# CVEs published 2008-02-28

23 CVEs were published on February 28, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1070](https://cve.now/CVE-2008-1070.md): The SCTP dissector in Wireshark (formerly Ethereal) 0.99.5 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a (no CVSS)
- [CVE-2008-1071](https://cve.now/CVE-2008-1071.md): The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a (no CVSS)
- [CVE-2008-1072](https://cve.now/CVE-2008-1072.md): The TFTP dissector in Wireshark (formerly Ethereal) 0.6.0 through 0.99.7, when running on Ubuntu 7.10, allows remote attackers to cause a de (no CVSS)
- [CVE-2008-0411](https://cve.now/CVE-2008-0411.md): Stack-based buffer overflow in the zseticcspace function in zicc.c in Ghostscript 8.61 and earlier allows remote attackers to execute arbitr (no CVSS)
- [CVE-2008-1067](https://cve.now/CVE-2008-1067.md): Multiple PHP remote file inclusion vulnerabilities in phpQLAdmin 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the (no CVSS)
- [CVE-2008-1068](https://cve.now/CVE-2008-1068.md): Multiple PHP remote file inclusion vulnerabilities in Portail Web Php 2.5.1.1 and earlier allow remote attackers to execute arbitrary PHP co (no CVSS)
- [CVE-2008-1069](https://cve.now/CVE-2008-1069.md): Multiple PHP remote file inclusion vulnerabilities in Quantum Game Library 0.7.2c allow remote attackers to execute arbitrary PHP code via a (no CVSS)
- [CVE-2003-1545](https://cve.now/CVE-2003-1545.md): Absolute path traversal vulnerability in nukestyles.com viewpage.php addon for PHP-Nuke allows remote attackers to read arbitrary files via (no CVSS)
- [CVE-2007-5397](https://cve.now/CVE-2007-5397.md): Heap-based buffer overflow in the activePDF Server service (aka APServer.exe) in activePDF Server 3.8.4 and 3.8.5.14, and possibly other ver (no CVSS)
- [CVE-2008-0124](https://cve.now/CVE-2008-0124.md): Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3-beta1 allows remote authenticated users to inject arbitrary web scr (no CVSS)
- [CVE-2008-0308](https://cve.now/CVE-2008-0308.md): Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31, (no CVSS)
- [CVE-2008-0309](https://cve.now/CVE-2008-0309.md): Stack-based buffer overflow in Symantec Decomposer, as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and (no CVSS)
- [CVE-2008-1063](https://cve.now/CVE-2008-1063.md): Cross-site scripting (XSS) vulnerability index.php in the XM-Memberstats (xmmemberstats) module for XOOPS allows remote attackers to inject (no CVSS)
- [CVE-2008-1064](https://cve.now/CVE-2008-1064.md): Cross-site scripting (XSS) vulnerability in images.php in the Red Mexico RMSOFT Gallery System (GS) 2.0 module (aka rmgs) for XOOPS allows r (no CVSS)
- [CVE-2008-1065](https://cve.now/CVE-2008-1065.md): Multiple SQL injection vulnerabilities in index.php in the XM-Memberstats (xmmemberstats) 2.0e module for XOOPS allow remote attackers to ex (no CVSS)
- [CVE-2008-1066](https://cve.now/CVE-2008-1066.md): The modifier.regex\_replace.php plugin in Smarty before 2.6.19, as used by Serendipity (S9Y) and other products, allows attackers to call arb (no CVSS)
- [CVE-2008-1056](https://cve.now/CVE-2008-1056.md): Multiple stack-based buffer overflows in Symark PowerBroker 2.8 through 5.0.1 allow local users to gain privileges via a long argv\[0\] string (no CVSS)
- [CVE-2008-1057](https://cve.now/CVE-2008-1057.md): The ip6\_check\_rh0hdr function in netinet6/ip6\_input.c in OpenBSD 4.2 allows attackers to cause a denial of service (panic) via malformed IPv (no CVSS)
- [CVE-2008-1058](https://cve.now/CVE-2008-1058.md): The tcp\_respond function in netinet/tcp\_subr.c in OpenBSD 4.1 and 4.2 allows attackers to cause a denial of service (panic) via crafted TCP (no CVSS)
- [CVE-2008-1059](https://cve.now/CVE-2008-1059.md): PHP remote file inclusion vulnerability in modules/syntax\_highlight.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote a (no CVSS)
- [CVE-2008-1060](https://cve.now/CVE-2008-1060.md): Eval injection vulnerability in modules/execute.php in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allows remote attackers to execute (no CVSS)
- [CVE-2008-1061](https://cve.now/CVE-2008-1061.md): Multiple cross-site scripting (XSS) vulnerabilities in the Sniplets 1.1.2 and 1.2.2 plugin for WordPress allow remote attackers to inject ar (no CVSS)
- [CVE-2008-1062](https://cve.now/CVE-2008-1062.md): InterVideo IMC Server (aka IMCSvr.exe) and InterVideo Home Theater (aka IHT.exe) in InterVideo WinDVD Media Center 2.11.15.0 allow remote at (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-02-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.