# CVEs published 2008-02-25

25 CVEs were published on February 25, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0973](https://cve.now/CVE-2008-0973.md): Buffer overflow in Double-Take (aka HP StorageWorks Storage Mirroring) 4.5.0.1629, and other 4.5.0.x versions, allows remote attackers to ha (no CVSS)
- [CVE-2008-0974](https://cve.now/CVE-2008-0974.md): Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to (no CVSS)
- [CVE-2008-0975](https://cve.now/CVE-2008-0975.md): Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to (no CVSS)
- [CVE-2008-0976](https://cve.now/CVE-2008-0976.md): Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to (no CVSS)
- [CVE-2008-0977](https://cve.now/CVE-2008-0977.md): Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to (no CVSS)
- [CVE-2008-0978](https://cve.now/CVE-2008-0978.md): Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to (no CVSS)
- [CVE-2008-0979](https://cve.now/CVE-2008-0979.md): Stack consumption vulnerability in Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and othe (no CVSS)
- [CVE-2008-0980](https://cve.now/CVE-2008-0980.md): Multiple cross-site scripting (XSS) vulnerabilities in Spyce - Python Server Pages (PSP) 2.1.3 allow remote attackers to inject arbitrary we (no CVSS)
- [CVE-2008-0981](https://cve.now/CVE-2008-0981.md): Open redirect vulnerability in spyce/examples/redirect.spy in Spyce - Python Server Pages (PSP) 2.1.3 allows remote attackers to redirect us (no CVSS)
- [CVE-2008-0982](https://cve.now/CVE-2008-0982.md): Spyce - Python Server Pages (PSP) 2.1.3 allows remote attackers to obtain sensitive information via a direct request for spyce/examples/auto (no CVSS)
- [CVE-2008-0932](https://cve.now/CVE-2008-0932.md): diatheke.pl in The SWORD Project Diatheke 1.5.9 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters i (no CVSS)
- [CVE-2008-0941](https://cve.now/CVE-2008-0941.md): Cross-site scripting (XSS) vulnerability in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 allows remote authenticated users to injec (no CVSS)
- [CVE-2008-0942](https://cve.now/CVE-2008-0942.md): SQL injection vulnerability in GradebookStuScores.asp in Eagle Software Aeries Browser Interface (ABI) 3.8.2.8 allows remote attackers to ex (no CVSS)
- [CVE-2008-0943](https://cve.now/CVE-2008-0943.md): Multiple SQL injection vulnerabilities in Eagle Software Aeries Browser Interface (ABI) 3.7.2.2 allow remote attackers to execute arbitrary (no CVSS)
- [CVE-2008-0944](https://cve.now/CVE-2008-0944.md): Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote attackers to cause a denial of service (NULL dereference and application c (no CVSS)
- [CVE-2008-0945](https://cve.now/CVE-2008-0945.md): Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 an (no CVSS)
- [CVE-2008-0946](https://cve.now/CVE-2008-0946.md): Directory traversal vulnerability in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows r (no CVSS)
- [CVE-2008-0939](https://cve.now/CVE-2008-0939.md): Multiple SQL injection vulnerabilities in wppa.php in the WP Photo Album (WPPA) before 1.1 plugin for WordPress allow remote attackers to ex (no CVSS)
- [CVE-2008-0940](https://cve.now/CVE-2008-0940.md): Cross-site scripting (XSS) vulnerability in Plain Black WebGUI before 7.4.24 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2008-0933](https://cve.now/CVE-2008-0933.md): Multiple race conditions in the CPU Performance Counters (cpc) subsystem in the kernel in Sun Solaris 10 allow local users to cause a denial (no CVSS)
- [CVE-2008-0934](https://cve.now/CVE-2008-0934.md): SQL injection vulnerability in modules.php in the NukeC 2.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2008-0935](https://cve.now/CVE-2008-0935.md): Stack-based buffer overflow in the Novell iPrint Control ActiveX control in ienipp.ocx in Novell iPrint Client before 4.34 allows remote att (no CVSS)
- [CVE-2008-0936](https://cve.now/CVE-2008-0936.md): SQL injection vulnerability in index.php in the Prayer List (prayerlist) 1.04 module for XOOPS allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2008-0937](https://cve.now/CVE-2008-0937.md): SQL injection vulnerability in index.php in the Tiny Event (tinyevent) 1.01 module for XOOPS allows remote attackers to execute arbitrary SQ (no CVSS)
- [CVE-2008-0938](https://cve.now/CVE-2008-0938.md): Unspecified vulnerability in the dynamic tracing framework (DTrace) in Sun Solaris 10 allows local users with PRIV\_DTRACE\_USER or PRIV\_DTRAC (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-02-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.