# CVEs published 2008-04-08

22 CVEs were published on April 8, 2008: 0 critical, 1 high. Days are UTC.

- [CVE-2008-0083](https://cve.now/CVE-2008-0083.md): The (1) VBScript (VBScript.dll) and (2) JScript (JScript.dll) scripting engines 5.1 and 5.6, as used in Microsoft Windows 2000 SP4, XP SP2, (no CVSS)
- [CVE-2008-0087](https://cve.now/CVE-2008-0087.md): The DNS client in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, and Vista uses predictable DNS transaction IDs, which allows (no CVSS)
- [CVE-2008-1083](https://cve.now/CVE-2008-1083.md): Heap-based buffer overflow in the CreateDIBPatternBrushPt function in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vi (CVSS 8.1)
- [CVE-2008-1084](https://cve.now/CVE-2008-1084.md): Unspecified vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, through Vista SP1, and Server 2008 a (no CVSS)
- [CVE-2008-1085](https://cve.now/CVE-2008-1085.md): Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 through SP1, and 7 allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2008-1086](https://cve.now/CVE-2008-1086.md): The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and (no CVSS)
- [CVE-2008-1087](https://cve.now/CVE-2008-1087.md): Stack-based buffer overflow in GDI in Microsoft Windows 2000 SP4, XP SP2, Server 2003 SP1 and SP2, Vista, and Server 2008 allows remote atta (no CVSS)
- [CVE-2008-1088](https://cve.now/CVE-2008-1088.md): Microsoft Project 2000 Service Release 1, 2002 SP1, and 2003 SP2 allows user-assisted remote attackers to execute arbitrary code via a craft (no CVSS)
- [CVE-2008-1089](https://cve.now/CVE-2008-1089.md): Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute (no CVSS)
- [CVE-2008-1090](https://cve.now/CVE-2008-1090.md): Unspecified vulnerability in Microsoft Visio 2002 SP2, 2003 SP2 and SP3, and 2007 up to SP1 allows user-assisted remote attackers to execute (no CVSS)
- [CVE-2008-0711](https://cve.now/CVE-2008-0711.md): Unspecified vulnerability in the embedded management console in HP iLO-2 Management Processors (iLO-2 MP), as used in Integrity Servers rx26 (no CVSS)
- [CVE-2008-1617](https://cve.now/CVE-2008-1617.md): Double free vulnerability in Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attacke (no CVSS)
- [CVE-2008-1686](https://cve.now/CVE-2008-1686.md): Array index vulnerability in Speex 1.1.12 and earlier, as used in libfishsound 0.9.0 and earlier, including Illiminable DirectShow Filters a (no CVSS)
- [CVE-2008-1700](https://cve.now/CVE-2008-1700.md): The Web TransferCtrl Class 8,2,1,4 (iManFile.cab), as used in WorkSite Web 8.2 before SP1 P2, allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2008-1701](https://cve.now/CVE-2008-1701.md): Novell NetWare 6.5 allows attackers to cause a denial of service (ABEND) via a crafted Macintosh iPrint client request. (no CVSS)
- [CVE-2008-1702](https://cve.now/CVE-2008-1702.md): Absolute path traversal vulnerability in dload.php in the my\_gallery 2.3 plugin for e107 allows remote attackers to obtain sensitive informa (no CVSS)
- [CVE-2008-0312](https://cve.now/CVE-2008-0312.md): Stack-based buffer overflow in the AutoFix Support Tool ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton products, includ (no CVSS)
- [CVE-2008-0313](https://cve.now/CVE-2008-0313.md): The ActiveDataInfo.LaunchProcess method in the SymAData.ActiveDataInfo.1 ActiveX control 2.7.0.1 in SYMADATA.DLL in multiple Symantec Norton (no CVSS)
- [CVE-2008-1696](https://cve.now/CVE-2008-1696.md): Directory traversal vulnerability in makepost.php in DaZPHPNews 0.1-1, when register\_globals is enabled and magic\_quotes\_gpc is disabled, al (no CVSS)
- [CVE-2008-1697](https://cve.now/CVE-2008-1697.md): Stack-based buffer overflow in ovwparser.dll in HP OpenView Network Node Manager (OV NNM) 7.53, 7.51, and earlier allows remote attackers to (no CVSS)
- [CVE-2008-1698](https://cve.now/CVE-2008-1698.md): Cross-site scripting (XSS) vulnerability in gallery.php in Simple Gallery 2.2 allows remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2008-1699](https://cve.now/CVE-2008-1699.md): SQL injection vulnerability in permalink.php in Desi Quintans Writer's Block CMS 3.8a allows remote attackers to execute arbitrary SQL comma (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-04-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.