# CVEs published 2008-04-23

11 CVEs were published on April 23, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-1928](https://cve.now/CVE-2008-1928.md): Buffer overflow in Imager 0.42 through 0.63 allows attackers to cause a denial of service (crash) via an image based fill in which the numbe (no CVSS)
- [CVE-2008-1925](https://cve.now/CVE-2008-1925.md): Buffer overflow in InspIRCd before 1.1.18, when using the namesx and uhnames modules, allows remote attackers to cause a denial of service ( (no CVSS)
- [CVE-2008-1926](https://cve.now/CVE-2008-1926.md): Argument injection vulnerability in login (login-utils/login.c) in util-linux-ng 2.14 and earlier makes it easier for remote attackers to hi (no CVSS)
- [CVE-2008-1927](https://cve.now/CVE-2008-1927.md): Double free vulnerability in Perl 5.8.8 allows context-dependent attackers to cause a denial of service (memory corruption and crash) via a (no CVSS)
- [CVE-2008-1923](https://cve.now/CVE-2008-1923.md): The IAX2 channel driver (chan\_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679, when configured to allow unauthenti (no CVSS)
- [CVE-2008-1924](https://cve.now/CVE-2008-1924.md): Unspecified vulnerability in phpMyAdmin before 2.11.5.2, when running on shared hosts, allows remote authenticated users with CREATE table p (no CVSS)
- [CVE-2007-6255](https://cve.now/CVE-2007-6255.md): Buffer overflow in the Microsoft HeartbeatCtl ActiveX control in HRTBEAT.OCX allows remote attackers to execute arbitrary code via the Host (no CVSS)
- [CVE-2008-1385](https://cve.now/CVE-2008-1385.md): Cross-site scripting (XSS) vulnerability in the Top Referrers (aka referrer) plugin in Serendipity (S9Y) before 1.3.1 allows remote attacker (no CVSS)
- [CVE-2008-1386](https://cve.now/CVE-2008-1386.md): Multiple cross-site scripting (XSS) vulnerabilities in the installer in Serendipity (S9Y) 1.3 allow remote attackers to inject arbitrary web (no CVSS)
- [CVE-2008-1765](https://cve.now/CVE-2008-1765.md): Buffer overflow in Adobe Photoshop Album Starter Edition 3.2, and possibly After Effects CS3, allows user-assisted remote attackers and phys (no CVSS)
- [CVE-2008-1897](https://cve.now/CVE-2008-1897.md): The IAX2 channel driver (chan\_iax2) in Asterisk Open Source 1.0.x, 1.2.x before 1.2.28, and 1.4.x before 1.4.19.1; Business Edition A.x.x, B (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-04-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.