# CVEs published 2008-04-09

19 CVEs were published on April 9, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2007-0071](https://cve.now/CVE-2007-0071.md): Integer overflow in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code vi (no CVSS)
- [CVE-2007-6019](https://cve.now/CVE-2007-6019.md): Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, allows remote attackers to execute arbitrary code via an SWF file with a (no CVSS)
- [CVE-2008-1655](https://cve.now/CVE-2008-1655.md): Unspecified vulnerability in Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, makes it easier for remote attackers to con (no CVSS)
- [CVE-2008-1712](https://cve.now/CVE-2008-1712.md): PHP remote file inclusion vulnerability in includes/functions\_weblog.php in mxBB mx\_blogs 2.0.0 beta allows remote attackers to execute arbi (no CVSS)
- [CVE-2008-1713](https://cve.now/CVE-2008-1713.md): MailServer.exe in NoticeWare Email Server 4.6.1.0 allows remote attackers to cause a denial of service (application crash) via a long string (no CVSS)
- [CVE-2008-1714](https://cve.now/CVE-2008-1714.md): SQL injection vulnerability in show.php in FaScript FaPhoto 1.0, when magic\_quotes\_gpc is disabled, allows remote attackers to execute arbit (no CVSS)
- [CVE-2008-1715](https://cve.now/CVE-2008-1715.md): SQL injection vulnerability in content/user.php in AuraCMS 2.2.1 and earlier, when magic\_quotes\_gpc is disabled, allows remote attackers to (no CVSS)
- [CVE-2008-1716](https://cve.now/CVE-2008-1716.md): Cross-site scripting (XSS) vulnerability in WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers t (no CVSS)
- [CVE-2008-1717](https://cve.now/CVE-2008-1717.md): WoltLab Community Framework (WCF) 1.0.6 in WoltLab Burning Board 3.0.5 allows remote attackers to obtain the full path via invalid (1) page (no CVSS)
- [CVE-2008-1656](https://cve.now/CVE-2008-1656.md): Adobe ColdFusion 8 and 8.0.1 does not properly implement the public access level for CFC methods, which allows remote attackers to invoke th (no CVSS)
- [CVE-2008-1687](https://cve.now/CVE-2008-1687.md): The (1) maketemp and (2) mkstemp builtin functions in GNU m4 before 1.4.11 do not quote their output when a file is created, which might all (no CVSS)
- [CVE-2008-1688](https://cve.now/CVE-2008-1688.md): Unspecified vulnerability in GNU m4 before 1.4.11 might allow context-dependent attackers to execute arbitrary code, related to improper han (no CVSS)
- [CVE-2008-1705](https://cve.now/CVE-2008-1705.md): Format string vulnerability in the logging function in IBM solidDB 06.00.1018 and earlier allows remote attackers to execute arbitrary code (no CVSS)
- [CVE-2008-1706](https://cve.now/CVE-2008-1706.md): Uncontrolled array index in IBM solidDB 06.00.1018 and earlier allows remote attackers to cause a denial of service (daemon crash) via a lar (no CVSS)
- [CVE-2008-1707](https://cve.now/CVE-2008-1707.md): IBM solidDB 06.00.1018 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a pa (no CVSS)
- [CVE-2008-1708](https://cve.now/CVE-2008-1708.md): IBM solidDB 06.00.1018 and earlier does not validate a certain field that specifies an amount of memory to allocate, which allows remote att (no CVSS)
- [CVE-2008-1709](https://cve.now/CVE-2008-1709.md): Buffer overflow in Microsoft Visual InterDev 6.0 (SP6) allows user-assisted attackers to execute arbitrary code via a Studio Solution (.SLN) (no CVSS)
- [CVE-2008-1710](https://cve.now/CVE-2008-1710.md): Untrusted search path vulnerability in chnfsmnt in IBM AIX 6.1 allows local users to gain privileges via a modified PATH environment variabl (no CVSS)
- [CVE-2008-1711](https://cve.now/CVE-2008-1711.md): Terong PHP Photo Gallery (aka Advanced Web Photo Gallery) 1.0 stores passwords in cleartext in a MySQL database, which allows context-depend (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-04-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.