# CVEs published 2008-03-03

16 CVEs were published on March 3, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1127](https://cve.now/CVE-2008-1127.md): Format string vulnerability in the cryactio function in Crysis 1.1.1.5879 allows remote authenticated users to execute arbitrary code via fo (no CVSS)
- [CVE-2008-1128](https://cve.now/CVE-2008-1128.md): PHP remote file inclusion vulnerability in tourney/index.php in phpMyTourney 2 allows remote attackers to execute arbitrary PHP code via a U (no CVSS)
- [CVE-2008-0928](https://cve.now/CVE-2008-0928.md): Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privil (no CVSS)
- [CVE-2008-1119](https://cve.now/CVE-2008-1119.md): Directory traversal vulnerability in include/doc/get\_image.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary fil (no CVSS)
- [CVE-2008-1120](https://cve.now/CVE-2008-1120.md): Format string vulnerability in the embedded Internet Explorer component for Mirabilis ICQ 6 build 6043 allows remote servers to execute arbi (no CVSS)
- [CVE-2008-1121](https://cve.now/CVE-2008-1121.md): SQL injection vulnerability in index.php in eazyPortal 1.0 and earlier allows remote attackers to execute arbitrary SQL commands via the ses (no CVSS)
- [CVE-2008-1122](https://cve.now/CVE-2008-1122.md): SQL injection vulnerability in the downloads module in Koobi Pro 5.7 allows remote attackers to execute arbitrary SQL commands via the categ (no CVSS)
- [CVE-2008-1123](https://cve.now/CVE-2008-1123.md): Multiple PHP remote file inclusion vulnerabilities in SiteBuilder Elite 1.2 allow remote attackers to execute arbitrary PHP code via a URL i (no CVSS)
- [CVE-2008-1124](https://cve.now/CVE-2008-1124.md): Multiple PHP remote file inclusion vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to execute arbitrary P (no CVSS)
- [CVE-2008-1125](https://cve.now/CVE-2008-1125.md): Multiple directory traversal vulnerabilities in Podcast Generator 1.0 BETA 2 and earlier allow remote attackers to read arbitrary files via (no CVSS)
- [CVE-2008-1126](https://cve.now/CVE-2008-1126.md): PHP remote file inclusion vulnerability in main.php in Barryvan Compo Manager 0.3 allows remote attackers to execute arbitrary PHP code via (no CVSS)
- [CVE-2007-6252](https://cve.now/CVE-2007-6252.md): Multiple stack-based buffer overflows in the Learn2 Corporation STRunner (aka Street Technologies) ActiveX control in iestm32.dll allow remo (no CVSS)
- [CVE-2008-1113](https://cve.now/CVE-2008-1113.md): Cisco Unified Wireless IP Phone 7921, when using Protected Extensible Authentication Protocol (PEAP), does not validate server certificates, (no CVSS)
- [CVE-2008-1114](https://cve.now/CVE-2008-1114.md): Vocera Communications wireless handsets, when using Protected Extensible Authentication Protocol (PEAP), do not validate server certificates (no CVSS)
- [CVE-2008-1115](https://cve.now/CVE-2008-1115.md): Unspecified vulnerability in Sun Solaris 8 directory functions allows local users to cause a denial of service (panic) via an unspecified se (no CVSS)
- [CVE-2008-1116](https://cve.now/CVE-2008-1116.md): Insecure method vulnerability in the Web Scan Object ActiveX control (OL2005.dll) in Rising Antivirus Online Scanner allows remote attackers (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-03-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.