# CVEs published 2008-04-16

60 CVEs were published on April 16, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2007-6713](https://cve.now/CVE-2007-6713.md): Unspecified vulnerability in Flip4Mac WMV before 2.2.0.49 has unknown impact and attack vectors related to malformed WMV files. (no CVSS)
- [CVE-2008-1854](https://cve.now/CVE-2008-1854.md): Unspecified vulnerability in SmarterMail Web Server (SMWebSvr.exe) in SmarterMail 5.0.2999 allows remote attackers to cause a denial of serv (no CVSS)
- [CVE-2008-1855](https://cve.now/CVE-2008-1855.md): FrameworkService.exe in McAfee Common Management Agent (CMA) 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator (ePO) and Protec (no CVSS)
- [CVE-2008-1856](https://cve.now/CVE-2008-1856.md): plugins/maps/db\_handler.php in LinPHA 1.3.3 and earlier does not require authentication for a settings action that modifies the configuratio (no CVSS)
- [CVE-2008-1857](https://cve.now/CVE-2008-1857.md): Multiple directory traversal vulnerabilities in viewsource.php in Make our Life Easy (Mole) 2.1.0 allow remote attackers to read arbitrary f (no CVSS)
- [CVE-2008-1858](https://cve.now/CVE-2008-1858.md): SQL injection vulnerability in index.php in 724Networks 724CMS 4.01 and earlier allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2008-1859](https://cve.now/CVE-2008-1859.md): SQL injection vulnerability in events.php in iScripts SocialWare allows remote attackers to execute arbitrary SQL commands via the id parame (no CVSS)
- [CVE-2007-5664](https://cve.now/CVE-2007-5664.md): db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 before Fix Pack 4a, and 8 before F (no CVSS)
- [CVE-2007-5758](https://cve.now/CVE-2007-5758.md): Stack-based buffer overflow in db2dasrrm in the DB2 Administration Server (DAS) in IBM DB2 Universal Database 9.5 before Fix Pack 1, 9.1 bef (no CVSS)
- [CVE-2008-0068](https://cve.now/CVE-2008-0068.md): Directory traversal vulnerability in OpenView5.exe in HP OpenView Network Node Manager (OV NNM) 7.01, 7.51, and 7.53 allows remote attackers (no CVSS)
- [CVE-2008-0892](https://cve.now/CVE-2008-0892.md): The replication monitor CGI script (repl-monitor-cgi.pl) in Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and E (no CVSS)
- [CVE-2008-0893](https://cve.now/CVE-2008-0893.md): Red Hat Administration Server, as used by Red Hat Directory Server 8.0 EL4 and EL5, does not properly restrict access to CGI scripts, which (no CVSS)
- [CVE-2008-1851](https://cve.now/CVE-2008-1851.md): ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of (no CVSS)
- [CVE-2008-1852](https://cve.now/CVE-2008-1852.md): ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of (no CVSS)
- [CVE-2008-1853](https://cve.now/CVE-2008-1853.md): The ovtopmd service in HP OpenView Network Node Manager (OV NNM) 7.51, 7.53, and possibly other versions allows remote attackers to cause a (no CVSS)
- [CVE-2008-1155](https://cve.now/CVE-2008-1155.md): Cisco Network Admission Control (NAC) Appliance 3.5.x, 3.6.x before 3.6.4.4, 4.0.x before 4.0.6, and 4.1.x before 4.1.2 allows remote attack (no CVSS)
- [CVE-2008-1786](https://cve.now/CVE-2008-1786.md): The DSM gui\_cm\_ctrls ActiveX control (gui\_cm\_ctrls.ocx), as used in multiple CA products including BrightStor ARCServe Backup for Laptops an (no CVSS)
- [CVE-2008-1838](https://cve.now/CVE-2008-1838.md): SQL injection vulnerability in BosClassifieds Classified Ads System 3.0 allows remote attackers to execute arbitrary SQL commands via the ca (no CVSS)
- [CVE-2008-1839](https://cve.now/CVE-2008-1839.md): Multgiple cross-site scripting (XSS) vulnerabilities in module/main.php in WORK system e-commerce 4.0.9 allow remote attackers to inject arb (no CVSS)
- [CVE-2008-1840](https://cve.now/CVE-2008-1840.md): SQL injection vulnerability in upload.php in Coppermine Photo Gallery (CPG) 1.4.16 and earlier allows remote authenticated users or user-ass (no CVSS)
