# CVEs published 2008-03-17

24 CVEs were published on March 17, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1367](https://cve.now/CVE-2008-1367.md): gcc 4.3.x does not generate a cld instruction while compiling functions used for string manipulation such as memcpy and memmove on x86 and i (no CVSS)
- [CVE-2008-1365](https://cve.now/CVE-2008-1365.md): Stack-based buffer overflow in Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and e (no CVSS)
- [CVE-2008-1366](https://cve.now/CVE-2008-1366.md): Trend Micro OfficeScan Corporate Edition 8.0 Patch 2 build 1189 and earlier, and 7.3 Patch 3 build 1314 and earlier, allows remote attackers (no CVSS)
- [CVE-2008-0888](https://cve.now/CVE-2008-0888.md): The NEEDBITS macro in the inflate\_dynamic function in inflate.c for unzip can be invoked using invalid buffers, which allows remote attacker (no CVSS, info-zip unzip)
- [CVE-2008-1353](https://cve.now/CVE-2008-1353.md): zabbix\_agentd in ZABBIX 1.4.4 allows remote attackers to cause a denial of service (CPU and connection consumption) via multiple vfs.file.ck (no CVSS)
- [CVE-2008-1354](https://cve.now/CVE-2008-1354.md): SQL injection vulnerability in MyIssuesView.asp in Advanced Data Solutions Virtual Support Office-XP (VSO-XP) allows remote attackers to exe (no CVSS)
- [CVE-2008-1355](https://cve.now/CVE-2008-1355.md): Cross-site scripting (XSS) vulnerability in index.php in Jeebles Technology Jeebles Directory 2.9.60 allows remote attackers to inject arbit (no CVSS)
- [CVE-2008-1356](https://cve.now/CVE-2008-1356.md): Unspecified vulnerability in xscreensaver in Sun Solaris 10 Java Desktop System (JDS), when using the GNOME On-Screen Keyboard (GOK), allows (no CVSS)
- [CVE-2008-1357](https://cve.now/CVE-2008-1357.md): Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, (no CVSS)
- [CVE-2008-1358](https://cve.now/CVE-2008-1358.md): Stack-based buffer overflow in the IMAP server in Alt-N Technologies MDaemon 9.6.4 allows remote authenticated users to execute arbitrary co (no CVSS)
- [CVE-2008-1359](https://cve.now/CVE-2008-1359.md): Cross-site scripting (XSS) vulnerability in Invision Power Board (IPB or IP.Board) 2.3.4 before 2008-03-13 allows remote attackers to inject (no CVSS)
- [CVE-2008-1360](https://cve.now/CVE-2008-1360.md): Cross-site scripting (XSS) vulnerability in Nagios before 2.11 allows remote attackers to inject arbitrary web script or HTML via unknown ve (no CVSS)
- [CVE-2008-1341](https://cve.now/CVE-2008-1341.md): SQL injection vulnerability in SearchResults.aspx in LaGarde StoreFront 6 before SP8 allows remote attackers to execute arbitrary SQL comman (no CVSS)
- [CVE-2008-1342](https://cve.now/CVE-2008-1342.md): Multiple cross-site scripting (XSS) vulnerabilities in the search feature in Polymita BPM-Suite and CollagePortal allow remote attackers to (no CVSS)
- [CVE-2008-1343](https://cve.now/CVE-2008-1343.md): Directory traversal vulnerability in (1) pkgadd and (2) pkgrm in SCO UnixWare 7.1.4 allows local users to gain privileges via unknown vector (no CVSS)
- [CVE-2008-1344](https://cve.now/CVE-2008-1344.md): Multiple SQL injection vulnerabilities in MyioSoft EasyCalendar 4.0tr and earlier allow remote attackers to execute arbitrary SQL commands v (no CVSS)
- [CVE-2008-1345](https://cve.now/CVE-2008-1345.md): Cross-site scripting (XSS) vulnerability in plugins/calendar/calendar\_backend.php in MyioSoft EasyCalendar 4.0tr and earlier allows remote a (no CVSS)
- [CVE-2008-1346](https://cve.now/CVE-2008-1346.md): SQL injection vulnerability in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allows remote attackers to execut (no CVSS)
- [CVE-2008-1347](https://cve.now/CVE-2008-1347.md): Multiple cross-site scripting (XSS) vulnerabilities in staticpages/easygallery/index.php in MyioSoft EasyGallery 5.0tr and earlier allow rem (no CVSS)
- [CVE-2008-1348](https://cve.now/CVE-2008-1348.md): Cross-site scripting (XSS) vulnerability in index.php in the eWebsite eWeather (Weather) module for PHP-Nuke allows remote attackers to inje (no CVSS)
- [CVE-2008-1349](https://cve.now/CVE-2008-1349.md): SQL injection vulnerability in viewcat.php in the bamaGalerie (Bama Galerie) 3.03 and 3.041 module for eXV2 2.0.6 allows remote attackers to (no CVSS)
- [CVE-2008-1350](https://cve.now/CVE-2008-1350.md): SQL injection vulnerability in kb.php in Fully Modded phpBB (phpbbfm) 80220 allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2008-1351](https://cve.now/CVE-2008-1351.md): SQL injection vulnerability in the Tutorials 2.1b module for XOOPS allows remote attackers to execute arbitrary SQL commands via the tid par (no CVSS)
- [CVE-2008-1352](https://cve.now/CVE-2008-1352.md): Directory traversal vulnerability in search.php in EdiorCMS (ecms) 3.0 allows remote attackers to read arbitrary files via a .. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-03-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.