# CVEs published 2008-03-11

22 CVEs were published on March 11, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2006-4695](https://cve.now/CVE-2006-4695.md): Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute ar (no CVSS)
- [CVE-2007-1201](https://cve.now/CVE-2007-1201.md): Unspecified vulnerability in certain COM objects in Microsoft Office Web Components 2000 allows user-assisted remote attackers to execute ar (no CVSS)
- [CVE-2008-0110](https://cve.now/CVE-2008-0110.md): Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3, XP SP3, 2003 SP2 and Sp3, and Office System allows user-assisted remote a (no CVSS)
- [CVE-2008-0111](https://cve.now/CVE-2008-0111.md): Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office 2004 for Mac allows user-ass (no CVSS)
- [CVE-2008-0112](https://cve.now/CVE-2008-0112.md): Unspecified vulnerability in Microsoft Excel 2000 SP3, and Office for Mac 2004 and 2008 allows user-assisted remote attackers to execute arb (no CVSS)
- [CVE-2008-0113](https://cve.now/CVE-2008-0113.md): Unspecified vulnerability in Microsoft Office Excel Viewer 2003 up to SP3 allows user-assisted remote attackers to execute arbitrary code vi (no CVSS)
- [CVE-2008-0114](https://cve.now/CVE-2008-0114.md): Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office for Mac 2004 allows user-assisted remote att (no CVSS)
- [CVE-2008-0115](https://cve.now/CVE-2008-0115.md): Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2007, Viewer 2003, Compatibility Pack, and Office for Mac 2004 allows user-ass (no CVSS)
- [CVE-2008-0116](https://cve.now/CVE-2008-0116.md): Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, Compatibility Pack, and Office 2004 and 2008 for Mac allows user-assisted remote att (no CVSS)
- [CVE-2008-0117](https://cve.now/CVE-2008-0117.md): Unspecified vulnerability in Microsoft Excel 2000 SP3 and 2002 SP2, and Office 2004 and 2008 for Mac, allows user-assisted remote attackers (no CVSS)
- [CVE-2008-0118](https://cve.now/CVE-2008-0118.md): Unspecified vulnerability in Microsoft Office 2000 SP3, XP SP3, 2003 SP2, Excel Viewer 2003 up to SP3, and Office 2004 for Mac allows user-a (no CVSS)
- [CVE-2008-0300](https://cve.now/CVE-2008-0300.md): mapFiler.php in Mapbender 2.4 to 2.4.4 allows remote attackers to execute arbitrary PHP code via PHP code sequences in the factor parameter, (no CVSS)
- [CVE-2008-0301](https://cve.now/CVE-2008-0301.md): Multiple SQL injection vulnerabilities in Mapbender 2.4.4 allow remote attackers to execute arbitrary SQL commands via the gaz parameter to (no CVSS)
- [CVE-2008-0306](https://cve.now/CVE-2008-0306.md): sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environ (no CVSS)
- [CVE-2008-0307](https://cve.now/CVE-2008-0307.md): Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code vi (no CVSS)
- [CVE-2008-1285](https://cve.now/CVE-2008-1285.md): Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2\_08 allows remote attackers to inject arbitrary web sc (no CVSS, com.sun.faces:jsf-api)
- [CVE-2008-1286](https://cve.now/CVE-2008-1286.md): Unspecified vulnerability in Sun Java Web Console 3.0.2, 3.0.3, and 3.0.4 allows remote attackers to bypass intended access restrictions and (no CVSS)
- [CVE-2008-1287](https://cve.now/CVE-2008-1287.md): IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 generates different error messages depending on whether the username is valid or invalid, which (no CVSS)
- [CVE-2008-1288](https://cve.now/CVE-2008-1288.md): IBM Rational ClearQuest 7.0.1.1 and 7.0.0.2 might allow local or remote attackers to obtain sensitive information about users by reading use (no CVSS)
- [CVE-2004-2759](https://cve.now/CVE-2004-2759.md): Shared Sun StorEdge QFS and SAM-QFS file systems, as used in Utilization Suite 4.0 through 4.1 and Performance Suite 4.0 through 4.1, might (no CVSS)
- [CVE-2008-1283](https://cve.now/CVE-2008-1283.md): Cross-site scripting (XSS) vulnerability in Neptune Web Server 3.0 allows remote attackers to inject arbitrary web script or HTML via the UR (no CVSS)
- [CVE-2008-1284](https://cve.now/CVE-2008-1284.md): Directory traversal vulnerability in Horde 3.1.6, Groupware before 1.0.5, and Groupware Webmail Edition before 1.0.6, when running with cert (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-03-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.