE-2008-0870](https://cve.now/CVE-2008-0870.md): BEA WebLogic Portal 10.0 and 9.2 through Maintenance Pack 2, under certain circumstances, can redirect a user from the https:// URI for the (no CVSS)
- [CVE-2007-6426](https://cve.now/CVE-2007-6426.md): Multiple heap-based buffer overflows in EMC RepliStor 6.2 SP2, and possibly earlier versions, allow remote attackers to execute arbitrary co (no CVSS)
- [CVE-2008-0847](https://cve.now/CVE-2008-0847.md): SQL injection vulnerability in print.php in the myTopics module for XOOPS allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-0848](https://cve.now/CVE-2008-0848.md): Cross-site scripting (XSS) vulnerability in lostsheep.php in Crafty Syntax Live Help (CSLH) before 2.14.16, allows remote attackers to injec (no CVSS)
- [CVE-2008-0849](https://cve.now/CVE-2008-0849.md): SQL injection vulnerability in index.php in the Downloads (com\_downloads) component for Mambo and Joomla! allows remote attackers to execute (no CVSS)
- [CVE-2008-0850](https://cve.now/CVE-2008-0850.md): Multiple SQL injection vulnerabilities in Dokeos 1.8.4 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to (no CVSS)
- [CVE-2008-0851](https://cve.now/CVE-2008-0851.md): Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 allow remote attackers to inject arbitrary web script or HTML via the (1 (no CVSS)
- [CVE-2008-0852](https://cve.now/CVE-2008-0852.md): freeSSHd 1.2 and earlier allows remote attackers to cause a denial of service (crash) via a SSH2\_MSG\_NEWKEYS packet to TCP port 22, which tr (no CVSS)
- [CVE-2008-0853](https://cve.now/CVE-2008-0853.md): SQL injection vulnerability in the com\_detail component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-0854](https://cve.now/CVE-2008-0854.md): SQL injection vulnerability in the com\_salesrep component for Joomla! and Mambo allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2008-0855](https://cve.now/CVE-2008-0855.md): SQL injection vulnerability in the Facile Forms (com\_facileforms) component for Joomla! and Mambo allows remote attackers to execute arbitra (no CVSS)
- [CVE-2008-0856](https://cve.now/CVE-2008-0856.md): Multiple SQL injection vulnerabilities in e-Vision CMS 2.02 allow remote attackers to execute arbitrary SQL commands via the id parameter to (no CVSS)
- [CVE-2008-0857](https://cve.now/CVE-2008-0857.md): SQL injection vulnerability in index.php in WoltLab Burning Board 3.0.3 PL 1 allows remote attackers to execute arbitrary SQL commands via t (no CVSS)
- [CVE-2008-0858](https://cve.now/CVE-2008-0858.md): Buffer overflow in the Visnetic anti-virus plugin in Kerio MailServer before 6.5.0 might allow remote attackers to execute arbitrary code vi (no CVSS)
- [CVE-2008-0859](https://cve.now/CVE-2008-0859.md): Unspecified vulnerability in Kerio MailServer before 6.5.0 allows remote attackers to cause a denial of service (crash) via unspecified vect (no CVSS)
- [CVE-2008-0860](https://cve.now/CVE-2008-0860.md): Unspecified vulnerability in the AVG plugin in Kerio MailServer before 6.5.0 has unspecified impact via unknown remote attack vectors relate (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-02-21
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.