# CVEs published 2008-03-14

7 CVEs were published on March 14, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0532](https://cve.now/CVE-2008-0532.md): Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Secure Access Control Server (no CVSS)
- [CVE-2008-0533](https://cve.now/CVE-2008-0533.md): Multiple cross-site scripting (XSS) vulnerabilities in securecgi-bin/CSuserCGI.exe in User-Changeable Password (UCP) before 4.2 in Cisco Sec (no CVSS)
- [CVE-2008-1117](https://cve.now/CVE-2008-1117.md): Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu Pro 8.6.5 for Windows (no CVSS)
- [CVE-2008-1118](https://cve.now/CVE-2008-1118.md): Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken fro (no CVSS)
- [CVE-2008-1157](https://cve.now/CVE-2008-1157.md): Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 creates a process that executes a command shell and listens on a randomly chosen (no CVSS)
- [CVE-2008-1337](https://cve.now/CVE-2008-1337.md): The instant message service in Timbuktu Pro 8.6.5 RC 229 and earlier for Windows allows remote attackers to cause (1) a denial of service (d (no CVSS)
- [CVE-2008-1338](https://cve.now/CVE-2008-1338.md): The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon cra (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-03-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.