# CVEs published 2008-03-13 19 CVEs were published on March 13, 2008: 0 critical, 0 high. Days are UTC. - [CVE-2007-6707](https://cve.now/CVE-2007-6707.md): Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware a (no CVSS) - [CVE-2007-6708](https://cve.now/CVE-2007-6708.md): Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier fir (no CVSS) - [CVE-2007-6709](https://cve.now/CVE-2007-6709.md): The Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware has "admin" as its default password for the "admin" acco (no CVSS) - [CVE-2008-1334](https://cve.now/CVE-2008-1334.md): cgi/b on the BT Home Hub router allows remote attackers to bypass authentication, and read or modify administrative settings or make arbitra (no CVSS) - [CVE-2008-1335](https://cve.now/CVE-2008-1335.md): The ipsec4\_get\_ulp function in the kernel in NetBSD 2.0 through 3.1 and NetBSD-current before 20071028, when the fast\_ipsec subsystem is ena (no CVSS) - [CVE-2008-1336](https://cve.now/CVE-2008-1336.md): SQL injection vulnerability in Koobi CMS 4.2.3 through 4.3.0 allows remote attackers to execute arbitrary SQL commands via the categ paramet (no CVSS) - [CVE-2008-1315](https://cve.now/CVE-2008-1315.md): SQL injection vulnerability in the ZClassifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat pa (no CVSS) - [CVE-2008-1316](https://cve.now/CVE-2008-1316.md): SQL injection vulnerability in qtf\_ind\_search\_ov.php in QT-cute QuickTalk Forum 1.6 and earlier allows remote attackers to execute arbitrary (no CVSS) - [CVE-2008-1317](https://cve.now/CVE-2008-1317.md): Unspecified vulnerability in the Inter-Process Communication (IPC) message queue subsystem in Sun Solaris 10 allows local users to cause a d (no CVSS) - [CVE-2008-1318](https://cve.now/CVE-2008-1318.md): Unspecified vulnerability in MediaWiki 1.11 before 1.11.2 allows remote attackers to obtain sensitive "cross-site" information via the callb (no CVSS) - [CVE-2008-1319](https://cve.now/CVE-2008-1319.md): Untrusted search path and argument injection vulnerability in the VersantD service in Versant Object Database 7.0.1.3 and earlier, as used i (no CVSS) - [CVE-2008-1320](https://cve.now/CVE-2008-1320.md): Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary code or cause a denial (no CVSS) - [CVE-2008-1321](https://cve.now/CVE-2008-1321.md): The FxIAList service in ASG-Sentry Network Manager 7.0.0 and earlier does require authentication, which allows remote attackers to cause a d (no CVSS) - [CVE-2008-1322](https://cve.now/CVE-2008-1322.md): The File Check Utility (fcheck.exe) in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service (CP (no CVSS) - [CVE-2008-1323](https://cve.now/CVE-2008-1323.md): Cross-site request forgery (CSRF) vulnerability in index.php in WoltLab Burning Board Lite (wBB) 2 Beta 1 allows remote attackers to delete (no CVSS) - [CVE-2008-1324](https://cve.now/CVE-2008-1324.md): Multiple directory traversal vulnerabilities in index.php in Travelsized CMS 0.4.1 allow remote attackers to include and execute arbitrary l (no CVSS) - [CVE-2008-1325](https://cve.now/CVE-2008-1325.md): Multiple directory traversal vulnerabilities in index.php in Uberghey CMS 0.3.1 allow remote attackers to include and execute arbitrary loca (no CVSS) - [CVE-2008-1326](https://cve.now/CVE-2008-1326.md): Cross-site scripting (XSS) vulnerability in search.php in Gallarific allows remote attackers to inject arbitrary web script or HTML via the (no CVSS) - [CVE-2008-1327](https://cve.now/CVE-2008-1327.md): Gallarific does not require authentication for (1) users.php and (2) index.php, which allows remote attackers to add and edit tasks via a di (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2008-03-13 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.