# CVEs published 2008-02-27 19 CVEs were published on February 27, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2008-1037](https://cve.now/CVE-2008-1037.md): Cross-site scripting (XSS) vulnerability in the file listing function in the web management interface in Packeteer PacketShaper and PolicyCe (no CVSS) - [CVE-2008-1038](https://cve.now/CVE-2008-1038.md): PHP remote file inclusion vulnerability in mod/mod.extmanager.php in DBHcms 1.1.4 and earlier allows remote attackers to execute arbitrary P (no CVSS) - [CVE-2008-1039](https://cve.now/CVE-2008-1039.md): SQL injection vulnerability in question.asp in PORAR WEBBOARD allows remote attackers to execute arbitrary SQL commands via the QID paramete (no CVSS) - [CVE-2008-1040](https://cve.now/CVE-2008-1040.md): Buffer overflow in the Single Sign-On function in Fujitsu Interstage Application Server 8.0.0 through 8.0.3 and 9.0.0, Interstage Studio 8.0 (no CVSS) - [CVE-2008-1041](https://cve.now/CVE-2008-1041.md): Cross-site scripting (XSS) vulnerability in mwhois.php in Matt Wilson Matt's Whois (MWhois) allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2008-1042](https://cve.now/CVE-2008-1042.md): Directory traversal vulnerability in include/body.inc.php in Linux Web Shop (LWS) php Download Manager 1.0 and 1.1 allows remote attackers t (no CVSS) - [CVE-2008-1043](https://cve.now/CVE-2008-1043.md): PHP remote file inclusion vulnerability in templates/default/header.inc.php in Linux Web Shop (LWS) php User Base 1.3 BETA allows remote att (no CVSS) - [CVE-2008-1044](https://cve.now/CVE-2008-1044.md): Stack-based buffer overflow in the Quantum Streaming Player (Quantum Streaming IE Player) ActiveX control (aka QSP2IE.QSP2IE) in qsp2ie07076 (no CVSS) - [CVE-2008-1045](https://cve.now/CVE-2008-1045.md): Cross-site scripting (XSS) vulnerability in the file tree navigation function in system/workplace/views/explorer/tree\_files.jsp in Alkacon O (no CVSS, org.opencms:opencms-core) - [CVE-2008-1046](https://cve.now/CVE-2008-1046.md): PHP remote file inclusion vulnerability in footer.php in Quinsonnas Mail Checker 1.55 allows remote attackers to execute arbitrary PHP code (no CVSS) - [CVE-2008-1047](https://cve.now/CVE-2008-1047.md): Cross-site scripting (XSS) vulnerability in tiki-edit\_article.php in TikiWiki before 1.9.10.1 allows remote attackers to inject arbitrary we (no CVSS) - [CVE-2008-1048](https://cve.now/CVE-2008-1048.md): Cross-site scripting (XSS) vulnerability in manager/xmedia.php in Plume CMS 1.2.2 allows remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2008-1049](https://cve.now/CVE-2008-1049.md): Unspecified vulnerability in Parallels SiteStudio before 1.7.2, and 1.8.x before 1.8b, as used in Parallels H-Sphere 3.0 before Patch 9 and (no CVSS) - [CVE-2008-1050](https://cve.now/CVE-2008-1050.md): SQL injection vulnerability in index.php in Softbiz Jokes & Funny Pics Script allows remote attackers to execute arbitrary SQL commands via (no CVSS) - [CVE-2008-1051](https://cve.now/CVE-2008-1051.md): PHP remote file inclusion vulnerability in include/body\_comm.inc.php in phpProfiles 4.5.2 BETA allows remote attackers to execute arbitrary (no CVSS) - [CVE-2008-1052](https://cve.now/CVE-2008-1052.md): The administration web interface in NetWin SurgeFTP 2.3a2 and earlier allows remote attackers to cause a denial of service (daemon crash) vi (no CVSS) - [CVE-2008-1053](https://cve.now/CVE-2008-1053.md): Multiple SQL injection vulnerabilities in the Kose\_Yazilari module for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via (no CVSS) - [CVE-2008-1054](https://cve.now/CVE-2008-1054.md): Stack-based buffer overflow in the \_lib\_spawn\_user\_getpid function in (1) swatch.exe and (2) surgemail.exe in NetWin SurgeMail 38k4 and earl (no CVSS) - [CVE-2008-1055](https://cve.now/CVE-2008-1055.md): Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote at (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2008-02-27 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.