# CVEs published 2008-04-25

14 CVEs were published on April 25, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0712](https://cve.now/CVE-2008-0712.md): Unspecified vulnerability in the HP HPeDiag (aka eSupportDiagnostics) ActiveX control in hpediag.dll in HP Software Update 4.000.009.002 and (no CVSS)
- [CVE-2008-1964](https://cve.now/CVE-2008-1964.md): Stack-based buffer overflow in the demux\_nsf\_send\_headers function in src/demuxers/demux\_nsf.c in xine-lib allows remote attackers to have a (no CVSS)
- [CVE-2008-1965](https://cve.now/CVE-2008-1965.md): Argument injection vulnerability in the cai: URI handler in rcplauncher in IBM Lotus Expeditor Client for Desktop 6.1.1 and 6.1.2, as used b (no CVSS)
- [CVE-2008-1953](https://cve.now/CVE-2008-1953.md): Cross-site scripting (XSS) vulnerability in the Sitedesigner before 1.1.5 search template in Magnolia Enterprise Edition allows remote attac (no CVSS)
- [CVE-2008-1954](https://cve.now/CVE-2008-1954.md): SQL injection vulnerability in one\_day.php in Web Calendar Pro 4.1 and earlier allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2008-1955](https://cve.now/CVE-2008-1955.md): Cross-site scripting (XSS) vulnerability in rep.php in Martin BOUCHER MyBoard 1.0.12 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2008-1956](https://cve.now/CVE-2008-1956.md): Cross-site scripting (XSS) vulnerability in index.php in Wikepage Opus 13 2007.2 allows remote attackers to inject arbitrary web script or H (no CVSS)
- [CVE-2008-1957](https://cve.now/CVE-2008-1957.md): SQL injection vulnerability in news.php in Tr Script News 2.1 allows remote attackers to execute arbitrary SQL commands via the nb parameter (no CVSS)
- [CVE-2008-1958](https://cve.now/CVE-2008-1958.md): Unrestricted file upload vulnerability in the ajout\_cat mode in admin/main.php in Tr Script News 2.1 allows remote authenticated users to ex (no CVSS)
- [CVE-2008-1959](https://cve.now/CVE-2008-1959.md): Stack-based buffer overflow in the get\_remote\_video\_port\_media function in call.cpp in SIPp 3.0 allows remote attackers to cause a denial of (no CVSS)
- [CVE-2008-1960](https://cve.now/CVE-2008-1960.md): Cross-site scripting (XSS) vulnerability in cgi-bin/contray/search.cgi in ContRay 3.x allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2008-1961](https://cve.now/CVE-2008-1961.md): SQL injection vulnerability in index.php in Voice Of Web AllMyGuests 0.4.1 allows remote attackers to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2008-1962](https://cve.now/CVE-2008-1962.md): Multiple directory traversal vulnerabilities in Aterr 0.9.1 allow remote attackers to include and execute arbitrary local files via a .. (no CVSS)
- [CVE-2008-1963](https://cve.now/CVE-2008-1963.md): PHP remote file inclusion vulnerability in includes/functions.php in Quate Grape Web Statistics 0.2a allows remote attackers to execute arbi (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-04-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.