- [CVE-2008-1841](https://cve.now/CVE-2008-1841.md): SQL injection vulnerability in the session handling functionality in bridge/coppermine.inc.php in Coppermine Photo Gallery (CPG) 1.4.17 and (no CVSS)
- [CVE-2008-1842](https://cve.now/CVE-2008-1842.md): Integer signedness error in ovspmd.exe in HP OpenView Network Node Manager (OV NNM) 8.01, and 7.53 and earlier, allows remote attackers to c (no CVSS)
- [CVE-2008-1843](https://cve.now/CVE-2008-1843.md): SQL injection vulnerability in browse.php in W2B DatingClub (aka Dating Club) allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-1844](https://cve.now/CVE-2008-1844.md): SQL injection vulnerability in cat.php in W2B phpHotResources allows remote attackers to execute arbitrary SQL commands via the kind paramet (no CVSS)
- [CVE-2008-1845](https://cve.now/CVE-2008-1845.md): The Korn shell (aka mksh) before R33d on MirOS (aka MirBSD) does not flush the tty's I/O when invoking mksh in a new terminal, which allows (no CVSS)
- [CVE-2008-1846](https://cve.now/CVE-2008-1846.md): The default configuration of SAP NetWeaver before 7.0 SP15 does not enable the "Always Use Secure HTML Editor" (aka Editor Security or Secur (no CVSS)
- [CVE-2008-1847](https://cve.now/CVE-2008-1847.md): SQL injection vulnerability in view.php in CoronaMatrix phpAddressBook 2.11 allows remote attackers to execute arbitrary SQL commands via th (no CVSS)
- [CVE-2008-1848](https://cve.now/CVE-2008-1848.md): Cross-site scripting (XSS) vulnerability in the joomlaXplorer (com\_joomlaxplorer) Mambo/Joomla! component 1.6.2 and earlier allows remote at (no CVSS)
- [CVE-2008-1849](https://cve.now/CVE-2008-1849.md): Directory traversal vulnerability in index.php in the joomlaXplorer (com\_joomlaxplorer) Mambo/Joomla! component 1.6.2 and earlier allows rem (no CVSS)
- [CVE-2008-1850](https://cve.now/CVE-2008-1850.md): Multiple cross-site scripting (XSS) vulnerabilities in login.php in Omnistar Interactive OSI Affiliate allow remote attackers to inject arbi (no CVSS)
- [CVE-2008-1387](https://cve.now/CVE-2008-1387.md): ClamAV before 0.93 allows remote attackers to cause a denial of service (CPU consumption) via a crafted ARJ archive, as demonstrated by the (no CVSS)
- [CVE-2008-1834](https://cve.now/CVE-2008-1834.md): swfdec\_load\_object.c in Swfdec before 0.6.4 does not properly restrict local file access from untrusted sandboxes, which allows remote attac (no CVSS)
- [CVE-2008-1835](https://cve.now/CVE-2008-1835.md): ClamAV before 0.93 allows remote attackers to bypass the scanning enging via a RAR file with an invalid version number, which cannot be pars (no CVSS)
- [CVE-2008-1836](https://cve.now/CVE-2008-1836.md): The rfc2231 function in message.c in libclamav in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via a craf (no CVSS)
- [CVE-2008-1837](https://cve.now/CVE-2008-1837.md): libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger "memory p (no CVSS)
- [CVE-2008-0314](https://cve.now/CVE-2008-0314.md): Heap-based buffer overflow in spin.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted PeSpin pa (no CVSS)
- [CVE-2008-1771](https://cve.now/CVE-2008-1771.md): Integer overflow in the ws\_getpostvars function in Firefly Media Server (formerly mt-daapd) 0.2.4.1 (0.9~r1696-1.2 on Debian) allows remote (no CVSS)
- [CVE-2008-1832](https://cve.now/CVE-2008-1832.md): lib/prefs.tcl in Cecilia 2.0.5 allows local users to overwrite arbitrary files via a symlink attack on the csvers temporary file. (no CVSS)
- [CVE-2008-1833](https://cve.now/CVE-2008-1833.md): Heap-based buffer overflow in pe.c in libclamav in ClamAV 0.92.1 allows remote attackers to execute arbitrary code via a crafted WWPack comp (no CVSS)
- [CVE-2008-1811](https://cve.now/CVE-2008-1811.md): Unspecified vulnerability in Oracle Application Express 3.0.1 has unspecified impact and remote authenticated attack vectors related to flow (no CVSS)
