# CVEs published 2008-03-28

20 CVEs were published on March 28, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2005-4874](https://cve.now/CVE-2005-4874.md): The XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP TRACE method, which allows remote attackers to obtain (1) proxy authentication (no CVSS)
- [CVE-2008-0704](https://cve.now/CVE-2008-0704.md): Unspecified vulnerability in the SSH server in HP OpenVMS TCP/IP Services on OpenVMS on the Alpha platform with 5.4 before ECO 7, and on the (no CVSS)
- [CVE-2008-1542](https://cve.now/CVE-2008-1542.md): Airspan Base Station Distribution Unit (BSDU) has "topsecret" as its password for the root account, which allows remote attackers to obtain (no CVSS)
- [CVE-2008-1543](https://cve.now/CVE-2008-1543.md): The Advanced User Interface Pages in the ProST Web Management component on the Airspan WiMAX ProST have a certain default User ID and passwo (no CVSS)
- [CVE-2008-1544](https://cve.now/CVE-2008-1544.md): The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 5.01, 6, and 7 does not block dangerous HTTP request (no CVSS)
- [CVE-2008-1545](https://cve.now/CVE-2008-1545.md): The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 7 does not restrict the dangerous Transfer-Encoding (no CVSS)
- [CVE-2008-1546](https://cve.now/CVE-2008-1546.md): servlet/MIMEReceiveServlet in the web controller for Mitsubishi Electric GB-50 and GB-50A air-conditioning control systems allows remote att (no CVSS)
- [CVE-2008-0924](https://cve.now/CVE-2008-0924.md): Stack-based buffer overflow in the DoLBURPRequest function in libnldap in ndsd in Novell eDirectory 8.7.3.9 and earlier, and 8.8.1 and earli (no CVSS)
- [CVE-2008-0926](https://cve.now/CVE-2008-0926.md): The SOAP interface to the eMBox module in Novell eDirectory 8.7.3.9 and earlier, and 8.8.x before 8.8.2, relies on client-side authenticatio (no CVSS)
- [CVE-2008-1534](https://cve.now/CVE-2008-1534.md): Multiple directory traversal vulnerabilities in PowerPHPBoard 1.00b allow remote attackers to include and execute arbitrary local files via (no CVSS)
- [CVE-2008-1535](https://cve.now/CVE-2008-1535.md): SQL injection vulnerability in the Matti Kiviharju rekry (aka com\_rekry or rekry!Joom) 1.0.0 component for Joomla! allows remote attackers t (no CVSS)
- [CVE-2008-1536](https://cve.now/CVE-2008-1536.md): Cross-site scripting (XSS) vulnerability in index.php in Pictures Pro (aka Tim Grissett) Photo Cart 4.1 allows remote attackers to inject ar (no CVSS)
- [CVE-2008-1537](https://cve.now/CVE-2008-1537.md): Directory traversal vulnerability in pb\_inc/admincenter/index.php in PowerScripts PowerBook 1.21 allows remote attackers to include and exec (no CVSS)
- [CVE-2008-1538](https://cve.now/CVE-2008-1538.md): Cross-site scripting (XSS) vulnerability in searchAction.do in ManageEngine EventLog Analyzer 5 allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2008-1539](https://cve.now/CVE-2008-1539.md): SQL injection vulnerability in includes/dynamic\_titles.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execute arbitrary SQL com (no CVSS)
- [CVE-2008-1540](https://cve.now/CVE-2008-1540.md): SQL injection vulnerability in the Datsogallery (com\_datsogallery) 1.3.1 module for Joomla! and Mambo allows remote attackers to execute arb (no CVSS)
- [CVE-2008-1541](https://cve.now/CVE-2008-1541.md): Directory traversal vulnerability in cgi-bin/his-webshop.pl in HIS Webshop 2.50 allows remote attackers to read arbitrary files via a .. (no CVSS)
- [CVE-2008-1240](https://cve.now/CVE-2008-1240.md): LiveConnect in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 does not properly parse the content origin for jar: URIs before se (no CVSS)
- [CVE-2008-1532](https://cve.now/CVE-2008-1532.md): Perlbal before 1.70, when buffered upload is enabled, allows remote attackers to cause a denial of service (crash) via a zero-byte chunked u (no CVSS)
- [CVE-2008-1533](https://cve.now/CVE-2008-1533.md): Unspecified vulnerability in the XML-RPC Blogger API plugin in Joomla! 1.5 allows remote attackers to perform unauthorized article operation (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-03-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.