# CVEs published 2008-02-29

17 CVEs were published on February 29, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6016](https://cve.now/CVE-2007-6016.md): Multiple stack-based buffer overflows in the PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the (no CVSS)
- [CVE-2007-6017](https://cve.now/CVE-2007-6017.md): The PVATLCalendar.PVCalendar.1 ActiveX control in pvcalendar.ocx in the scheduler component in the Media Server in Symantec Backup Exec for (no CVSS)
- [CVE-2008-0304](https://cve.now/CVE-2008-0304.md): Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitra (no CVSS)
- [CVE-2008-0385](https://cve.now/CVE-2008-0385.md): SQL injection vulnerability in server/widgetallocator.php in Urulu 2.1 allows remote attackers to execute arbitrary SQL commands via the con (no CVSS)
- [CVE-2008-0595](https://cve.now/CVE-2008-0595.md): dbus-daemon in D-Bus before 1.0.3, and 1.1.x before 1.1.20, recognizes send\_interface attributes in allow directives in the security policy (no CVSS)
- [CVE-2008-1110](https://cve.now/CVE-2008-1110.md): Buffer overflow in demuxers/demux\_asf.c (aka the ASF demuxer) in the xineplug\_dmx\_asf.so plugin in xine-lib before 1.1.10 allows remote atta (no CVSS)
- [CVE-2008-1095](https://cve.now/CVE-2008-1095.md): Unspecified vulnerability in the Internet Protocol (IP) implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intende (no CVSS)
- [CVE-2008-0303](https://cve.now/CVE-2008-0303.md): The FTP print feature in multiple Canon printers, including imageRUNNER and imagePRESS, allow remote attackers to use the server as an inadv (no CVSS)
- [CVE-2008-1078](https://cve.now/CVE-2008-1078.md): expn in the am-utils and net-fs packages for Gentoo, rPath Linux, and other distributions, allows local users to overwrite arbitrary files v (no CVSS)
- [CVE-2008-1080](https://cve.now/CVE-2008-1080.md): Opera before 9.26 allows user-assisted remote attackers to read arbitrary files by tricking a user into typing the characters of the target (no CVSS)
- [CVE-2008-1081](https://cve.now/CVE-2008-1081.md): Opera before 9.26 allows user-assisted remote attackers to execute arbitrary script via images that contain custom comments, which are treat (no CVSS)
- [CVE-2008-1082](https://cve.now/CVE-2008-1082.md): Opera before 9.26 allows remote attackers to "bypass sanitization filters" and conduct cross-site scripting (XSS) attacks via crafted attrib (no CVSS)
- [CVE-2008-1073](https://cve.now/CVE-2008-1073.md): Cross-site scripting (XSS) vulnerability in the report interface in Internet Security Systems (ISS) Internet Scanner 7.0 Service Pack 2 Buil (no CVSS)
- [CVE-2008-1074](https://cve.now/CVE-2008-1074.md): PHP remote file inclusion vulnerability in lib/head\_auth.php in GROUP-E 1.6.41 allows remote attackers to execute arbitrary PHP code via a U (no CVSS)
- [CVE-2008-1075](https://cve.now/CVE-2008-1075.md): Cross-site scripting (XSS) vulnerability in index.php in Maian Cart 1.1 allows remote attackers to inject arbitrary web script or HTML via t (no CVSS)
- [CVE-2008-1076](https://cve.now/CVE-2008-1076.md): Cross-site scripting (XSS) vulnerability in search.php in Interspire Shopping Cart 1.x allows remote attackers to inject arbitrary web scrip (no CVSS)
- [CVE-2008-1077](https://cve.now/CVE-2008-1077.md): SQL injection vulnerability in index.php in the Simpleboard (com\_simpleboard) 1.0.3 Stable component for Mambo and Joomla! allows remote att (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-02-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.