- [CVE-2008-1812](https://cve.now/CVE-2008-1812.md): Unspecified vulnerability in the Oracle Enterprise Manager component in Oracle Database 9.0.1.5 FIPS+; Application Server 1.0.2.2; and Enter (no CVSS)
- [CVE-2008-1813](https://cve.now/CVE-2008-1813.md): Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown impact and re (no CVSS)
- [CVE-2008-1814](https://cve.now/CVE-2008-1814.md): Unspecified vulnerability in the Oracle Secure Enterprise Search or Ultrasearch component in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8 (no CVSS)
- [CVE-2008-1815](https://cve.now/CVE-2008-1815.md): Unspecified vulnerability in the Change Data Capture component in Oracle Database 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and re (no CVSS)
- [CVE-2008-1816](https://cve.now/CVE-2008-1816.md): Multiple unspecified vulnerabilities in Oracle Database 10.1.0.5 and 10.2.0.3 have unknown impact and remote authenticated attack vectors re (no CVSS)
- [CVE-2008-1817](https://cve.now/CVE-2008-1817.md): Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.3, and 11.1.0.6 have unknown imp (no CVSS)
- [CVE-2008-1818](https://cve.now/CVE-2008-1818.md): Unspecified vulnerability in the Authentication component in Oracle Database 11.1.0.6 has unknown impact and remote attack vectors, aka DB08 (no CVSS)
- [CVE-2008-1819](https://cve.now/CVE-2008-1819.md): Unspecified vulnerability in the Oracle Net Services component in Oracle Database 9.2.0.8, 10.1.0.5, and 10.2.0.3 has unknown impact and loc (no CVSS)
- [CVE-2008-1820](https://cve.now/CVE-2008-1820.md): Unspecified vulnerability in the Data Pump component in Oracle Database 9.2.0.8, 10.1.0.5, 10.2.0.3, and 11.1.0.6 has unknown impact and rem (no CVSS)
- [CVE-2008-1821](https://cve.now/CVE-2008-1821.md): Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.0.1.5 FIPS+, and 10.1.0.5 has unknown impact and remote att (no CVSS)
- [CVE-2008-1822](https://cve.now/CVE-2008-1822.md): Unspecified vulnerability in the Oracle Application Express component in Oracle Application Express 3.0.1 has unknown impact and remote atta (no CVSS)
- [CVE-2008-1823](https://cve.now/CVE-2008-1823.md): Unspecified vulnerability in the Oracle Jinitiator component in Oracle Application Server 1.3.1.14 has unknown impact and remote attack vect (no CVSS)
- [CVE-2008-1824](https://cve.now/CVE-2008-1824.md): Unspecified vulnerability in the Oracle Dynamic Monitoring Service component in Oracle Application Server 9.0.4.3, 10.1.2.2, and 10.1.3.3 ha (no CVSS)
- [CVE-2008-1825](https://cve.now/CVE-2008-1825.md): Unspecified vulnerability in the Oracle Portal component in Oracle Application Server 9.0.4.3 has unknown impact and remote attack vectors, (no CVSS)
- [CVE-2008-1826](https://cve.now/CVE-2008-1826.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 have unknown impact and attack vectors related to (a) Advanced Pri (no CVSS)
- [CVE-2008-1827](https://cve.now/CVE-2008-1827.md): Multiple unspecified vulnerabilities in Oracle E-Business Suite 11.5.10.2 and 12.0.4 have unknown impact and attack vectors related to (a) A (no CVSS)
- [CVE-2008-1828](https://cve.now/CVE-2008-1828.md): Unspecified vulnerability in the PeopleSoft PeopleTools component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.22.19, 8.48 (no CVSS)
- [CVE-2008-1829](https://cve.now/CVE-2008-1829.md): Unspecified vulnerability in the PeopleSoft HCM Recruiting component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1 ha (no CVSS)
- [CVE-2008-1830](https://cve.now/CVE-2008-1830.md): Unspecified vulnerability in the PeopleSoft HCM ePerformance component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 and (no CVSS)
- [CVE-2008-1831](https://cve.now/CVE-2008-1831.md): Multiple unspecified vulnerabilities in the Siebel SimBuilder component in Oracle Siebel Enterprise 7.8.2 and 7.8.5 have unknown impact and (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-04-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.